$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa File: 3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa (raw, json) Hash identifier: qgwQu1efSzFpsayl8BFwNhj+iVnEidUnF2/wxM27K2w= Subject key identifier: 1F:31:2B:D0:A9:02:57:60:5D:27:FE:72:02:0B:CF:C3:E1:E7:84:2A Certificate issuer: /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Certificate serial: 010D0C9F4328584E3A2F228DFE9F82FBD173A580 Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 65.20.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:22:8d:fe:9f:82:fb:d1:73:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=3c3c664c-3e23-416f-b71f-6b5c14553525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:d2:1e:bc:17:d8:9f:18:5a:be:5d:82:9c: 64:39:8b:0a:15:0b:e4:77:e8:cc:ba:cf:10:bd:9b: eb:3d:e2:7a:82:67:95:6b:73:a3:0c:29:46:d8:38: 71:f5:26:e4:e1:15:b4:a1:93:ea:43:fb:40:70:b5: 74:4b:97:95:09:73:71:76:86:17:89:25:4c:a1:55: fd:48:87:a5:a9:de:a6:3e:8a:4d:8e:09:ab:ff:39: fc:18:89:1b:db:4d:75:9a:d8:f3:f6:0b:0e:bf:e1: 44:bf:06:c7:e5:41:6b:a6:80:de:17:bd:be:d0:2a: 43:f8:77:1d:a0:ee:8a:41:65:f5:93:45:3c:ce:22: 23:43:8a:09:34:e1:b8:cf:17:f5:5c:1a:c4:3c:54: 4e:2b:20:71:28:b6:30:6c:f3:d1:d9:47:3b:bd:d5: 29:75:fd:5b:7d:66:ad:2a:86:14:1e:7d:0c:9f:24: 9a:9d:2b:79:9c:cf:18:98:7b:fd:22:5b:d2:f2:13: fc:32:69:fa:c5:a0:f9:c8:d8:8b:31:eb:b7:19:25: 55:38:a5:14:9a:52:8b:76:72:71:8d:a6:c3:4c:0d: e6:cd:57:8e:17:04:cd:77:96:ee:a2:00:77:95:c4: 7b:79:55:04:ca:ad:b3:0a:98:17:15:84:39:f8:79: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:31:2B:D0:A9:02:57:60:5D:27:FE:72:02:0B:CF:C3:E1:E7:84:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl X509v3 Authority Key Identifier: keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer sbgp-ipAddrBlock: critical IPv4: 65.20.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:91:4d:e4:10:42:a9:c7:f6:72:0e:65:9a:60:3d:2b:c9:02: 0e:9b:2a:fe:3c:a6:8f:2f:af:17:28:79:89:19:e4:5c:84:ea: 96:82:eb:26:74:ab:6d:85:ae:4d:66:1b:8d:0b:19:d5:3c:ea: 81:0c:5e:d0:9d:ea:02:78:b9:67:94:2e:ba:14:9c:94:b2:0d: 87:6d:5b:9d:d5:a3:9d:b6:73:ca:a4:54:82:04:8e:b8:9a:03: 6f:84:94:61:39:04:33:01:67:12:73:18:89:3e:85:24:b6:e4: 3c:99:f8:81:48:59:b5:17:1b:d6:81:92:44:68:74:16:a2:54: 70:f7:8a:27:a1:da:50:26:f1:14:22:eb:3b:e8:7d:27:59:53: 47:07:f0:7b:1e:ce:62:85:9d:08:d2:d4:cd:d2:cd:fc:c1:88: 24:5c:90:3b:30:ad:55:4a:db:37:ad:3d:d2:40:80:7a:16:e1: 37:1c:5e:7f:30:83:5e:5a:2f:f6:a0:81:b7:5d:e7:f6:a6:b0: 59:ad:60:0d:68:5b:19:ef:0b:e1:18:8b:3e:5c:de:56:c7:5d: e9:2d:cf:40:a5:98:44:14:4c:77:36:e9:96:92:ab:2b:ba:a6: de:d5:86:c3:c8:ef:14:c5:18:e0:5c:28:db:41:e1:2b:82:47: 91:d0:35:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LyKN/p+C+9FzpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmM2NjYTEtNmNkNC00MjMwLTkyZDMtMjBhYmY0ZGI3 MzEyMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk M2MzYzY2NGMtM2UyMy00MTZmLWI3MWYtNmI1YzE0NTUzNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw3SHrwX2J8YWr5dgpxkOYsKFQvkd+jMus8Q vZvrPeJ6gmeVa3OjDClG2Dhx9Sbk4RW0oZPqQ/tAcLV0S5eVCXNxdoYXiSVMoVX9 SIelqd6mPopNjgmr/zn8GIkb2011mtjz9gsOv+FEvwbH5UFrpoDeF72+0CpD+Hcd oO6KQWX1k0U8ziIjQ4oJNOG4zxf1XBrEPFROKyBxKLYwbPPR2Uc7vdUpdf1bfWat KoYUHn0MnySanSt5nM8YmHv9IlvS8hP8Mmn6xaD5yNiLMeu3GSVVOKUUmlKLdnJx jabDTA3mzVeOFwTNd5buogB3lcR7eVUEyq2zCpgXFYQ5+Hk8/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8xK9CpAldgXSf+cgILz8Ph54QqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYz Y2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFiZjRkYjczMTIvM2YxYTA2MTgtNzMyMS0z ZmU0LTgwNTItZmIwZTQ0Mjc3ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2ZmM2NjYTEtNmNkNC00MjMwLTky ZDMtMjBhYmY0ZGI3MzEyL2NmZjNjY2ExLTZjZDQtNDIzMC05MmQzLTIwYWJmNGRi NzMxMi5jcmwwHwYDVR0jBBgwFoAUd+NEOHMzmN13phfC24B3cczjtZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYzY2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFi ZjRkYjczMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKRTeQQQqnH9nIOZZpgPSvJAg6bKv48po8vrxcoeYkZ5FyE6paC6yZ0 q22Frk1mG40LGdU86oEMXtCd6gJ4uWeULroUnJSyDYdtW53Vo522c8qkVIIEjria A2+ElGE5BDMBZxJzGIk+hSS25DyZ+IFIWbUXG9aBkkRodBaiVHD3iieh2lAm8RQi 6zvofSdZU0cH8HsezmKFnQjS1M3SzfzBiCRckDswrVVK2zetPdJAgHoW4TccXn8w g15aL/aggbdd5/amsFmtYA1oWxnvC+EYiz5c3lbHXektz0ClmEQUTHc26ZaSqyu6 pt7VhsPI7xTFGOBcKNtB4SuCR5HQNbA= -----END CERTIFICATE-----Generated at Wed Jun 24 15:47:52 2026 by rpki-client