$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/625736b5-8d63-38de-90f9-8eb34d4b07f5.roa File: 625736b5-8d63-38de-90f9-8eb34d4b07f5.roa (raw, json) Hash identifier: qtnfq/onmvm9PD3RSolo9NR49sIUcO5lX3QnA5yRjls= Subject key identifier: FA:3F:D7:96:6D:3A:92:78:76:F1:18:48:4A:CE:2F:A3:BA:35:31:50 Certificate issuer: /CN=84fee7be-44c4-4c81-86f1-daf3b83d2f4f Certificate serial: 010D0C9F4328584EBAA33176C524D7B73EB56620 Authority key identifier: DC:DE:89:A7:0F:3B:71:EA:C9:0A:AC:06:5D:98:38:CE:A5:19:10:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/625736b5-8d63-38de-90f9-8eb34d4b07f5.roa Signing time: Tue 04 Aug 2026 21:17:41 +0000 ROA not before: Tue 04 Aug 2026 21:17:41 +0000 ROA not after: Mon 02 Nov 2026 22:17:41 +0000 asID: 395846 IP address blocks: 162.255.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ba:a3:31:76:c5:24:d7:b7:3e:b5:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84fee7be-44c4-4c81-86f1-daf3b83d2f4f Validity Not Before: Aug 4 21:17:41 2026 GMT Not After : Nov 2 22:17:41 2026 GMT Subject: CN=83a6ddec-7b9a-4b39-85a7-ae13cab91154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:96:59:b2:f2:e7:27:9f:f6:95:63:fb:fd:4c: 3e:91:c0:7e:64:18:49:47:55:42:d7:c9:0b:f8:8b: 77:01:b7:de:7a:9d:0b:2e:31:81:93:a0:3f:c0:7b: 11:76:4e:ba:29:4e:6b:6d:e6:41:ba:4d:eb:02:39: ec:bb:21:0f:c7:aa:e8:5f:cc:43:fa:42:c4:86:82: 74:3a:35:fd:f8:f2:92:85:b3:dd:a6:9c:5a:f8:d7: 29:14:8d:a3:1d:37:94:8a:9e:8e:c4:8a:dd:4f:81: a3:47:49:4d:eb:42:a9:4a:ec:03:66:71:c5:e6:23: 21:cc:cb:76:5e:7c:59:d6:eb:eb:62:0a:15:4e:07: 4f:c9:ea:fc:08:fc:15:94:af:f6:31:34:60:d6:98: b6:b5:68:50:4f:87:40:7e:98:be:82:6c:65:cc:22: a8:70:f4:d5:24:3b:17:6e:2a:eb:97:29:e4:e1:80: d9:1d:17:d7:19:14:38:65:d1:03:bf:33:4c:99:5f: b1:0b:3f:5e:d8:80:3e:c4:33:fd:8b:1f:5b:4d:cc: af:2e:25:0b:e6:60:61:97:ac:a3:d4:71:cb:13:a0: 41:35:a4:8e:f7:78:61:c3:80:98:5c:05:aa:1d:fe: 73:db:2c:e5:ea:0d:7c:d6:d7:4c:05:2f:e4:59:57: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3F:D7:96:6D:3A:92:78:76:F1:18:48:4A:CE:2F:A3:BA:35:31:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/625736b5-8d63-38de-90f9-8eb34d4b07f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.crl X509v3 Authority Key Identifier: keyid:DC:DE:89:A7:0F:3B:71:EA:C9:0A:AC:06:5D:98:38:CE:A5:19:10:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer sbgp-ipAddrBlock: critical IPv4: 162.