$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa File: 0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa (raw, json) Hash identifier: 5EZUvxnq5iBMV3u9UfsyhrzA2WIFeiWhYvYt6EC8MVM= Subject key identifier: DD:9A:54:E6:63:ED:F2:C6:73:EA:1D:8F:BA:DF:9F:12:B0:A8:87:BA Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584E4559D3C75A8CD31A7E146C40 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 36100 IP address blocks: 72.10.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:d3:c7:5a:8c:d3:1a:7e:14:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=2991c65f-1db7-40f0-8a77-1ed27cf3cb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:12:8b:87:95:71:1e:04:b8:ca:71:24:f2: e6:0d:db:43:c7:de:59:70:da:01:b2:fa:f1:e5:fa: bc:fe:a8:10:21:40:e3:3a:fa:9d:90:2f:8b:64:6d: 8e:d5:6b:3a:ed:74:7d:9e:aa:80:44:11:1e:70:0c: 3d:51:5a:14:18:99:e8:05:9a:2c:60:66:9c:ba:68: cb:83:de:26:b6:13:52:86:b7:9f:c9:4a:6e:7d:e7: 04:e3:97:be:6f:4d:4a:5f:8a:71:98:e7:41:87:83: ec:62:a7:bf:aa:2d:79:55:c5:67:a4:50:5c:a0:5a: 29:19:3a:e0:fe:f4:d8:29:3c:f7:5d:94:67:b9:65: 41:3a:60:63:4c:b6:f8:be:b7:01:65:a6:92:06:bb: 00:fa:ab:5f:a9:76:b7:6f:7d:bd:95:10:d9:25:05: ff:5e:9f:9b:86:1c:37:d5:23:3b:8d:a8:25:d7:c5: e9:4b:5a:79:58:b4:91:d9:40:4b:a3:8f:1f:9c:ff: d0:1c:82:ea:6f:e8:03:99:48:0b:a5:21:5b:c2:8b: 49:f2:14:06:a4:74:49:91:71:8d:b3:15:5a:4b:d2: 40:51:8a:7b:d1:c5:21:54:66:28:24:09:7a:82:eb: 04:d8:2c:2a:ca:99:fa:2f:37:97:d8:17:7f:7c:a6: ff:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:54:E6:63:ED:F2:C6:73:EA:1D:8F:BA:DF:9F:12:B0:A8:87:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a5:cd:16:34:59:e9:e6:6b:69:3b:bf:cd:ea:e2:b4:43:79: 25:9c:d6:4c:fb:9f:3b:34:6e:8b:00:cd:4d:d5:48:b9:89:45: 3b:bd:19:af:89:74:a6:c1:74:5b:c1:e4:21:d1:1a:bf:a2:92: 2a:d3:a0:bd:aa:65:40:05:bf:d9:c1:d9:8f:63:4f:aa:63:86: 0a:2e:d9:f4:c3:ca:13:83:a0:08:73:13:6c:22:14:8f:bf:83: 4f:47:63:18:ec:ac:ad:ef:b4:13:63:a8:16:20:fd:c3:2e:fb: f3:28:19:f5:e7:e7:7d:e8:43:d1:c4:cf:a3:d8:be:99:8c:36: 4c:36:6c:3a:34:83:3b:16:fa:e0:c6:60:e7:0c:16:ed:8d:c2: 3a:89:c5:4b:f0:b7:31:33:f1:47:7d:4e:e9:67:9b:f7:68:e1: 6c:32:ee:76:57:2b:38:a9:2e:48:35:35:18:0e:f9:04:1c:9c: 4e:e6:88:86:92:45:c4:f1:a9:b6:a0:f5:51:ef:29:6b:7c:b7: e4:61:f9:53:b0:5e:41:d8:cc:bd:a9:0c:70:58:54:58:ff:e8: 60:e1:74:36:6c:a6:f4:a6:a4:12:8f:3b:45:66:99:06:af:6b: 36:00:50:d3:ca:d7:21:79:bb:19:03:df:b3:89:bc:b4:1e:7d: 1a:09:f3:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdPHWozTGn4UbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk Mjk5MWM2NWYtMWRiNy00MGYwLThhNzctMWVkMjdjZjNjYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fcSi4eVcR4EuMpxJPLmDdtDx95ZcNoBsvrx 5fq8/qgQIUDjOvqdkC+LZG2O1Ws67XR9nqqARBEecAw9UVoUGJnoBZosYGacumjL g94mthNShrefyUpufecE45e+b01KX4pxmOdBh4PsYqe/qi15VcVnpFBcoFopGTrg /vTYKTz3XZRnuWVBOmBjTLb4vrcBZaaSBrsA+qtfqXa3b329lRDZJQX/Xp+bhhw3 1SM7jagl18XpS1p5WLSR2UBLo48fnP/QHILqb+gDmUgLpSFbwotJ8hQGpHRJkXGN sxVaS9JAUYp70cUhVGYoJAl6gusE2Cwqypn6LzeX2Bd/fKb/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2aVOZj7fLGc+odj7rfnxKwqIe6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvMGU4OWJkYmEtMDljNC0z ZjliLTlmNTUtNDkyY2EyOTFhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSArMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGlzRY0Wenma2k7v83q4rRDeSWc1kz7nzs0bosAzU3VSLmJRTu9Ga+J dKbBdFvB5CHRGr+ikirToL2qZUAFv9nB2Y9jT6pjhgou2fTDyhODoAhzE2wiFI+/ g09HYxjsrK3vtBNjqBYg/cMu+/MoGfXn533oQ9HEz6PYvpmMNkw2bDo0gzsW+uDG YOcMFu2NwjqJxUvwtzEz8Ud9Tulnm/do4Wwy7nZXKzipLkg1NRgO+QQcnE7miIaS RcTxqbag9VHvKWt8t+Rh+VOwXkHYzL2pDHBYVFj/6GDhdDZspvSmpBKPO0VmmQav azYAUNPK1yF5uxkD37OJvLQefRoJ86s= -----END CERTIFICATE-----Generated at Fri Jul 17 13:41:01 2026 by rpki-client