$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5ba8e4-d849-3092-b39d-9a8d0dab3273.roa File: 4d5ba8e4-d849-3092-b39d-9a8d0dab3273.roa (raw, json) Hash identifier: Qf+Wb7FWbrJx8AjDGSl0TBsmm8SgfvYr4r+bp8ZYLRk= Subject key identifier: 22:98:EF:EE:E8:F6:8E:E4:69:DA:2C:DD:84:9B:4C:C3:F6:19:6D:23 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA233FE7971DE1209E9B180 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5ba8e4-d849-3092-b39d-9a8d0dab3273.roa Signing time: Sun 19 Jul 2026 18:24:19 +0000 ROA not before: Sun 19 Jul 2026 18:24:19 +0000 ROA not after: Sat 17 Oct 2026 18:24:19 +0000 asID: 53708 IP address blocks: 216.243.13.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:33:fe:79:71:de:12:09:e9:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:19 2026 GMT Not After : Oct 17 18:24:19 2026 GMT Subject: CN=bdbf662c-4dc8-4379-a46d-641179163b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:d5:45:b2:94:0d:c2:fe:ab:c8:96:d8:d7: ca:86:b6:82:06:0b:f9:11:f0:a2:c0:88:80:ac:e8: 28:83:49:9c:d1:bb:dc:42:94:c1:fd:e6:16:53:8b: 00:8b:43:21:aa:0b:9e:af:f1:d9:90:a3:e9:ee:74: 68:fa:4e:4c:6b:1f:f6:69:76:44:fb:e6:07:21:fb: 84:3e:04:aa:cd:e7:8f:20:02:1e:84:87:de:e9:ec: 9e:b1:74:68:e2:f7:1f:78:fe:f1:e8:cd:3c:9c:64: 6d:bf:72:da:0e:71:a1:33:ba:64:3d:c7:63:f6:72: 94:9a:9c:e0:30:60:9a:25:df:d8:f6:da:4d:60:cc: 2d:6f:62:ca:f7:9d:b5:e7:28:15:f0:bc:96:2e:e5: 85:58:bc:48:19:e4:95:e6:4e:f7:eb:d8:ee:19:58: fc:cf:8b:9f:81:9e:cd:c5:dc:f0:89:6a:0f:db:b4: 56:c7:1e:0f:84:89:0b:77:77:a9:e7:94:95:5f:42: 28:c8:b4:47:42:5c:3d:75:14:3d:b6:da:c8:85:14: 0a:aa:aa:d4:c3:27:fc:9d:83:55:fa:c2:5b:26:0e: 8b:1c:68:5d:f3:11:0d:d7:f2:6f:39:6e:29:33:aa: 2f:4c:5e:8b:f2:4c:51:72:6f:c9:1e:e5:8f:3e:38: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:98:EF:EE:E8:F6:8E:E4:69:DA:2C:DD:84:9B:4C:C3:F6:19:6D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5ba8e4-d849-3092-b39d-9a8d0dab3273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:33:ee:de:56:d4:f4:f7:6e:29:41:23:8a:eb:4f:b6:6d:f7: 50:32:1e:ed:2f:cb:af:5e:74:de:3f:53:a4:be:8e:0a:98:ae: 0b:bc:62:b2:e3:1c:23:08:92:8b:a1:62:a1:af:48:56:4d:fb: 70:9f:24:4b:76:b6:a0:a6:4e:20:94:38:9c:6e:c8:7c:a2:f8: 96:ee:b7:b2:76:a5:d6:42:73:58:eb:47:b6:a4:f9:c3:ae:a1: bb:dd:3b:e6:c2:4f:e8:a1:a3:f8:72:bb:56:64:27:d0:87:76: c2:53:dc:3d:cb:5b:0a:05:b2:35:bb:f1:cd:38:d1:44:f0:a5: fd:f7:ac:1b:50:67:3f:3c:1b:13:9e:66:6c:1a:f1:4c:63:b2: 9b:b8:97:c1:8d:94:81:e4:07:a8:6e:86:26:26:32:c6:cc:9e: be:b1:47:c3:60:f6:00:34:83:65:b4:c3:a7:38:80:ba:1c:b5: e9:02:04:25:78:de:c7:d4:72:36:eb:39:ec:3a:39:92:36:3c: b8:5e:e4:fb:fc:8e:1f:59:cb:3d:62:5a:00:90:7e:7c:f4:f4: 6a:d6:c8:a9:d3:c7:4f:b0:1e:1a:3e:d9:96:26:6f:92:5d:f4: c9:a6:56:ee:f9:9c:7b:1a:7b:b0:1b:31:38:88:16:3e:fb:b9: 3c:8e:d2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojP+eXHeEgnpsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxOVoXDTI2MTAxNzE4MjQxOVowLzEtMCsGA1UEAxMk YmRiZjY2MmMtNGRjOC00Mzc5LWE0NmQtNjQxMTc5MTYzYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSnVRbKUDcL+q8iW2NfKhraCBgv5EfCiwIiA rOgog0mc0bvcQpTB/eYWU4sAi0Mhqguer/HZkKPp7nRo+k5Max/2aXZE++YHIfuE PgSqzeePIAIehIfe6eyesXRo4vcfeP7x6M08nGRtv3LaDnGhM7pkPcdj9nKUmpzg MGCaJd/Y9tpNYMwtb2LK95215ygV8LyWLuWFWLxIGeSV5k7369juGVj8z4ufgZ7N xdzwiWoP27RWxx4PhIkLd3ep55SVX0IoyLRHQlw9dRQ9ttrIhRQKqqrUwyf8nYNV +sJbJg6LHGhd8xEN1/JvOW4pM6ovTF6L8kxRcm/JHuWPPjiakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKY7+7o9o7kados3YSbTMP2GW0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGQ1YmE4ZTQtZDg0OS0z MDkyLWIzOWQtOWE4ZDBkYWIzMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PMNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMz7t5W1PT3bilBI4rrT7Zt91AyHu0vy69edN4/U6S+jgqYrgu8YrLj HCMIkouhYqGvSFZN+3CfJEt2tqCmTiCUOJxuyHyi+Jbut7J2pdZCc1jrR7ak+cOu obvdO+bCT+iho/hyu1ZkJ9CHdsJT3D3LWwoFsjW78c040UTwpf33rBtQZz88GxOe Zmwa8Uxjspu4l8GNlIHkB6huhiYmMsbMnr6xR8Ng9gA0g2W0w6c4gLoctekCBCV4 3sfUcjbrOew6OZI2PLhe5Pv8jh9Zyz1iWgCQfnz09GrWyKnTx0+wHho+2ZYmb5Jd 9MmmVu75nHsae7AbMTiIFj77uTyO0gM= -----END CERTIFICATE-----Generated at Tue Jul 21 22:36:45 2026 by rpki-client