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7c:65:de:a3:b9:a7:02:7b:53:4c:b3:42:06:ff:58:b1:f8: 75:8b:63:a2:a0:1f:22:72:29:56:35:bb:cc:66:3f:3b:be:07: cf:92:e8:ca:17:0d:30:42:ac:bf:88:7a:72:ca:94:c1:a3:87: 71:4a:e4:9f:95:52:90:ec:8a:42:0b:e7:bb:c3:93:87:a6:d8: d4:b4:df:ae:65:92:c6:8c:91:db:e5:0f:89:16:91:41:4a:45: 20:ba:5c:f3:c0:78:24:99:2f:9e:03:14:87:ea:ae:90:98:ef: b4:f0:57:1f:18:ad:93:c3:e8:69:e7:1e:24:84:d2:07:e9:46: 2c:3d:7b:98:6e:97:88:d6:f1:69:95:74:27:75:58:b1:44:78: 91:67:65:ea:6f:d6:f6:2b:61:85:3e:46:e9:ab:2c:48:6a:fd: 5a:13:63:ab:06:c8:97:89:df:42:3c:f8:02:40:3d:67:78:3b: 97:4d:bc:1c:ad:b5:80:42:69:ce:0f:61:f7:91:b3:a8:08:30: 72:3f:22:f1:07:10:00:45:a2:4b:f3:a2:e9:2b:b2:5e:3a:bc: f6:91:70:92:90:b1:ac:2e:74:44:99:c3:10:b2:a4:2e:59:7c: f1:a4:9e:4d:dd:70:71:da:d7:3b:37:12:80:08:97:ba:de:6d: 4b:8e:97:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66ozF2xSTXtz61ZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRmZWU3YmUtNDRjNC00YzgxLTg2ZjEtZGFmM2I4M2Qy ZjRmMB4XDTI2MDgwNDIxMTc0MVoXDTI2MTEwMjIyMTc0MVowLzEtMCsGA1UEAxMk ODNhNmRkZWMtN2I5YS00YjM5LTg1YTctYWUxM2NhYjkxMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJZZsvLnJ5/2lWP7/Uw+kcB+ZBhJR1VC18kL +It3Abfeep0LLjGBk6A/wHsRdk66KU5rbeZBuk3rAjnsuyEPx6roX8xD+kLEhoJ0 OjX9+PKShbPdppxa+NcpFI2jHTeUip6OxIrdT4GjR0lN60KpSuwDZnHF5iMhzMt2 XnxZ1uvrYgoVTgdPyer8CPwVlK/2MTRg1pi2tWhQT4dAfpi+gmxlzCKocPTVJDsX birrlynk4YDZHRfXGRQ4ZdEDvzNMmV+xCz9e2IA+xDP9ix9bTcyvLiUL5mBhl6yj 1HHLE6BBNaSO93hhw4CYXAWqHf5z2yzl6g181tdMBS/kWVfncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo/15ZtOpJ4dvEYSErOL6O6NTFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84NGZl ZTdiZS00NGM0LTRjODEtODZmMS1kYWYzYjgzZDJmNGYvNjI1NzM2YjUtOGQ2My0z OGRlLTkwZjktOGViMzRkNGIwN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvODRmZWU3YmUtNDRjNC00YzgxLTg2 ZjEtZGFmM2I4M2QyZjRmLzg0ZmVlN2JlLTQ0YzQtNGM4MS04NmYxLWRhZjNiODNk MmY0Zi5jcmwwHwYDVR0jBBgwFoAU3N6Jpw87cerJCqwGXZg4zqUZEF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi84NGZlZTdiZS00NGM0LTRjODEtODZmMS1kYWYz YjgzZDJmNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ8Zd6juacCe1NMs0IG/1ix+HWLY6KgHyJyKVY1u8xmPzu+B8+S6MoX DTBCrL+IenLKlMGjh3FK5J+VUpDsikIL57vDk4em2NS0365lksaMkdvlD4kWkUFK RSC6XPPAeCSZL54DFIfqrpCY77TwVx8YrZPD6GnnHiSE0gfpRiw9e5hul4jW8WmV dCd1WLFEeJFnZepv1vYrYYU+RumrLEhq/VoTY6sGyJeJ30I8+AJAPWd4O5dNvByt tYBCac4PYfeRs6gIMHI/IvEHEABFokvzoukrsl46vPaRcJKQsawudESZwxCypC5Z fPGknk3dcHHa1zs3EoAIl7rebUuOl5o= -----END CERTIFICATE-----Generated at Mon Aug 10 12:34:57 2026 by rpki-client