$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/0648fe06-21be-31a4-993e-e994e731c5cf.roa File: 0648fe06-21be-31a4-993e-e994e731c5cf.roa (raw, json) Hash identifier: 8dNbI3lxdjQi8ZdFOCKOfKajEHGjs2j+BBucqx9Axyo= Subject key identifier: 5A:F2:ED:E4:53:0F:D4:66:7F:B1:07:F5:A5:57:F1:12:B6:84:71:DD Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401 Certificate serial: 010D0C9F4328584EAE81B52EDFCF44F57D002F80 Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/0648fe06-21be-31a4-993e-e994e731c5cf.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 19695 IP address blocks: 169.197.160.0/22 maxlen: 22 208.65.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b5:2e:df:cf:44:f5:7d:00:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=eaadf25d-9c67-474b-9ffb-f9bc63ffe659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:f5:e7:ce:f4:29:d9:e4:43:e0:87:2f:b2: a2:2c:63:cb:31:90:ce:44:e2:85:0d:11:60:32:be: ee:22:f4:f3:d7:19:f6:ce:ed:c7:29:c0:52:53:3c: 1a:7d:49:b9:61:4c:d5:15:26:36:33:d9:eb:fb:e6: b2:dc:9d:b2:97:03:d2:87:90:b2:66:ca:45:e5:5a: 1e:9e:d1:76:a0:d8:2d:bd:d9:9c:ff:74:ce:6b:45: a2:42:b2:51:e8:3f:e3:79:ba:7d:2e:ad:66:d6:84: dd:5a:95:79:b6:8b:25:eb:5a:be:dc:fc:fd:c7:8e: 16:7e:29:ae:e9:9c:6a:ae:66:b9:08:81:c8:ed:b6: 10:66:b2:10:61:64:84:36:f7:16:52:56:2d:d5:f0: 72:7e:cc:77:93:13:e0:06:49:08:5b:bd:73:90:9d: 3d:4d:3c:f6:f4:0e:1f:2a:9a:b8:db:6e:9c:ef:3c: f4:18:5a:26:89:91:4e:e6:3e:82:2d:80:19:a5:ae: 54:b0:1c:41:11:8c:01:c0:6c:b9:dd:3f:dc:a1:0b: 9b:6b:71:e1:09:79:d1:8c:23:eb:b3:14:77:b5:9d: 7d:c6:20:0f:99:dc:d6:81:1f:22:fc:20:44:d3:ca: c8:4f:2f:c5:2c:7d:c1:e3:31:3b:da:5d:5a:96:f5: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F2:ED:E4:53:0F:D4:66:7F:B1:07:F5:A5:57:F1:12:B6:84:71:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/0648fe06-21be-31a4-993e-e994e731c5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl X509v3 Authority Key Identifier: keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer sbgp-ipAddrBlock: critical IPv4: 169.197.160.0/22 208.65.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:33:0d:79:6c:dc:90:ff:9e:54:63:d4:ca:58:47:e3:59:e1: a9:71:23:7c:9f:38:77:ba:4e:b0:5e:2c:b2:0d:16:8d:44:4b: cb:7c:ed:3e:78:5e:5e:3f:af:3c:91:3e:8a:cc:59:8b:a0:68: bc:b8:af:b1:5e:7b:89:3e:93:17:df:60:48:8d:1b:5e:5a:61: e4:80:c4:7b:4e:74:cc:27:65:68:7b:5b:b6:93:dc:ae:bc:41: 21:cb:7b:89:f2:28:4b:0f:fb:6e:45:4f:8e:56:d9:b3:ef:73: 69:6f:bf:cb:c4:30:b0:41:4f:6e:1b:13:d7:48:39:da:5d:dc: b2:f3:db:f8:ad:97:46:e1:32:78:a6:b3:b3:9d:e1:38:aa:87: 51:49:01:e1:97:3a:b0:3b:6a:9a:7b:f6:d0:95:43:3e:29:d3: 47:e1:c9:c7:bd:da:1d:50:0b:ed:0f:b2:16:ec:b3:9f:d8:3a: c0:b9:63:a5:1b:60:1d:92:eb:9a:fb:ae:93:c6:8c:81:fe:0a: 11:e6:dc:8e:e5:49:e4:af:5f:0d:bd:38:05:41:68:91:0d:74: 88:98:b8:5c:a0:5b:aa:9a:6e:97:ba:09:35:f3:a9:cc:cb:00: 46:3f:34:42:f7:da:db:42:1a:6c:6b:2d:a1:28:06:2a:97:6b: d3:39:db:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6ugbUu389E9X0AL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMyMzc0MDgtMDg4OC00YjFmLWJlZDUtYTQ1ODg2NjU2 NDAxMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZWFhZGYyNWQtOWM2Ny00NzRiLTlmZmItZjliYzYzZmZlNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnir15870KdnkQ+CHL7KiLGPLMZDOROKFDRFg Mr7uIvTz1xn2zu3HKcBSUzwafUm5YUzVFSY2M9nr++ay3J2ylwPSh5CyZspF5Voe ntF2oNgtvdmc/3TOa0WiQrJR6D/jebp9Lq1m1oTdWpV5tosl61q+3Pz9x44Wfimu 6Zxqrma5CIHI7bYQZrIQYWSENvcWUlYt1fByfsx3kxPgBkkIW71zkJ09TTz29A4f Kpq4226c7zz0GFomiZFO5j6CLYAZpa5UsBxBEYwBwGy53T/coQuba3HhCXnRjCPr sxR3tZ19xiAPmdzWgR8i/CBE08rITy/FLH3B4zE72l1alvW5VwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFry7eRTD9Rmf7EH9aVX8RK2hHHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIz NzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4ODY2NTY0MDEvMDY0OGZlMDYtMjFiZS0z MWE0LTk5M2UtZTk5NGU3MzFjNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyMzc0MDgtMDg4OC00YjFmLWJl ZDUtYTQ1ODg2NjU2NDAxL2QzMjM3NDA4LTA4ODgtNGIxZi1iZWQ1LWE0NTg4NjY1 NjQwMS5jcmwwHwYDVR0jBBgwFoAU6NdV2XoY+vnTrgS31DEuvEX9JEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIzNzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4 ODY2NTY0MDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqcWgAwQC 0EFUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALkzDXls3JD/nlRj1MpYR+NZ4alxI3yfOHe6TrBeLLINFo1E S8t87T54Xl4/rzyRPorMWYugaLy4r7Fee4k+kxffYEiNG15aYeSAxHtOdMwnZWh7 W7aT3K68QSHLe4nyKEsP+25FT45W2bPvc2lvv8vEMLBBT24bE9dIOdpd3LLz2/it l0bhMnims7Od4Tiqh1FJAeGXOrA7app79tCVQz4p00fhyce92h1QC+0Pshbss5/Y OsC5Y6UbYB2S65r7rpPGjIH+ChHm3I7lSeSvXw29OAVBaJENdIiYuFygW6qabpe6 CTXzqczLAEY/NEL32ttCGmxrLaEoBiqXa9M52zw= -----END CERTIFICATE-----Generated at Thu Aug 13 16:54:14 2026 by rpki-client