$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bb8be691-25e6-329f-925a-555a19c84df6.roa File: bb8be691-25e6-329f-925a-555a19c84df6.roa (raw, json) Hash identifier: QXS0yBITs5rkQrsOgBmgV9INIo4d3DlIOofS9q0zdUk= Subject key identifier: 8E:35:AC:B4:F9:DC:8D:6C:EB:E7:45:5E:10:B6:BE:FE:C8:2F:C9:36 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA232C041D3C14B46FE3AC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bb8be691-25e6-329f-925a-555a19c84df6.roa Signing time: Sun 19 Jul 2026 18:24:18 +0000 ROA not before: Sun 19 Jul 2026 18:24:18 +0000 ROA not after: Sat 17 Oct 2026 18:24:18 +0000 asID: 14589 IP address blocks: 72.29.160.0/19 maxlen: 29 74.82.128.0/20 maxlen: 29 2001:48c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:32:c0:41:d3:c1:4b:46:fe:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:18 2026 GMT Not After : Oct 17 18:24:18 2026 GMT Subject: CN=b4c6efba-e68f-4d62-954d-7505c4f4c392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1f:34:ce:d4:87:68:42:c8:a9:c1:0e:8f:77: f6:aa:52:d1:00:d0:7e:b7:02:8f:91:4e:4e:92:94: db:77:df:83:0a:1b:25:68:3e:47:10:d7:ab:a6:d0: d8:2a:06:cd:46:5f:a9:0b:d6:7c:24:1b:47:5e:17: be:a1:b4:99:ae:e1:b5:b7:3a:4b:c8:8e:69:7c:f1: f8:cf:8f:ad:13:5a:b9:e9:ac:02:19:11:46:c0:7e: df:f7:5f:88:fe:4e:9b:7f:1c:2a:d4:ec:10:29:69: 12:7e:52:2a:86:6f:ac:7c:48:70:10:54:84:84:74: e9:d7:b3:c9:da:ae:a5:fa:89:5b:1c:ee:2c:3c:67: ca:37:db:94:4d:05:99:ec:8a:bb:9f:3f:a2:d0:ff: 2f:9f:55:17:85:68:6d:69:19:01:2e:4e:d6:e9:18: bd:7c:e6:2f:e6:de:9e:18:34:e5:78:da:f6:8d:11: 66:54:6e:52:b6:d2:c1:3b:84:89:08:44:1d:74:3c: fd:9e:0a:9c:e8:58:a6:5a:a5:01:74:de:07:82:29: b7:ea:e0:68:15:cc:01:33:5b:e6:97:d8:04:0a:67: 21:17:37:6a:22:03:93:55:03:ea:72:42:a7:a1:c9: d9:57:ef:95:77:04:99:c6:98:b1:1d:19:dc:6c:74: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:35:AC:B4:F9:DC:8D:6C:EB:E7:45:5E:10:B6:BE:FE:C8:2F:C9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/bb8be691-25e6-329f-925a-555a19c84df6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 72.29.160.0/19 74.82.128.0/20 IPv6: 2001:48c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ef:58:25:a6:d3:db:1a:37:0b:bc:8b:9a:b5:d3:20:dd:68: 46:48:23:15:8a:4c:f9:ab:f2:f6:27:e5:e6:79:4e:3d:10:a6: 4b:a8:6b:57:e0:d2:f6:39:99:18:91:91:eb:cd:ad:40:4b:de: 10:d0:fe:92:e7:f1:f3:ac:03:38:e3:15:0d:39:79:a6:07:a3: d5:ca:34:60:87:f6:9f:0b:a0:d4:c1:24:22:cd:a7:cb:34:f9: 29:e9:af:82:75:32:14:3d:da:6f:63:f2:25:3e:42:d9:a6:ed: 94:ad:67:d9:44:20:3e:1e:f1:ed:4c:4b:37:e9:52:76:b7:45: 37:f4:be:68:8e:51:ec:98:fe:ec:89:46:b3:7e:b3:57:70:c0: 8a:1d:dc:ce:3e:75:bc:d1:ab:e6:41:cc:fe:d7:db:c0:4e:c4: a0:41:7c:a0:de:0d:c5:c4:cc:1a:4c:3f:44:4c:47:4d:8f:7d: 92:26:ca:a1:3e:1f:c4:03:93:fa:39:04:0d:83:95:9a:eb:eb: 92:92:b0:97:22:10:ad:69:61:c3:bd:5a:07:b3:87:37:28:a4: f7:97:90:5a:a0:8d:f6:f8:c5:a1:08:35:16:4d:ea:4a:e9:47: 74:3b:f5:69:9f:a5:f8:5f:0b:cd:52:46:a3:a1:4d:3c:cc:b9: 63:fb:9e:fc -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6NojLAQdPBS0b+OsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxOFoXDTI2MTAxNzE4MjQxOFowLzEtMCsGA1UEAxMk YjRjNmVmYmEtZTY4Zi00ZDYyLTk1NGQtNzUwNWM0ZjRjMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B80ztSHaELIqcEOj3f2qlLRANB+twKPkU5O kpTbd9+DChslaD5HENerptDYKgbNRl+pC9Z8JBtHXhe+obSZruG1tzpLyI5pfPH4 z4+tE1q56awCGRFGwH7f91+I/k6bfxwq1OwQKWkSflIqhm+sfEhwEFSEhHTp17PJ 2q6l+olbHO4sPGfKN9uUTQWZ7Iq7nz+i0P8vn1UXhWhtaRkBLk7W6Ri9fOYv5t6e GDTleNr2jRFmVG5SttLBO4SJCEQddDz9ngqc6FimWqUBdN4Hgim36uBoFcwBM1vm l9gECmchFzdqIgOTVQPqckKnocnZV++VdwSZxpixHRncbHTBcwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFI41rLT53I1s6+dFXhC2vv7IL8k2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYmI4YmU2OTEtMjVlNi0z MjlmLTkyNWEtNTU1YTE5Yzg0ZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFSB2gAwQE SlKAMA0EAgACMAcDBQAgAUjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABTvWCWm09saNwu8i5q10yDdaEZI IxWKTPmr8vYn5eZ5Tj0Qpkuoa1fg0vY5mRiRkevNrUBL3hDQ/pLn8fOsAzjjFQ05 eaYHo9XKNGCH9p8LoNTBJCLNp8s0+Snpr4J1MhQ92m9j8iU+Qtmm7ZStZ9lEID4e 8e1MSzfpUna3RTf0vmiOUeyY/uyJRrN+s1dwwIod3M4+dbzRq+ZBzP7X28BOxKBB fKDeDcXEzBpMP0RMR02PfZImyqE+H8QDk/o5BA2DlZrr65KSsJciEK1pYcO9Wgez hzcopPeXkFqgjfb4xaEINRZN6krpR3Q79WmfpfhfC81SRqOhTTzMuWP7nvw= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:30 2026 by rpki-client