$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa File: a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa (raw, json) Hash identifier: z3nIXlCtvVSJaaaW2YA9+LxWl+Wa6iNTYJjMHjEHvCg= Subject key identifier: DC:CD:1C:FF:15:BF:91:39:CB:84:2C:2D:6E:E6:FA:41:54:8D:89:1F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584EC0A74808F1A37713AEE5C300 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 20115 IP address blocks: 172.220.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:48:08:f1:a3:77:13:ae:e5:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=8b8c41fb-e8fb-453d-840f-de79acb203d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:80:8a:63:4c:df:87:0b:63:18:df:b5:e1: 09:7c:f3:b0:5b:f1:45:d3:2b:16:2f:f7:a1:dc:76: 45:20:db:3a:fd:3a:51:4f:9d:a8:92:fc:75:f9:14: ad:e3:d7:80:8c:af:4f:4e:e7:e7:f2:3a:b4:c7:8f: 91:c1:f8:42:45:88:4c:5c:06:ae:52:c7:56:5b:3b: f9:33:fd:95:86:3a:df:98:3f:42:3b:51:01:4c:3d: b0:e1:62:cf:95:1f:7a:7a:ba:7a:60:d6:c1:94:1a: 45:5b:8f:a7:62:ab:e9:56:65:ff:e2:1e:f1:c7:8c: 87:8c:f8:93:a1:86:cc:25:97:78:9f:be:33:0c:1f: f2:58:97:7b:ef:c8:6d:1b:6d:f9:67:e5:52:d1:b9: a5:de:4f:d8:31:11:1c:ac:91:c0:1c:df:e9:04:ec: 3a:c0:b1:88:b5:a3:94:8d:81:44:42:79:2d:82:4c: 14:98:9b:cb:bf:44:ce:a9:a9:4d:14:1b:42:44:e1: fe:2c:f0:6d:11:03:5c:88:ba:57:3e:bf:d0:88:63: a5:f6:59:41:0a:bd:87:93:dc:61:4f:05:5f:c7:1f: 00:f4:82:7a:ee:5e:9a:76:cc:ec:89:ca:e1:0c:e7: f4:bd:03:e1:ad:4b:c7:d0:bd:1b:45:3e:68:54:1d: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CD:1C:FF:15:BF:91:39:CB:84:2C:2D:6E:E6:FA:41:54:8D:89:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cf:24:68:4f:34:d9:de:c5:f4:28:b0:28:18:70:8c:20:91: 45:97:94:1a:f4:ca:87:c1:08:10:12:46:48:2a:29:06:3c:d1: 49:39:59:cd:89:22:a4:d7:7d:67:63:92:24:05:6d:42:1b:8e: 81:95:ac:86:ee:f7:11:63:60:6e:ad:64:f3:2d:d7:07:cc:cb: 41:c4:03:ed:d1:5d:b7:58:02:74:27:b3:05:3d:a2:1f:c4:e4: 1e:da:d5:dc:93:ea:92:5d:44:7e:ca:c5:e0:2b:d1:a2:6d:eb: 64:ab:59:61:2e:c3:53:3d:11:4a:e0:93:84:14:69:b4:4c:6e: e8:a7:8d:de:6d:b3:ab:5f:ff:6c:3e:a1:80:6a:6c:02:5f:62: f9:1b:81:7d:b1:2a:47:06:3d:22:ca:ec:62:8a:89:4a:7e:2b: 72:aa:b6:87:5f:93:0c:80:43:8d:5d:ea:d6:cf:b1:f6:06:15: a0:a8:6b:d2:6d:56:ac:bf:f8:d0:fc:6b:03:8f:a5:21:08:85: a7:ed:b9:f7:d4:b0:ea:67:f1:9d:de:b2:4e:9a:9c:13:f1:da: c3:3f:4f:d1:66:c9:86:0c:50:33:c0:9f:01:0a:b8:f9:1d:7f: 03:88:a2:8c:b6:7e:07:e1:f3:ad:34:02:c7:79:0e:fe:d7:18: a4:39:43:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap0gI8aN3E67lwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk OGI4YzQxZmItZThmYi00NTNkLTg0MGYtZGU3OWFjYjIwM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ+AimNM34cLYxjfteEJfPOwW/FF0ysWL/eh 3HZFINs6/TpRT52okvx1+RSt49eAjK9PTufn8jq0x4+RwfhCRYhMXAauUsdWWzv5 M/2VhjrfmD9CO1EBTD2w4WLPlR96erp6YNbBlBpFW4+nYqvpVmX/4h7xx4yHjPiT oYbMJZd4n74zDB/yWJd778htG235Z+VS0bml3k/YMREcrJHAHN/pBOw6wLGItaOU jYFEQnktgkwUmJvLv0TOqalNFBtCROH+LPBtEQNciLpXPr/QiGOl9llBCr2Hk9xh TwVfxx8A9IJ67l6adszsicrhDOf0vQPhrUvH0L0bRT5oVB0t2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzNHP8Vv5E5y4QsLW7m+kFUjYkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTVlMGZlZDUtYWYwNi0z ZmRhLTk4ODgtZWZiY2NiY2JkNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTPJGhPNNnexfQosCgYcIwgkUWXlBr0yofBCBASRkgqKQY80Uk5Wc2J IqTXfWdjkiQFbUIbjoGVrIbu9xFjYG6tZPMt1wfMy0HEA+3RXbdYAnQnswU9oh/E 5B7a1dyT6pJdRH7KxeAr0aJt62SrWWEuw1M9EUrgk4QUabRMbuinjd5ts6tf/2w+ oYBqbAJfYvkbgX2xKkcGPSLK7GKKiUp+K3KqtodfkwyAQ41d6tbPsfYGFaCoa9Jt Vqy/+ND8awOPpSEIhaftuffUsOpn8Z3esk6anBPx2sM/T9FmyYYMUDPAnwEKuPkd fwOIooy2fgfh8600Asd5Dv7XGKQ5Q+w= -----END CERTIFICATE-----Generated at Sat Sep 5 00:57:21 2026 by rpki-client