$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa File: 14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa (raw, json) Hash identifier: 3y3GcyNBNHTt+Mh7mNMvLH4vf+BS2Fn8sQSlw62hRQ8= Subject key identifier: 55:A7:15:3E:9C:55:25:14:67:0D:CC:06:40:A3:18:02:FC:E1:F7:2E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA79872839F28982BF01A7B40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54004 IP address blocks: 68.182.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:72:83:9f:28:98:2b:f0:1a:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8b5507e4-5e40-4677-b826-2c36ef684cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:d5:b7:bf:f1:24:a2:9d:6e:11:47:9e:43: 1b:7c:85:93:cb:84:38:c3:ea:c2:63:c9:d1:ce:d7: f5:a9:43:84:93:fa:05:a5:31:91:62:99:b3:e1:4b: 98:1b:1f:92:c9:f9:96:b7:de:20:e6:b8:e4:17:a3: 5f:cb:95:dc:36:80:25:00:9c:57:de:68:4d:2c:51: 1d:88:7e:47:ab:da:37:38:0a:7b:0c:e9:68:30:33: c3:2b:00:14:d4:43:4a:dd:35:7e:ac:ea:f9:49:e9: 64:bd:0e:71:cb:c2:fa:0d:bc:50:63:05:8a:1e:9f: f9:ed:69:67:13:26:e4:5b:2f:62:01:13:75:51:9d: 75:da:62:51:23:59:19:09:37:9e:6c:86:8c:e6:16: b0:2b:e4:6a:0f:37:50:b7:04:85:99:4b:1c:ae:c9: f4:0f:7e:a2:f0:76:4a:ea:79:66:e4:d1:ba:1f:60: 5d:89:21:f4:64:37:41:5b:b7:ba:69:43:e6:10:aa: 73:29:21:b9:54:2b:99:ba:52:4a:70:74:0d:7e:a3: 60:81:93:af:e2:74:49:c0:9b:4a:36:52:21:be:63: 6d:95:ca:c1:1e:55:5a:eb:4d:57:6f:c3:dc:a5:93: 96:72:39:61:65:f6:d7:c9:0b:82:06:d9:22:72:9f: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A7:15:3E:9C:55:25:14:67:0D:CC:06:40:A3:18:02:FC:E1:F7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14e020a6-8de9-3b8a-87f2-17a9db1aabdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e6:df:15:8f:61:db:9d:d1:92:2e:1b:76:0b:4a:ba:0c:dd: e5:a7:e2:74:65:1b:0e:f2:47:ca:59:45:7f:f6:f8:8d:61:29: f2:3e:ee:3c:86:68:bc:a5:6c:08:c3:df:42:e7:b6:a1:c9:01: 08:c0:d8:f6:01:84:72:d0:cf:dc:bd:3c:4e:68:f9:54:ba:96: c3:d9:9b:96:bf:10:5c:f4:f3:5b:f0:16:ac:7f:ac:ee:52:39: 9b:e4:f7:66:5c:ed:44:09:86:20:85:48:f6:eb:b4:7a:63:c4: 36:c9:f0:ce:b2:c4:3f:0d:8a:cf:38:d8:ff:8a:c2:53:05:c3: c3:61:78:cb:f7:0a:fa:64:ec:93:68:1c:65:dc:54:ce:79:28: 95:3a:d8:da:18:48:da:89:7c:cc:f5:f2:ef:46:0b:57:d0:7b: 09:31:ec:39:c3:5d:a0:ac:0b:61:d2:56:2e:39:57:78:4a:2a: 59:6e:40:8b:f6:93:fc:a6:b2:3d:12:fb:17:22:be:db:1c:8c: 32:e9:36:be:57:5b:11:79:fe:5d:6a:f0:38:48:a1:fa:bd:db: fa:b7:f0:fa:50:0b:eb:1d:06:cd:b8:70:ca:fc:0b:d6:0b:0e: 61:b1:16:d5:12:71:c7:04:db:90:4f:12:6b:01:f4:c5:e3:35: 1c:fe:a3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHKDnyiYK/Aae0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGI1NTA3ZTQtNWU0MC00Njc3LWI4MjYtMmMzNmVmNjg0Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpLVt7/xJKKdbhFHnkMbfIWTy4Q4w+rCY8nR ztf1qUOEk/oFpTGRYpmz4UuYGx+SyfmWt94g5rjkF6Nfy5XcNoAlAJxX3mhNLFEd iH5Hq9o3OAp7DOloMDPDKwAU1ENK3TV+rOr5SelkvQ5xy8L6DbxQYwWKHp/57Wln EybkWy9iARN1UZ112mJRI1kZCTeebIaM5hawK+RqDzdQtwSFmUscrsn0D36i8HZK 6nlm5NG6H2BdiSH0ZDdBW7e6aUPmEKpzKSG5VCuZulJKcHQNfqNggZOv4nRJwJtK NlIhvmNtlcrBHlVa601Xb8PcpZOWcjlhZfbXyQuCBtkicp8y/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWnFT6cVSUUZw3MBkCjGAL84fcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTRlMDIwYTYtOGRlOS0z YjhhLTg3ZjItMTdhOWRiMWFhYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7m3xWPYdud0ZIuG3YLSroM3eWn4nRlGw7yR8pZRX/2+I1hKfI+7jyG aLylbAjD30LntqHJAQjA2PYBhHLQz9y9PE5o+VS6lsPZm5a/EFz081vwFqx/rO5S OZvk92Zc7UQJhiCFSPbrtHpjxDbJ8M6yxD8Nis842P+KwlMFw8NheMv3Cvpk7JNo HGXcVM55KJU62NoYSNqJfMz18u9GC1fQewkx7DnDXaCsC2HSVi45V3hKKlluQIv2 k/ymsj0S+xcivtscjDLpNr5XWxF5/l1q8DhIofq92/q38PpQC+sdBs24cMr8C9YL DmGxFtUScccE25BPEmsB9MXjNRz+o2Y= -----END CERTIFICATE-----Generated at Thu Jul 30 08:37:46 2026 by rpki-client