$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: 6fFrxMA3H1+bwiZdIgWz+W4yXXNmqaK9TszZk3YRDT4= Subject key identifier: A9:52:3B:68:0C:D8:9A:BB:55:93:32:99:42:D9:B8:46:48:AA:83:DA Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584E5FDF5B016B64ADB96D0C0000 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:5b:01:6b:64:ad:b9:6d:0c:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=59c00960-a666-4fe1-aaed-85d210259cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:a9:64:ac:07:13:77:96:0d:dc:ef:8e:6d: 6c:ee:72:1d:9c:f3:58:51:74:07:07:73:63:fa:19: 16:0f:9a:2b:ca:64:9f:cb:13:dd:9b:fb:58:cd:44: ef:c5:4f:c5:78:88:a8:04:e7:43:44:67:b9:ff:26: 51:db:f8:fd:df:a4:64:d0:14:54:c8:9b:cd:49:5f: 9f:34:b4:38:d2:9c:03:e5:b8:1a:c0:02:4a:fa:5b: d6:af:3a:24:0d:95:82:64:42:9a:61:66:1a:dd:c9: e6:ae:5d:7f:58:50:1a:e6:54:a7:ef:51:9f:6a:1a: e2:f0:57:1d:bf:c8:39:da:8d:b5:5d:9f:03:4d:70: 0d:78:72:5e:02:b9:64:45:06:21:5f:88:03:a4:6e: c0:23:84:a8:f7:08:46:85:e6:28:ec:cc:d5:c6:cc: ba:02:fb:95:ea:10:a4:15:d6:42:67:d3:a9:db:77: 24:1e:50:5b:97:bd:e6:4d:fa:2b:43:9d:09:4d:aa: 4d:dd:dd:4c:aa:99:3d:13:7e:46:68:46:19:6b:71: 44:ac:2e:f0:9b:54:df:5e:ce:e3:f5:d2:c6:0f:e1: a3:a4:ea:0f:33:88:c7:2b:ce:94:7e:35:ba:79:8c: 74:13:ea:b0:3d:3a:7d:fc:49:e2:df:65:bb:66:cb: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:52:3B:68:0C:D8:9A:BB:55:93:32:99:42:D9:B8:46:48:AA:83:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c7:54:88:0a:00:8b:d5:5d:a6:d6:39:52:fc:35:f6:68:d5: f4:ff:68:3a:9f:6a:24:99:b9:35:ec:be:9a:13:a4:5a:26:f0: 75:71:db:46:d1:24:26:da:76:16:33:5c:f9:85:62:4f:da:eb: 01:c9:b9:17:13:9f:14:34:94:2d:cc:55:74:45:ad:7f:38:c7: 90:9a:94:3d:ca:7f:2b:3c:44:43:35:15:bf:9b:bf:ba:ed:d0: af:70:dc:63:71:7c:33:53:64:97:ee:1c:78:d9:fe:f6:50:77: 25:aa:c4:90:28:78:2e:0e:08:14:40:c3:a9:2d:e3:ac:64:03: 1f:42:fe:6d:d6:5c:d5:09:d8:8b:1e:5e:b3:7f:c3:d5:11:f2: bb:5f:6d:6f:a1:29:3d:db:7b:e7:f5:41:63:49:97:ad:de:8b: 9d:27:74:c3:f3:a7:45:3b:1c:60:6e:a8:27:37:f3:98:19:f3: 4f:4a:70:99:71:84:2a:12:d0:7d:52:a4:1c:33:39:c3:d5:92: b2:fd:9a:db:1d:1c:4c:9e:1f:47:88:00:ef:b5:81:c4:40:7b: cc:f1:f5:b8:20:ba:e9:a8:c7:48:22:aa:91:0e:75:ff:b0:b2: 0b:ea:89:24:a0:95:d8:ea:70:0c:3d:e8:b9:d9:43:a0:de:41: 49:3b:b9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f31sBa2StuW0MAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NTljMDA5NjAtYTY2Ni00ZmUxLWFhZWQtODVkMjEwMjU5Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSepZKwHE3eWDdzvjm1s7nIdnPNYUXQHB3Nj +hkWD5orymSfyxPdm/tYzUTvxU/FeIioBOdDRGe5/yZR2/j936Rk0BRUyJvNSV+f NLQ40pwD5bgawAJK+lvWrzokDZWCZEKaYWYa3cnmrl1/WFAa5lSn71Gfahri8Fcd v8g52o21XZ8DTXANeHJeArlkRQYhX4gDpG7AI4So9whGheYo7MzVxsy6AvuV6hCk FdZCZ9Op23ckHlBbl73mTforQ50JTapN3d1Mqpk9E35GaEYZa3FErC7wm1TfXs7j 9dLGD+GjpOoPM4jHK86UfjW6eYx0E+qwPTp9/Eni32W7ZsuyIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlSO2gM2Jq7VZMymULZuEZIqoPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvHVIgKAIvVXabWOVL8NfZo1fT/aDqfaiSZuTXsvpoTpFom8HVx20bR JCbadhYzXPmFYk/a6wHJuRcTnxQ0lC3MVXRFrX84x5CalD3Kfys8REM1Fb+bv7rt 0K9w3GNxfDNTZJfuHHjZ/vZQdyWqxJAoeC4OCBRAw6kt46xkAx9C/m3WXNUJ2Ise XrN/w9UR8rtfbW+hKT3be+f1QWNJl63ei50ndMPzp0U7HGBuqCc385gZ809KcJlx hCoS0H1SpBwzOcPVkrL9mtsdHEyeH0eIAO+1gcRAe8zx9bgguumox0giqpEOdf+w sgvqiSSgldjqcAw96LnZQ6DeQUk7uRU= -----END CERTIFICATE-----Generated at Mon Jul 6 22:18:14 2026 by rpki-client