$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa File: cebdec51-99ad-378c-9ad6-936ea7e7b823.roa (raw, json) Hash identifier: 7Klo4dsGdP1rnV054vbzNzuu0HPQPottXW26NPC2ExA= Subject key identifier: 40:66:4D:64:83:E2:71:46:5C:CD:9D:F3:3E:3C:85:48:65:7B:DE:73 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584E8DEFA9D3CB0E2A950475BC40 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 19740 IP address blocks: 172.84.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:a9:d3:cb:0e:2a:95:04:75:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=c6cb0a8a-a178-4bec-8c7d-4badf97ab816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:1b:d6:af:3e:ef:b6:66:1a:47:81:3f:72: 17:f7:18:4d:3a:60:31:86:20:be:3b:b2:c7:1a:6c: e1:aa:6e:65:d1:c7:f3:17:77:54:25:02:2f:fb:06: 8c:46:18:e6:37:31:ba:ab:68:51:97:cb:79:7e:5d: ca:30:dd:83:9b:11:60:64:74:5c:df:58:c5:a5:11: d3:9e:78:74:05:a0:98:70:45:b6:46:85:a5:f3:82: 54:f0:34:85:9e:af:64:1c:37:af:2c:fa:e1:13:a1: 37:2f:03:9c:20:cf:e3:e0:d1:a9:eb:20:94:4a:64: 64:1f:f6:c6:3a:53:c9:49:79:11:00:3d:72:e3:17: 6f:da:42:45:98:4b:8f:85:92:f1:db:de:39:4f:05: e9:bc:1d:35:91:1b:da:b8:62:a4:09:55:94:65:cd: eb:c5:e5:5b:9d:8c:41:68:ab:d5:d1:64:b3:c0:67: d8:92:d6:0a:2e:76:44:88:ff:ef:71:a0:b6:13:79: 92:c1:6d:bf:43:0d:13:02:5a:0e:19:cd:f8:d2:94: 1c:99:53:a3:14:8b:fb:38:60:a2:a1:ba:99:50:2b: cd:ae:47:1f:a6:4a:08:5e:52:2b:c0:b0:c4:3c:1b: 4c:41:86:82:d0:9b:94:34:25:bb:ce:c8:42:5d:be: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:4D:64:83:E2:71:46:5C:CD:9D:F3:3E:3C:85:48:65:7B:DE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:60:aa:06:ae:88:65:41:7a:88:2d:82:1d:f8:29:06:43:5c: db:8b:94:18:a6:fa:b1:3d:b4:d6:bc:33:21:ad:79:5d:f3:d7: 0d:03:78:37:ac:4a:f9:c2:3e:80:f9:92:8e:1a:46:39:6b:dc: 49:15:3d:1c:55:e0:30:de:6f:21:e2:b6:88:55:a4:ee:94:62: 8f:07:54:e8:51:3c:1c:38:4d:be:78:3e:2a:49:71:c9:ec:ab: 7d:b9:0c:35:85:0b:c0:1b:51:9d:2c:6f:6f:52:32:d3:83:45: 42:d5:ca:91:8c:c1:3e:2b:77:b5:ee:15:5c:5a:aa:d8:2d:03: 11:1e:c7:4b:ef:51:6b:6b:30:5f:bb:70:9e:99:45:30:1c:f3: fa:7f:ff:4d:cc:b0:96:4e:d1:fd:f6:09:4f:4b:f2:33:8e:5d: 42:e1:da:24:96:7b:60:ed:45:d8:97:55:ce:23:01:6d:3f:06: 6f:5b:80:04:ca:11:26:b9:fb:c9:d0:df:c2:27:8c:44:36:df: 95:4e:ba:dd:28:ff:c5:a9:98:4f:21:e5:f6:d7:ed:c3:79:c1: 98:27:ae:b3:fa:38:09:0e:2f:03:f7:40:90:02:7b:73:a1:52: 33:92:e7:e3:12:99:77:79:7f:f0:4c:19:c2:42:96:d7:08:2b: 1b:92:81:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N76nTyw4qlQR1vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YzZjYjBhOGEtYTE3OC00YmVjLThjN2QtNGJhZGY5N2FiODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQgb1q8+77ZmGkeBP3IX9xhNOmAxhiC+O7LH Gmzhqm5l0cfzF3dUJQIv+waMRhjmNzG6q2hRl8t5fl3KMN2DmxFgZHRc31jFpRHT nnh0BaCYcEW2RoWl84JU8DSFnq9kHDevLPrhE6E3LwOcIM/j4NGp6yCUSmRkH/bG OlPJSXkRAD1y4xdv2kJFmEuPhZLx2945TwXpvB01kRvauGKkCVWUZc3rxeVbnYxB aKvV0WSzwGfYktYKLnZEiP/vcaC2E3mSwW2/Qw0TAloOGc340pQcmVOjFIv7OGCi obqZUCvNrkcfpkoIXlIrwLDEPBtMQYaC0JuUNCW7zshCXb5o/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBmTWSD4nFGXM2d8z48hUhle95zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvY2ViZGVjNTEtOTlhZC0z NzhjLTlhZDYtOTM2ZWE3ZTdiODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERgqgauiGVBeogtgh34KQZDXNuLlBim+rE9tNa8MyGteV3z1w0DeDes SvnCPoD5ko4aRjlr3EkVPRxV4DDebyHitohVpO6UYo8HVOhRPBw4Tb54PipJccns q325DDWFC8AbUZ0sb29SMtODRULVypGMwT4rd7XuFVxaqtgtAxEex0vvUWtrMF+7 cJ6ZRTAc8/p//03MsJZO0f32CU9L8jOOXULh2iSWe2DtRdiXVc4jAW0/Bm9bgATK ESa5+8nQ38InjEQ235VOut0o/8WpmE8h5fbX7cN5wZgnrrP6OAkOLwP3QJACe3Oh UjOS5+MSmXd5f/BMGcJCltcIKxuSgb0= -----END CERTIFICATE-----Generated at Tue Jul 21 11:36:01 2026 by rpki-client