$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa File: aedbe3d8-a938-347c-a902-e7d97e409a71.roa (raw, json) Hash identifier: VL6oWWYjTfWtlmlbJMafaBlHIzrzdaLzsaWaLWYt1wE= Subject key identifier: 2C:A4:8F:ED:BD:91:A3:70:5B:D8:89:36:DB:84:99:9F:3B:8D:2A:4D Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Certificate serial: 010D0C9F4328584EA79747B78A07995A90ABCF00 Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13631 IP address blocks: 64.22.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:47:b7:8a:07:99:5a:90:ab:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=077a3752-793f-49da-9b99-8bfbd29b2021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:92:8e:d8:17:a5:31:d3:fc:f8:d2:85:c2: e3:2d:55:a6:3c:bd:cd:35:c2:e9:15:cd:40:9a:8e: 5b:3e:c9:a4:95:52:32:cf:3a:56:88:6c:1a:69:7e: 85:37:68:6c:6b:40:d3:9d:6f:1b:56:14:eb:ca:7b: d8:d4:8d:de:b9:bf:18:ce:ed:e5:4f:3a:72:d6:f4: 63:ba:c7:9a:75:9a:00:86:4a:05:f7:2e:bc:81:e0: f3:1f:50:29:da:ef:6e:ea:3e:26:a9:1a:f7:c0:d1: 41:15:d4:b5:48:55:fe:ad:7f:b9:b8:3b:e1:98:d4: 7d:7f:45:61:d0:45:78:ed:bc:1c:83:e8:ce:fa:6c: 62:18:67:55:75:bf:4b:b6:1a:cd:74:b6:3a:ce:e1: 11:53:af:cc:54:85:cb:47:52:ee:b2:de:28:aa:ba: 87:a9:4a:66:7f:15:1f:82:ca:fa:67:95:55:17:ca: 50:9a:d4:01:00:e1:40:05:85:65:cb:45:ff:69:0f: 42:db:dd:99:63:44:28:92:db:e3:65:49:5c:78:2e: 2a:23:7b:da:4d:ac:ce:1f:33:d7:b1:4c:6e:c2:3c: 4c:e9:36:f2:4c:c4:ca:08:02:66:e9:3f:b9:47:c4: 77:dd:c0:5d:ec:42:86:2f:fe:17:87:9a:e3:c6:c7: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:8F:ED:BD:91:A3:70:5B:D8:89:36:DB:84:99:9F:3B:8D:2A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl X509v3 Authority Key Identifier: keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer sbgp-ipAddrBlock: critical IPv4: 64.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2b:42:c6:2f:79:6e:4b:cd:08:5e:d2:c6:4c:84:04:aa:34: 0e:ea:98:c9:1c:7b:8c:88:b2:6f:d4:6d:96:29:73:2a:18:30: 1e:91:8d:4c:4f:69:67:ca:b9:eb:34:10:3f:7e:db:28:1c:c3: 91:99:c2:eb:8e:61:70:9b:91:69:76:50:f3:29:b2:97:26:c1: 3b:d5:51:1b:dc:37:91:ef:d6:ec:a8:c4:0a:c9:68:8e:84:09: 26:6b:f8:2d:59:dd:8f:2f:76:42:87:80:5d:3d:4c:c1:34:17: 8e:e1:32:58:70:92:85:9d:4d:bd:fb:9b:f2:17:3c:e2:58:d0: de:39:17:9d:08:b0:15:2e:7a:60:ae:52:71:fb:82:e5:f3:b6: c1:a1:78:ae:2f:97:14:0c:47:28:16:7e:55:09:b3:c7:60:72: cb:87:dd:30:41:c3:ea:1e:d7:0c:1d:72:88:7d:4f:35:e9:e2: c1:8f:97:4a:dd:c0:70:51:25:18:5b:f0:84:42:5e:dc:6d:a4: f5:97:0d:76:d0:0f:9e:7f:ee:f2:9f:f8:49:22:20:cf:a0:5e: 3b:3a:6d:5b:b1:10:57:1e:d6:d1:bd:7b:89:ef:62:20:29:98: 48:73:a3:3b:5c:88:85:09:2b:0c:33:db:93:6a:a4:64:7e:d6: 53:1d:32:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl0e3igeZWpCrzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy NmQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDc3YTM3NTItNzkzZi00OWRhLTliOTktOGJmYmQyOWIyMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8iSjtgXpTHT/PjShcLjLVWmPL3NNcLpFc1A mo5bPsmklVIyzzpWiGwaaX6FN2hsa0DTnW8bVhTrynvY1I3eub8Yzu3lTzpy1vRj useadZoAhkoF9y68geDzH1Ap2u9u6j4mqRr3wNFBFdS1SFX+rX+5uDvhmNR9f0Vh 0EV47bwcg+jO+mxiGGdVdb9LthrNdLY6zuERU6/MVIXLR1Lust4oqrqHqUpmfxUf gsr6Z5VVF8pQmtQBAOFABYVly0X/aQ9C292ZY0QoktvjZUlceC4qI3vaTazOHzPX sUxuwjxM6TbyTMTKCAJm6T+5R8R33cBd7EKGL/4Xh5rjxsdJ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCykj+29kaNwW9iJNtuEmZ87jSpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvYWVkYmUzZDgtYTkzOC0z NDdjLWE5MDItZTdkOTdlNDA5YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgrQsYveW5LzQhe0sZMhASqNA7qmMkce4yIsm/UbZYpcyoYMB6RjUxP aWfKues0ED9+2ygcw5GZwuuOYXCbkWl2UPMpspcmwTvVURvcN5Hv1uyoxArJaI6E CSZr+C1Z3Y8vdkKHgF09TME0F47hMlhwkoWdTb37m/IXPOJY0N45F50IsBUuemCu UnH7guXztsGheK4vlxQMRygWflUJs8dgcsuH3TBBw+oe1wwdcoh9TzXp4sGPl0rd wHBRJRhb8IRCXtxtpPWXDXbQD55/7vKf+EkiIM+gXjs6bVuxEFce1tG9e4nvYiAp mEhzoztciIUJKwwz25NqpGR+1lMdMnw= -----END CERTIFICATE-----Generated at Wed Aug 19 16:51:54 2026 by rpki-client