$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa File: be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa (raw, json) Hash identifier: 3UediTsaPvI9uJTUw0M+bDc/tDsKA8vgtx2g/fgB//M= Subject key identifier: 11:24:17:C0:C0:85:4C:6B:8F:FE:BA:14:5D:9B:C4:E1:71:66:68:E2 Certificate issuer: /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Certificate serial: 010D0C9F4328584E66DA138E63F694BFAFE37ED0 Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31849 IP address blocks: 67.213.128.0/21 maxlen: 24 104.219.20.0/22 maxlen: 24 162.212.96.0/22 maxlen: 24 199.30.104.0/22 maxlen: 24 199.102.56.0/22 maxlen: 24 2607:2a80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:13:8e:63:f6:94:bf:af:e3:7e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=1ddc7f01-fbd7-476f-8c33-2b5137395c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:71:fc:e3:0c:3b:d8:95:f6:dc:64:58:c5: 92:92:5e:64:5f:ce:be:d8:4b:1e:9f:e9:64:be:f1: e4:d9:c7:15:be:1e:2f:91:e6:9f:a1:00:24:d2:86: 18:89:7a:dc:41:92:a3:44:bb:28:a8:d9:c3:47:8c: 66:ea:cc:3b:53:1a:83:79:76:05:a3:7d:cd:12:a9: d5:ee:d1:a6:90:0f:d2:89:db:d6:48:66:25:e4:0a: 31:f8:9c:82:0a:8c:3d:c9:d6:4d:5b:3c:e5:5a:e1: 8e:d4:01:2b:21:b3:92:7f:5c:2e:03:a7:cf:66:d1: 8b:12:e0:bb:f9:54:52:2c:b4:d3:e2:74:5a:8c:8c: b1:ed:a7:22:dd:42:5a:46:ac:fe:9a:d6:0e:0f:89: 1d:c4:be:53:d1:5a:bb:c2:4b:d9:65:ff:ca:58:89: 81:29:af:48:d0:8a:17:dc:45:6e:c6:d3:72:ae:c1: b4:ab:df:c9:7c:6c:0c:fc:6a:37:4f:a6:23:89:a4: 33:cb:27:01:19:ac:6c:b8:5b:f8:64:7c:72:fc:96: fe:df:bc:d0:c3:8a:76:72:f5:b1:df:4a:e6:06:b4: 4b:e9:0c:41:b8:fb:ec:74:4d:94:c0:ee:17:2a:57: d0:de:5d:bf:c1:2c:c9:33:b2:ec:28:cf:4e:07:ed: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:24:17:C0:C0:85:4C:6B:8F:FE:BA:14:5D:9B:C4:E1:71:66:68:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl X509v3 Authority Key Identifier: keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer sbgp-ipAddrBlock: critical IPv4: 67.213.128.0/21 104.219.20.0/22 162.212.96.0/22 199.30.104.0/22 199.102.56.0/22 IPv6: 2607:2a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:bd:67:bf:42:14:dd:b6:f9:e4:fa:31:e6:18:15:27:f9:eb: 63:bc:bf:8b:cd:9c:ff:1f:09:4a:6e:c5:97:15:5c:7b:52:ca: 33:f0:5d:ef:bb:cd:d4:50:22:43:c4:ef:d5:1f:e8:4d:e2:b7: db:0a:1a:34:e7:3d:0f:85:44:fe:cc:63:15:1d:0d:6f:81:b4: 55:04:34:9b:3b:40:d0:e7:ce:30:39:6b:f7:8d:cd:00:33:5c: 44:ab:27:9e:7a:78:7b:70:7d:0c:e6:e4:78:98:21:c4:f9:8a: b6:d3:3e:db:f8:d2:61:a7:bf:60:13:43:ec:5b:3f:ee:2b:71: 19:3c:52:01:ad:0a:c9:c6:f7:06:0e:cc:13:da:14:19:a7:61: ea:62:c1:db:43:9f:2b:9b:f9:45:8c:42:e5:6e:4c:1d:68:c7: 53:2c:29:7e:39:02:6c:13:e3:8d:08:62:33:e6:dd:bb:c6:42: 3e:c0:3d:29:59:ef:36:1e:cc:e2:52:c7:68:4b:c9:4f:3c:1f: 9a:d3:19:06:44:87:f8:c2:d5:da:b4:f8:0b:30:ae:c3:43:2b: eb:39:ff:09:70:42:f0:14:26:1e:d9:27:c6:50:49:77:8a:48: ba:ef:9f:44:8d:3a:ee:93:6a:cd:a7:32:0c:64:35:f2:c8:d5: 06:d0:17:53 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE5m2hOOY/aUv6/jftAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5 ZjQxMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MWRkYzdmMDEtZmJkNy00NzZmLThjMzMtMmI1MTM3Mzk1YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvlx/OMMO9iV9txkWMWSkl5kX86+2Esen+lk vvHk2ccVvh4vkeafoQAk0oYYiXrcQZKjRLsoqNnDR4xm6sw7UxqDeXYFo33NEqnV 7tGmkA/SidvWSGYl5Aox+JyCCow9ydZNWzzlWuGO1AErIbOSf1wuA6fPZtGLEuC7 +VRSLLTT4nRajIyx7aci3UJaRqz+mtYOD4kdxL5T0Vq7wkvZZf/KWImBKa9I0IoX 3EVuxtNyrsG0q9/JfGwM/Go3T6YjiaQzyycBGaxsuFv4ZHxy/Jb+37zQw4p2cvWx 30rmBrRL6QxBuPvsdE2UwO4XKlfQ3l2/wSzJM7LsKM9OB+0sWwIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFBEkF8DAhUxrj/66FF2bxOFxZmjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvYmU3YWQ3YjktYTI0Ny0z YTRiLTg3NjQtZjIzZDhmYjBjMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4 M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5 MWZjZDlmNDEuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDQ9WAAwQC aNsUAwQCotRgAwQCxx5oAwQCx2Y4MA0EAgACMAcDBQAmByqAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF29 Z79CFN22+eT6MeYYFSf562O8v4vNnP8fCUpuxZcVXHtSyjPwXe+7zdRQIkPE79Uf 6E3it9sKGjTnPQ+FRP7MYxUdDW+BtFUENJs7QNDnzjA5a/eNzQAzXESrJ556eHtw fQzm5HiYIcT5irbTPtv40mGnv2ATQ+xbP+4rcRk8UgGtCsnG9wYOzBPaFBmnYepi wdtDnyub+UWMQuVuTB1ox1MsKX45AmwT440IYjPm3bvGQj7APSlZ7zYezOJSx2hL yU88H5rTGQZEh/jC1dq0+AswrsNDK+s5/wlwQvAUJh7ZJ8ZQSXeKSLrvn0SNOu6T as2nMgxkNfLI1QbQF1M= -----END CERTIFICATE-----Generated at Wed Jul 8 15:50:02 2026 by rpki-client