$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa File: 08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa (raw, json) Hash identifier: spmRukCLNTA5VmCI4Wv22nShREpMX9gd/A5F0DpiMBs= Subject key identifier: 69:95:55:8C:D5:3E:87:88:5B:2B:0A:8B:78:52:F5:51:7B:D7:93:25 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584E4AEF49CF3483BC3B45A56680 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 15054 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:49:cf:34:83:bc:3b:45:a5:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=3885771d-f735-4136-8f7c-bbbe9d209f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:65:40:98:a8:ff:29:a9:85:b2:b3:e1:d2: 49:77:de:2d:7f:c6:48:95:b1:77:cd:5e:f6:5e:ce: d4:51:ca:94:59:6d:52:2e:87:a2:f8:7d:52:a9:58: f5:95:e1:aa:59:52:03:2e:7f:b2:9b:54:51:d5:f4: d1:ca:91:f9:56:c7:fe:d8:ce:96:31:43:4c:e3:2e: ca:99:dd:b9:4d:1a:22:af:b2:92:07:68:51:fb:e5: 40:a4:75:bd:8e:ae:a9:80:f7:eb:a3:7b:ad:10:96: a1:ed:35:e9:e0:8d:d7:d7:18:53:be:3e:f1:0c:d7: 3b:df:60:22:1c:30:26:1b:8f:65:c2:b5:ed:5e:b7: 6d:1c:f2:b7:b4:57:49:80:ab:29:d8:b8:4b:64:e0: c9:99:06:1c:71:00:99:9e:51:4b:0a:f0:70:c0:14: 75:3b:4c:f2:33:f8:ff:6b:d5:d8:85:56:48:1d:e6: 37:85:32:14:76:f8:43:a2:bf:2e:cc:54:b3:6e:6a: 45:07:d9:67:ee:35:d5:6b:7d:4a:ea:e6:e7:cb:6e: 3f:f2:7e:4f:51:49:73:db:07:d5:4c:a2:30:ff:8e: ea:ae:c3:0a:38:c9:00:97:00:18:31:a8:7e:54:2f: b2:07:2c:0d:4f:f9:e9:b3:32:9a:7d:22:06:6d:74: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:95:55:8C:D5:3E:87:88:5B:2B:0A:8B:78:52:F5:51:7B:D7:93:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/08bf5d51-24e3-396f-9b0e-36469c4b1aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:81:6f:53:8b:b3:b0:eb:c0:2e:c2:7b:66:45:d4:13:e0:d9: c8:b7:2c:c5:48:f7:10:55:67:8a:ab:46:d0:6c:f2:85:04:02: 3c:3f:d0:62:a9:2a:af:c3:57:81:ce:a9:c7:5b:08:c3:90:e1: d9:93:5c:e7:5d:bb:3b:3b:f7:87:71:c6:fe:a5:14:f4:bc:8e: 8b:a1:de:e1:fe:01:c2:0c:5d:42:03:49:a6:cd:83:3d:37:0b: 94:1f:96:3a:5c:14:1d:37:c3:72:6d:67:4b:4c:6c:d2:54:f1: b7:80:53:6b:f2:0c:fa:02:b2:67:65:78:cc:51:d7:45:39:bf: 12:67:74:96:18:08:6b:7c:08:2b:fb:3e:21:5d:bf:a7:e0:23: 9e:08:66:e5:22:4d:80:e5:2a:4c:52:c5:fb:ec:4b:d5:e6:27: bb:93:c6:0b:68:d7:97:66:8f:45:22:ff:b3:24:0e:e1:3d:86: da:36:4a:29:48:61:71:6f:15:9f:cf:ca:6e:4b:50:94:5f:c4: d3:4e:35:8c:8c:06:a2:98:70:da:65:58:49:9f:84:82:40:98: 6f:98:5c:e2:3b:e0:f8:69:91:a1:59:6a:77:66:c8:8c:4f:e9: 78:80:2e:e8:85:53:be:d7:0a:43:b5:dc:2c:b0:a5:dd:55:5a: 81:89:46:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70nPNIO8O0WlZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk Mzg4NTc3MWQtZjczNS00MTM2LThmN2MtYmJiZTlkMjA5ZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilxlQJio/ymphbKz4dJJd94tf8ZIlbF3zV72 Xs7UUcqUWW1SLoei+H1SqVj1leGqWVIDLn+ym1RR1fTRypH5Vsf+2M6WMUNM4y7K md25TRoir7KSB2hR++VApHW9jq6pgPfro3utEJah7TXp4I3X1xhTvj7xDNc732Ai HDAmG49lwrXtXrdtHPK3tFdJgKsp2LhLZODJmQYccQCZnlFLCvBwwBR1O0zyM/j/ a9XYhVZIHeY3hTIUdvhDor8uzFSzbmpFB9ln7jXVa31K6ubny24/8n5PUUlz2wfV TKIw/47qrsMKOMkAlwAYMah+VC+yBywNT/npszKafSIGbXQjwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmVVYzVPoeIWysKi3hS9VF715MlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvMDhiZjVkNTEtMjRlMy0z OTZmLTliMGUtMzY0NjljNGIxYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmBb1OLs7DrwC7Ce2ZF1BPg2ci3LMVI9xBVZ4qrRtBs8oUEAjw/0GKp Kq/DV4HOqcdbCMOQ4dmTXOdduzs794dxxv6lFPS8jouh3uH+AcIMXUIDSabNgz03 C5QfljpcFB03w3JtZ0tMbNJU8beAU2vyDPoCsmdleMxR10U5vxJndJYYCGt8CCv7 PiFdv6fgI54IZuUiTYDlKkxSxfvsS9XmJ7uTxgto15dmj0Ui/7MkDuE9hto2SilI YXFvFZ/Pym5LUJRfxNNONYyMBqKYcNplWEmfhIJAmG+YXOI74PhpkaFZandmyIxP 6XiALuiFU77XCkO13Cywpd1VWoGJRkc= -----END CERTIFICATE-----Generated at Wed Jul 8 16:09:40 2026 by rpki-client