$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: lfo9zF4u5jcJb4pMuV4bjZ2+u/n2IEX7VLqe4OOS3sg= Subject key identifier: BE:30:AC:77:FD:47:E3:41:C8:C6:46:83:9F:A7:F1:9A:EA:0F:94:05 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584E54B4928FDF30A95F777CDC24 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:92:8f:df:30:a9:5f:77:7c:dc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=d01f5318-7296-4768-924a-74402f9ad501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:ba:ae:25:6f:3a:42:fa:b0:db:6e:fe:bd: 70:40:69:cd:8e:79:e3:2c:7f:7c:9a:db:5f:c9:ab: a2:70:bb:0a:84:55:95:b2:eb:fc:f6:1f:b3:f5:e9: 9c:9d:be:1b:b1:5e:68:65:82:16:21:06:51:a3:8c: 4a:88:60:a2:47:fb:dc:75:d7:ed:9e:2d:d2:f3:04: 2c:25:e8:7c:1d:d3:cf:7a:1b:58:69:32:06:a4:ab: a5:c0:8b:11:a0:c4:90:96:6d:23:9e:9b:a8:50:39: 20:4b:f5:eb:d9:c8:7e:6d:f1:79:a3:ac:c0:23:60: 44:72:2a:90:6e:3d:bf:c3:97:22:a8:64:a3:0e:62: ad:d6:32:56:7c:85:e0:7a:8c:5a:f3:fe:f5:e3:33: d4:54:b3:37:ab:4c:64:69:2e:27:eb:91:46:f4:98: 1e:9b:38:35:d0:d4:49:20:9f:30:22:20:17:17:50: 4a:16:a7:aa:da:e2:0d:2b:c3:bb:fa:4c:a3:e9:1a: 91:44:fd:95:a0:2b:a8:88:2d:24:60:9f:f2:0c:bb: c4:74:29:92:bf:aa:a6:eb:31:2d:f4:e4:02:43:83: 55:a0:95:23:09:d7:e4:47:45:24:4c:d0:1c:39:33: d7:b7:2f:8f:93:7a:73:e3:21:2a:3d:81:57:4c:18: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:30:AC:77:FD:47:E3:41:C8:C6:46:83:9F:A7:F1:9A:EA:0F:94:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:29:7f:6f:b4:a3:e1:c7:47:c2:eb:a7:7d:21:a6:2f:4e:23: e8:3f:16:ab:54:75:9d:c1:f4:1c:ee:75:80:dc:37:a8:2d:f7: 0f:5a:e5:7d:75:7d:76:87:83:48:23:1e:6c:cf:32:a1:55:db: 03:32:2b:42:3a:56:6e:e9:93:57:7e:ff:26:e3:96:a2:43:30: ce:f1:47:36:73:39:54:c2:b7:05:6d:e1:52:7b:f1:09:7c:10: c6:10:29:9a:5e:cc:53:1a:d7:b4:6d:37:e0:fb:a6:d9:4e:04: b6:4f:7e:b5:37:f9:f6:3f:55:43:f6:b4:cd:82:98:85:bc:37: 33:7d:27:45:99:f8:38:b0:d3:b2:57:f6:9c:c8:a3:cb:91:7e: 4f:8a:43:20:28:18:ff:51:fe:b2:b3:fe:a4:f4:6f:d2:e9:ab: 89:7c:d2:94:2a:e6:cd:6d:ba:97:6b:97:7b:6d:d4:50:50:4f: 10:e5:9a:10:ff:ec:33:91:ae:65:c6:b4:48:fb:cc:7f:0f:eb: c2:0b:14:1d:f6:7f:2c:67:8f:51:0e:10:85:91:5e:a6:34:e1: 65:3e:00:dd:77:76:d2:14:47:f1:04:ae:3c:a4:51:91:c4:43: 74:c4:e6:f0:a5:5c:87:58:4a:ab:71:bd:a4:22:aa:85:98:a4: 04:23:22:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJKP3zCpX3d83CQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk ZDAxZjUzMTgtNzI5Ni00NzY4LTkyNGEtNzQ0MDJmOWFkNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYW6riVvOkL6sNtu/r1wQGnNjnnjLH98mttf yauicLsKhFWVsuv89h+z9emcnb4bsV5oZYIWIQZRo4xKiGCiR/vcddftni3S8wQs Jeh8HdPPehtYaTIGpKulwIsRoMSQlm0jnpuoUDkgS/Xr2ch+bfF5o6zAI2BEciqQ bj2/w5ciqGSjDmKt1jJWfIXgeoxa8/714zPUVLM3q0xkaS4n65FG9Jgemzg10NRJ IJ8wIiAXF1BKFqeq2uINK8O7+kyj6RqRRP2VoCuoiC0kYJ/yDLvEdCmSv6qm6zEt 9OQCQ4NVoJUjCdfkR0UkTNAcOTPXty+Pk3pz4yEqPYFXTBgm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4wrHf9R+NByMZGg5+n8ZrqD5QFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgpf2+0o+HHR8Lrp30hpi9OI+g/FqtUdZ3B9BzudYDcN6gt9w9a5X11 fXaHg0gjHmzPMqFV2wMyK0I6Vm7pk1d+/ybjlqJDMM7xRzZzOVTCtwVt4VJ78Ql8 EMYQKZpezFMa17RtN+D7ptlOBLZPfrU3+fY/VUP2tM2CmIW8NzN9J0WZ+Diw07JX 9pzIo8uRfk+KQyAoGP9R/rKz/qT0b9Lpq4l80pQq5s1tupdrl3tt1FBQTxDlmhD/ 7DORrmXGtEj7zH8P68ILFB32fyxnj1EOEIWRXqY04WU+AN13dtIUR/EErjykUZHE Q3TE5vClXIdYSqtxvaQiqoWYpAQjImA= -----END CERTIFICATE-----Generated at Thu Jul 16 10:37:19 2026 by rpki-client