$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa File: d4bae7d4-79c0-3570-86f8-0973a5218251.roa (raw, json) Hash identifier: kJweYoSzgyBoUrNnnQ07uGHXAwBgd1eLY9QYJUH9k58= Subject key identifier: 1B:E9:EA:4E:74:A4:93:A8:BF:38:84:0E:7D:A7:6A:B4:93:2C:02:92 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584E7A64D177298311D1C6676780 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 62904 IP address blocks: 173.232.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:d1:77:29:83:11:d1:c6:67:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=0f9706b4-98b7-47a7-a47e-91efbf5258a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:87:aa:48:7b:b4:d7:fd:30:77:ac:85:24: e5:c5:84:6e:a9:bd:ab:de:82:15:f5:e1:b1:bd:9e: 41:7a:4f:24:83:18:10:9e:39:11:14:b2:69:e3:36: 29:17:49:b2:ea:70:e9:1b:63:39:3c:b0:b3:19:a1: 94:d0:32:30:72:a8:6e:7e:e0:88:6a:95:df:ff:4d: 40:75:81:71:18:17:f0:52:c1:a2:f4:32:06:26:ee: c5:4f:c8:58:1a:9f:50:4e:4f:80:13:bc:59:7c:4d: f1:23:82:cb:a7:a0:46:83:b9:96:ea:be:ca:c9:c6: f3:2e:62:a6:6a:a0:d0:24:ec:ff:8c:50:e4:5d:6b: 8c:17:52:d0:fc:79:e5:a0:82:28:8f:d7:66:34:7e: ec:a1:fc:0e:a4:ea:ee:41:04:a7:2f:56:7c:68:0b: ca:b5:05:e2:c8:6e:f9:35:ba:57:76:a6:8a:e9:8e: 14:b3:2d:09:dc:12:59:dc:72:3b:f7:ab:61:e8:25: 25:8e:93:9e:99:d1:4e:f3:fa:4c:34:50:7e:b7:88: ef:e9:5d:df:95:f6:23:3a:b7:6e:50:18:6a:3b:cd: 80:d1:b1:fd:55:6d:17:a8:3c:d8:fb:a4:e9:a6:19: 5d:09:15:46:a8:27:7b:a6:e3:1f:39:17:ef:b4:bc: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E9:EA:4E:74:A4:93:A8:BF:38:84:0E:7D:A7:6A:B4:93:2C:02:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9d:a8:45:5b:18:9c:a1:5e:78:4f:59:ed:79:ba:e9:2e:b9: 01:ed:ae:a2:4a:5c:06:c4:ad:fc:15:7c:fd:4e:4a:0c:16:14: dc:35:87:7a:c6:ba:aa:09:bd:c8:23:23:d7:9f:df:35:f0:2f: 82:4b:33:4c:05:ad:49:0b:73:e2:a8:18:e1:87:dd:5b:47:34: 74:cf:eb:8b:89:53:7a:78:43:a4:c0:e1:f5:a6:c0:1f:dd:a7: ca:d6:33:20:63:a9:78:e3:f2:29:c7:18:36:0e:15:fb:06:8b: 48:04:c9:21:37:1d:a9:40:74:2c:4d:db:5d:8e:94:75:61:62: 8b:8e:76:b7:04:94:70:cd:df:eb:55:38:8a:1d:02:e0:5e:6c: 13:c8:99:47:11:9e:3d:da:05:36:da:4b:5f:0f:4e:a0:f6:2f: 74:40:7c:d3:42:ac:29:1d:86:db:f6:77:56:8b:6a:c1:6a:c6: 12:a6:42:b6:f4:e8:79:60:df:2c:73:b9:3e:9c:14:ed:a1:98: a9:77:c1:b7:13:64:27:d6:94:af:f5:78:cf:06:53:4c:fd:42: d7:8e:d9:f0:46:66:db:1a:0b:b9:6f:85:73:1f:3b:98:14:45: 4f:98:55:a2:a3:42:64:fb:31:62:51:7a:01:02:46:92:1e:ee: c6:4f:17:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNF3KYMR0cZnZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk MGY5NzA2YjQtOThiNy00N2E3LWE0N2UtOTFlZmJmNTI1OGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuOHqkh7tNf9MHeshSTlxYRuqb2r3oIV9eGx vZ5Bek8kgxgQnjkRFLJp4zYpF0my6nDpG2M5PLCzGaGU0DIwcqhufuCIapXf/01A dYFxGBfwUsGi9DIGJu7FT8hYGp9QTk+AE7xZfE3xI4LLp6BGg7mW6r7KycbzLmKm aqDQJOz/jFDkXWuMF1LQ/HnloIIoj9dmNH7sofwOpOruQQSnL1Z8aAvKtQXiyG75 NbpXdqaK6Y4Usy0J3BJZ3HI796th6CUljpOemdFO8/pMNFB+t4jv6V3flfYjOrdu UBhqO82A0bH9VW0XqDzY+6TpphldCRVGqCd7puMfORfvtLzFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvp6k50pJOovziEDn2narSTLAKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDRiYWU3ZDQtNzljMC0z NTcwLTg2ZjgtMDk3M2E1MjE4MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrejsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWdqEVbGJyhXnhPWe15uukuuQHtrqJKXAbErfwVfP1OSgwWFNw1h3rG uqoJvcgjI9ef3zXwL4JLM0wFrUkLc+KoGOGH3VtHNHTP64uJU3p4Q6TA4fWmwB/d p8rWMyBjqXjj8inHGDYOFfsGi0gEySE3HalAdCxN212OlHVhYouOdrcElHDN3+tV OIodAuBebBPImUcRnj3aBTbaS18PTqD2L3RAfNNCrCkdhtv2d1aLasFqxhKmQrb0 6Hlg3yxzuT6cFO2hmKl3wbcTZCfWlK/1eM8GU0z9QteO2fBGZtsaC7lvhXMfO5gU RU+YVaKjQmT7MWJRegECRpIe7sZPF0k= -----END CERTIFICATE-----Generated at Tue Jul 14 15:29:05 2026 by rpki-client