$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa File: 0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa (raw, json) Hash identifier: AHnLcns8ioIBQMrqn47VxnA+eUYZJCu+Px3xa6UgQKI= Subject key identifier: 04:11:D6:94:16:0C:77:55:60:7D:C5:C4:63:38:79:7D:2D:71:A8:74 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584EA79D57BCD3659CE3C83AA980 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33322 IP address blocks: 72.1.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:57:bc:d3:65:9c:e3:c8:3a:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dce122a1-e7a8-41d9-a932-38a0ff466e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:1b:68:39:ad:f3:ca:9f:cf:27:4c:04:1e: f8:65:92:a7:44:28:a7:1e:01:83:99:22:b8:af:f9: 52:5a:c0:22:59:46:b1:20:6b:49:9c:92:94:f2:ba: 58:9e:20:05:8d:ae:61:e0:43:4a:d0:59:10:3e:ad: 78:4b:3c:1e:53:39:a0:1c:9f:f5:fa:bf:ea:2e:73: 20:55:ef:3c:b3:a6:e5:06:e4:2c:1a:15:4d:7f:b0: 38:bf:76:eb:9b:d8:cb:46:6b:a7:25:7c:90:93:39: c9:6b:85:08:56:d5:ba:d5:86:b1:0e:bc:9d:34:e0: a9:6c:54:3d:3f:b9:35:94:28:fd:0a:a0:36:84:88: e9:bb:38:fc:32:9e:c4:d2:fd:00:b8:67:f0:f8:11: 8b:84:f2:77:2d:c7:39:46:26:0f:e2:83:6c:c0:44: 5a:1a:4c:cd:52:77:11:34:80:40:7d:ed:f3:14:a5: 4e:9e:d2:65:e4:5a:77:bd:6f:a6:15:6e:14:4f:91: 6b:64:7c:9b:c1:d6:e9:70:40:c1:99:9a:50:d2:17: f3:49:31:d3:a6:7a:fc:fb:a8:65:be:7b:78:c5:5f: c4:45:7d:89:dd:79:fe:78:be:8c:88:41:19:31:49: 00:82:17:6b:a1:06:64:3d:6a:59:83:d2:55:78:1a: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:11:D6:94:16:0C:77:55:60:7D:C5:C4:63:38:79:7D:2D:71:A8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 72.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:93:d4:10:d3:b3:21:91:d1:2f:b5:37:e5:6a:1a:cb:b2:61: 22:40:0c:bd:54:a3:de:8e:ed:ff:c1:5d:75:f7:1d:1f:d0:8a: 07:39:3d:ca:f9:5a:88:5d:da:a9:df:da:c4:52:52:18:f4:8a: ab:78:1a:58:d8:91:bd:1f:89:70:e3:16:28:b6:60:cb:be:f8: f0:5d:b2:07:4f:94:79:00:e9:f5:9e:71:31:ac:96:20:a1:27: ef:75:43:8b:1d:24:ef:97:a3:aa:8a:3d:7e:21:7f:d4:31:b6: 58:09:f9:f0:cd:13:4c:a9:e1:51:72:3c:ca:f3:af:8b:8b:b0: d1:20:4e:c5:56:e9:44:7b:c9:34:17:24:28:0d:f2:ea:39:51: c7:0f:be:9a:25:14:b6:5f:ce:17:3c:59:e9:7c:f6:36:1c:a8: 3f:de:02:e4:42:29:f2:dc:80:96:29:6f:19:bb:69:94:fa:6f: 91:05:8e:41:8a:c2:f8:2b:29:b5:1f:a5:f5:80:6d:e3:a6:c9: a5:0b:a7:8a:2c:39:27:6f:65:50:6d:48:91:ac:63:f3:d5:20: 30:13:ea:b3:5b:89:20:f2:be:f7:54:f2:dd:07:d9:64:cb:f2: 18:c0:be:8d:78:7e:4c:7f:0e:dd:9b:c8:62:96:e9:c9:3e:b5: 40:78:25:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnVe802Wc48g6qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGNlMTIyYTEtZTdhOC00MWQ5LWE5MzItMzhhMGZmNDY2ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTQbaDmt88qfzydMBB74ZZKnRCinHgGDmSK4 r/lSWsAiWUaxIGtJnJKU8rpYniAFja5h4ENK0FkQPq14SzweUzmgHJ/1+r/qLnMg Ve88s6blBuQsGhVNf7A4v3brm9jLRmunJXyQkznJa4UIVtW61YaxDrydNOCpbFQ9 P7k1lCj9CqA2hIjpuzj8Mp7E0v0AuGfw+BGLhPJ3Lcc5RiYP4oNswERaGkzNUncR NIBAfe3zFKVOntJl5Fp3vW+mFW4UT5FrZHybwdbpcEDBmZpQ0hfzSTHTpnr8+6hl vnt4xV/ERX2J3Xn+eL6MiEEZMUkAghdroQZkPWpZg9JVeBqIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQR1pQWDHdVYH3FxGM4eX0tcah0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMGRlOGE5ZWMtYmZjNC0z ZTgwLWI4ZmEtNjdkNzhiNWIxODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqT1BDTsyGR0S+1N+VqGsuyYSJADL1Uo96O7f/BXXX3HR/Qigc5Pcr5 Wohd2qnf2sRSUhj0iqt4GljYkb0fiXDjFii2YMu++PBdsgdPlHkA6fWecTGsliCh J+91Q4sdJO+Xo6qKPX4hf9QxtlgJ+fDNE0yp4VFyPMrzr4uLsNEgTsVW6UR7yTQX JCgN8uo5UccPvpolFLZfzhc8Wel89jYcqD/eAuRCKfLcgJYpbxm7aZT6b5EFjkGK wvgrKbUfpfWAbeOmyaULp4osOSdvZVBtSJGsY/PVIDAT6rNbiSDyvvdU8t0H2WTL 8hjAvo14fkx/Dt2byGKW6ck+tUB4JeA= -----END CERTIFICATE-----Generated at Wed Aug 26 16:11:30 2026 by rpki-client