$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa File: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (raw, json) Hash identifier: /YuDIzdRrotLGpmvbsYwXUgyfeMLgW+lglJNzoAEyhs= Subject key identifier: F3:F3:2F:19:CE:AA:77:9E:8B:C4:FF:02:A5:B0:D0:7B:DA:41:EE:D5 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584E5D14A7D82462A657A45794A0 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 18855 IP address blocks: 160.223.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:a7:d8:24:62:a6:57:a4:57:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=7bc4f518-a302-4884-abbd-7248a7beed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:d7:ba:1a:71:f3:e5:3c:4c:74:1c:59:57: 03:25:e2:a2:7f:11:84:13:ae:45:70:9e:b7:08:b1: b7:ff:41:c5:59:5c:48:0d:5d:fb:40:81:c8:f5:f0: 4a:6a:2a:1a:dd:79:94:cc:20:20:f5:3a:68:3e:e9: b0:a1:70:78:67:7f:aa:9e:85:8e:0e:7d:f5:3c:ad: 13:23:77:76:f8:c8:eb:64:73:ac:fa:db:2e:5c:39: 74:e2:64:18:f9:24:12:fd:1f:0b:0d:e5:c9:a4:85: 06:2d:d9:ff:38:08:58:18:60:07:77:05:71:ca:6c: d7:2e:d6:fb:b0:05:fb:d8:87:f2:8a:de:b8:5b:66: 0e:4d:67:73:78:63:62:c4:62:a7:f9:19:6b:3e:59: 5f:39:96:9e:cd:d0:0b:2d:17:0d:e7:57:b6:8d:52: 0f:f3:5d:b5:3a:c5:6a:65:10:73:c6:d1:e6:8d:9b: a4:0c:e8:d5:2b:c2:03:79:c5:35:bb:2a:0c:43:3b: bf:8e:ea:bb:d0:09:45:5f:ba:9b:04:42:b5:03:65: ac:72:74:60:fd:9e:5a:91:33:72:13:f7:44:13:91: 7b:93:96:e5:fd:2e:dc:f4:bc:ad:2a:d9:42:d0:75: 31:1d:cb:57:18:db:ae:f1:fc:2f:68:7a:be:a4:f4: 08:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F3:2F:19:CE:AA:77:9E:8B:C4:FF:02:A5:B0:D0:7B:DA:41:EE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 160.223.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0b:bf:2f:44:18:93:27:cf:6f:33:86:5c:b4:d9:5c:2e:3d: f7:c0:06:6f:fa:cf:0e:80:1e:cb:cf:af:90:fe:3e:48:0d:12: 97:16:1c:f4:ce:51:22:97:10:ff:38:db:25:b1:85:77:d7:20: f6:fc:6b:77:ed:ee:ac:87:27:a5:43:eb:11:3a:51:91:3a:54: 32:dc:e0:eb:11:fb:e0:dd:73:6f:f2:5a:8a:22:77:8a:4b:2e: a3:b1:7c:13:4c:ac:84:4d:85:b5:b0:03:b4:ca:5f:66:a3:6d: 0a:d3:c8:60:49:b1:59:ca:93:fd:07:df:45:c7:6a:0f:e9:74: 7f:66:2e:c2:4e:24:80:77:4c:a1:41:5c:12:f3:b6:ce:4f:69: db:48:92:da:43:a2:76:1c:27:60:10:3f:62:34:4d:e2:82:2b: 26:3f:c5:f5:e1:14:71:f0:1f:b9:b6:e0:f1:32:fb:50:d3:0b: 27:c5:69:84:3c:17:f8:56:00:a8:ad:1e:c6:bf:cb:10:22:05: e0:99:46:5f:f9:37:71:38:02:4b:01:f8:6d:1e:57:af:50:29: db:28:78:ca:5e:d2:a5:64:da:7c:d8:56:ba:80:0f:e1:05:51: 68:e0:af:85:7b:01:fc:2d:36:98:ba:5d:76:07:c8:65:af:0d: 14:ba:3e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKfYJGKmV6RXlKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk N2JjNGY1MTgtYTMwMi00ODg0LWFiYmQtNzI0OGE3YmVlZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fPXuhpx8+U8THQcWVcDJeKifxGEE65FcJ63 CLG3/0HFWVxIDV37QIHI9fBKaioa3XmUzCAg9TpoPumwoXB4Z3+qnoWODn31PK0T I3d2+MjrZHOs+tsuXDl04mQY+SQS/R8LDeXJpIUGLdn/OAhYGGAHdwVxymzXLtb7 sAX72Ifyit64W2YOTWdzeGNixGKn+RlrPllfOZaezdALLRcN51e2jVIP8121OsVq ZRBzxtHmjZukDOjVK8IDecU1uyoMQzu/juq70AlFX7qbBEK1A2WscnRg/Z5akTNy E/dEE5F7k5bl/S7c9LytKtlC0HUxHctXGNuu8fwvaHq+pPQIVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPzLxnOqneei8T/AqWw0HvaQe7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvOGE0NjhlNDctOGE2ZS0z Zjk2LWIwMmUtYTM0MzRmMTI0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoN/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIULvy9EGJMnz28zhly02VwuPffABm/6zw6AHsvPr5D+PkgNEpcWHPTO USKXEP842yWxhXfXIPb8a3ft7qyHJ6VD6xE6UZE6VDLc4OsR++Ddc2/yWooid4pL LqOxfBNMrIRNhbWwA7TKX2ajbQrTyGBJsVnKk/0H30XHag/pdH9mLsJOJIB3TKFB XBLzts5PadtIktpDonYcJ2AQP2I0TeKCKyY/xfXhFHHwH7m24PEy+1DTCyfFaYQ8 F/hWAKitHsa/yxAiBeCZRl/5N3E4AksB+G0eV69QKdsoeMpe0qVk2nzYVrqAD+EF UWjgr4V7AfwtNpi6XXYHyGWvDRS6Pi0= -----END CERTIFICATE-----Generated at Wed Jul 8 18:03:41 2026 by rpki-client