$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0c948472-fba8-39e7-9f8d-888e17ac5e39.roa File: 0c948472-fba8-39e7-9f8d-888e17ac5e39.roa (raw, json) Hash identifier: Sim/OQr6OaOog2sRam6tqQ0O4BcHZW1sxvDc+gTIrKY= Subject key identifier: CF:60:40:5F:68:14:7F:7E:F6:69:D1:20:58:78:94:9E:88:32:00:67 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA23390F2B5D56C616125C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0c948472-fba8-39e7-9f8d-888e17ac5e39.roa Signing time: Sun 19 Jul 2026 18:24:18 +0000 ROA not before: Sun 19 Jul 2026 18:24:18 +0000 ROA not after: Sat 17 Oct 2026 18:24:18 +0000 asID: 33011 IP address blocks: 67.218.117.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:33:90:f2:b5:d5:6c:61:61:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:18 2026 GMT Not After : Oct 17 18:24:18 2026 GMT Subject: CN=68a5a884-7da2-464f-aee6-454d2bb38574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:f3:85:9d:34:38:41:80:6a:94:f4:cf:aa: 0e:44:d3:79:9d:7d:cf:9b:9e:56:6e:a1:95:3b:0d: 36:b3:72:b3:82:ec:18:20:d9:af:ef:a4:46:5e:db: 52:d0:b1:11:66:68:19:9d:e8:16:ad:12:90:7e:f2: 8e:a7:ea:c8:60:35:e7:f9:fd:0e:90:28:64:9b:85: d0:9b:40:4e:71:58:64:8d:1c:70:3c:98:88:41:b0: a7:31:2f:67:10:35:6c:0f:43:88:e7:68:d4:e4:a4: e3:cf:37:84:60:c4:6e:6f:32:c0:51:2c:0f:28:4a: 0d:96:13:81:72:1b:5f:e0:65:93:a9:d5:ee:1b:1a: 81:0e:6a:90:df:a7:18:e6:80:fc:5b:f4:09:c7:8e: 62:58:e0:64:db:38:d8:9e:92:e1:c7:ee:0d:24:ef: 90:41:c3:7b:e3:3b:e6:4a:01:28:05:04:51:26:17: 81:37:29:f2:2c:c0:48:72:bf:c9:fc:aa:44:82:e9: 42:11:05:c3:76:fc:26:8c:98:ff:da:2f:a9:01:09: d7:e8:dd:dc:30:5f:b9:fe:5d:95:b4:64:4a:32:7b: 50:bb:00:21:b8:ba:61:0d:72:4b:2a:38:f1:29:f4: f8:3b:a2:58:3e:9e:74:f4:3e:44:1e:78:42:30:c2: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:60:40:5F:68:14:7F:7E:F6:69:D1:20:58:78:94:9E:88:32:00:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/0c948472-fba8-39e7-9f8d-888e17ac5e39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 67.218.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:30:a3:e8:15:1d:83:af:f1:10:12:af:d7:f1:a1:9d:a6:ff: 38:f3:84:8a:36:d9:84:8e:69:4f:7f:bf:e3:a0:ab:82:5d:07: 6d:32:c8:4c:54:7b:17:64:37:3f:27:40:58:62:6c:08:fa:0c: e4:47:21:3f:6f:37:b5:ef:d2:61:fe:a1:56:ac:94:fe:7b:0a: 90:82:dc:a7:28:ea:72:5a:61:29:f6:39:ac:18:4d:4d:b2:71: 28:18:74:50:55:e1:92:99:35:e9:a4:a7:b9:85:49:0b:fa:13: 62:69:95:7c:15:00:83:cb:af:31:e0:e3:f1:5e:09:26:26:8c: de:1c:a4:97:50:13:ce:38:1a:76:13:19:dc:95:ed:8a:4b:97: 27:d1:15:ac:c9:1c:29:b4:72:1d:79:dc:d2:ec:12:90:d3:03: ea:da:47:de:e5:46:a6:c0:a6:52:41:e6:1b:b1:23:cb:f0:dd: 87:06:0a:0a:ec:55:a6:b7:22:55:cd:65:5d:b0:13:1a:89:1e: f3:9e:b9:d6:21:ac:72:f1:4a:d8:68:d0:eb:73:08:e4:c9:39: fc:c7:92:58:73:d9:d9:4c:c1:2c:1a:52:07:d8:9f:b9:4f:df: bd:c3:ad:fa:d1:3a:6f:b7:86:72:97:de:9b:bb:db:a5:43:f6: a9:af:01:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojOQ8rXVbGFhJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxOFoXDTI2MTAxNzE4MjQxOFowLzEtMCsGA1UEAxMk NjhhNWE4ODQtN2RhMi00NjRmLWFlZTYtNDU0ZDJiYjM4NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksPzhZ00OEGAapT0z6oORNN5nX3Pm55WbqGV Ow02s3KzguwYINmv76RGXttS0LERZmgZnegWrRKQfvKOp+rIYDXn+f0OkChkm4XQ m0BOcVhkjRxwPJiIQbCnMS9nEDVsD0OI52jU5KTjzzeEYMRubzLAUSwPKEoNlhOB chtf4GWTqdXuGxqBDmqQ36cY5oD8W/QJx45iWOBk2zjYnpLhx+4NJO+QQcN74zvm SgEoBQRRJheBNynyLMBIcr/J/KpEgulCEQXDdvwmjJj/2i+pAQnX6N3cMF+5/l2V tGRKMntQuwAhuLphDXJLKjjxKfT4O6JYPp509D5EHnhCMMKI+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9gQF9oFH9+9mnRIFh4lJ6IMgBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMGM5NDg0NzItZmJhOC0z OWU3LTlmOGQtODg4ZTE3YWM1ZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9p1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEwo+gVHYOv8RASr9fxoZ2m/zjzhIo22YSOaU9/v+Ogq4JdB20yyExU exdkNz8nQFhibAj6DORHIT9vN7Xv0mH+oVaslP57CpCC3Kco6nJaYSn2OawYTU2y cSgYdFBV4ZKZNemkp7mFSQv6E2JplXwVAIPLrzHg4/FeCSYmjN4cpJdQE844GnYT GdyV7YpLlyfRFazJHCm0ch153NLsEpDTA+raR97lRqbAplJB5huxI8vw3YcGCgrs Vaa3IlXNZV2wExqJHvOeudYhrHLxStho0OtzCOTJOfzHklhz2dlMwSwaUgfYn7lP 373DrfrROm+3hnKX3pu726VD9qmvAb4= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:19 2026 by rpki-client