$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json) Hash identifier: tVmxUkr/hU6CVbnzW31BRF7Hok5SY57KhISPDldjKbU= Subject key identifier: 8C:25:96:E9:6C:A8:DC:7E:68:10:D0:69:D7:E2:03:F7:F0:D1:6C:08 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584E4559EF91E17B4AB21F652620 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 396998 IP address blocks: 64.68.193.0/24 maxlen: 24 2620:49:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ef:91:e1:7b:4a:b2:1f:65:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=4fa51af6-95c0-4a80-be97-18fd976562e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:e1:62:4f:2e:ae:47:b8:4b:fa:cb:44:d1: ac:f9:90:ea:e4:69:fb:a5:44:4b:20:ca:48:60:d5: 72:65:51:0d:0e:7c:0f:b3:71:dc:d4:23:26:70:79: 3f:d6:7e:82:37:e1:8b:6c:bd:f3:3d:6a:75:d0:a8: fc:35:65:bb:fb:d6:6e:df:7d:b4:ba:3d:af:fd:a6: 38:0b:92:c0:52:7a:4e:75:65:60:dd:09:33:15:dd: 33:55:30:fe:79:76:c8:e0:c6:f2:b5:84:3a:08:e9: 24:8f:e5:e8:be:b4:43:f9:35:f2:1b:f7:2a:da:e6: f4:e5:63:58:a9:e0:1d:9f:a1:e0:ad:6c:62:bb:5e: 4a:fe:cf:16:2e:b4:6e:32:57:7f:de:c9:72:77:51: 7c:6d:f4:04:13:64:94:24:5a:f5:34:ea:e5:12:7b: 4e:64:cf:5e:e9:c2:9d:f9:42:87:89:fa:d0:6d:27: 27:49:24:f1:02:75:6b:e8:e4:37:17:66:ca:e1:e0: c1:e5:cd:17:79:42:23:e1:a5:39:82:b4:4d:37:27: f8:a6:c7:9c:1f:b6:cb:d7:03:ed:70:b8:80:e1:cb: bd:20:31:d4:06:a7:76:71:fd:32:4a:c5:de:7d:25: 8e:91:29:9f:f3:d7:d7:e9:73:1a:a0:c7:32:ac:75: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:25:96:E9:6C:A8:DC:7E:68:10:D0:69:D7:E2:03:F7:F0:D1:6C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.193.0/24 IPv6: 2620:49:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:72:99:f8:6d:9a:3a:bd:c1:0c:e9:82:30:da:1d:6b:65:a1: 07:4a:36:d6:69:8c:3e:09:66:a4:69:da:ad:d4:08:63:37:eb: 59:74:c9:3e:6e:61:1b:6f:b1:ed:bd:12:37:c8:0e:a0:01:22: c3:e2:26:72:bb:9f:59:3c:66:c3:3f:cb:a1:4d:c0:b5:9a:4f: 3c:0e:0f:47:54:d6:1a:07:cb:ce:fe:ce:68:3a:50:a1:80:3f: b5:37:6b:47:cc:5c:33:70:a8:96:2a:6d:d7:ce:81:57:92:35: 0a:be:ef:c2:cd:72:a5:47:6a:5b:86:0b:02:b8:71:60:50:24: c6:c4:e5:9b:8b:2e:da:6f:a3:db:ff:85:38:4b:61:a9:0c:ce: e0:e5:7d:f4:28:7a:6a:f0:e4:49:32:18:38:71:a8:41:77:bf: 45:57:85:6d:9d:79:3c:f2:90:fa:cd:e2:32:be:ae:a7:07:1d: 9f:5a:8e:c6:a7:ea:19:9b:03:1a:9f:fe:3f:63:8b:dd:f8:1e: 5e:24:79:0c:01:14:fe:4a:d7:9f:1d:12:96:07:ea:f1:ac:77: 36:c1:04:72:45:28:bf:a7:0d:36:61:f3:3b:dc:74:c7:d6:52: 6e:5a:2e:36:e2:d9:e3:b8:85:58:ad:c7:4c:89:3e:84:1c:87: e1:0a:e6:02 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5FWe+R4XtKsh9lJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NGZhNTFhZjYtOTVjMC00YTgwLWJlOTctMThmZDk3NjU2MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorvhYk8urke4S/rLRNGs+ZDq5Gn7pURLIMpI YNVyZVENDnwPs3Hc1CMmcHk/1n6CN+GLbL3zPWp10Kj8NWW7+9Zu3320uj2v/aY4 C5LAUnpOdWVg3QkzFd0zVTD+eXbI4MbytYQ6COkkj+XovrRD+TXyG/cq2ub05WNY qeAdn6HgrWxiu15K/s8WLrRuMld/3slyd1F8bfQEE2SUJFr1NOrlEntOZM9e6cKd +UKHifrQbScnSSTxAnVr6OQ3F2bK4eDB5c0XeUIj4aU5grRNNyf4psecH7bL1wPt cLiA4cu9IDHUBqd2cf0ySsXefSWOkSmf89fX6XMaoMcyrHWEwwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIwllulsqNx+aBDQadfiA/fw0WwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASHKZ+G2aOr3BDOmCMNoda2WhB0o21mmM PglmpGnardQIYzfrWXTJPm5hG2+x7b0SN8gOoAEiw+ImcrufWTxmwz/LoU3AtZpP PA4PR1TWGgfLzv7OaDpQoYA/tTdrR8xcM3Colipt186BV5I1Cr7vws1ypUdqW4YL ArhxYFAkxsTlm4su2m+j2/+FOEthqQzO4OV99Ch6avDkSTIYOHGoQXe/RVeFbZ15 PPKQ+s3iMr6upwcdn1qOxqfqGZsDGp/+P2OL3fgeXiR5DAEU/krXnx0Slgfq8ax3 NsEEckUov6cNNmHzO9x0x9ZSblouNuLZ47iFWK3HTIk+hByH4QrmAg== -----END CERTIFICATE-----Generated at Tue Jul 7 15:44:13 2026 by rpki-client