$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa File: 96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa (raw, json) Hash identifier: /c52V5GikWdcYy9LRNQihmKCjaOK7ZMsSx+j/JkMmGQ= Subject key identifier: A6:8D:B1:EB:E6:A8:04:D7:F8:96:8B:4E:07:03:83:00:28:0F:B2:48 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584E6339A6379B4F8C0D1F9A9380 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa Signing time: Sat 04 Jul 2026 13:49:42 +0000 ROA not before: Sat 04 Jul 2026 13:49:42 +0000 ROA not after: Mon 14 Sep 2026 15:21:22 +0000 asID: 402631 IP address blocks: 206.174.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:63:39:a6:37:9b:4f:8c:0d:1f:9a:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Jul 4 13:49:42 2026 GMT Not After : Sep 14 15:21:22 2026 GMT Subject: CN=c70cd322-6666-4707-a013-0e55ccb9dfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:02:64:fb:59:34:38:77:d6:90:08:04:d4: 40:b6:eb:e1:46:89:a1:53:15:1c:a4:44:0c:8d:80: 13:e5:84:11:15:2d:2b:7e:c5:43:cf:50:db:91:7b: 9a:e5:66:b8:6c:7c:51:82:13:3a:94:c5:4b:2b:c1: 70:8d:de:62:fb:26:16:d9:86:a0:68:1a:1b:61:5d: ed:f6:a8:8f:72:c5:b4:42:e6:0e:b7:98:8e:91:5d: e4:12:4b:5e:4a:7a:10:ae:93:00:21:a3:29:54:28: 4d:14:0a:ab:49:2a:82:14:46:68:d5:9c:fc:29:d3: 42:ba:0a:42:46:5f:a7:eb:c8:b6:b2:53:ca:90:dc: 0a:d0:aa:9a:24:c3:5a:8d:8a:5a:7f:5d:0d:23:1e: 8c:cb:15:c6:0c:68:e2:a0:d6:a1:d9:64:ff:91:b3: 68:9d:05:ef:73:67:5b:c0:40:ae:d1:74:bf:58:bc: 1c:15:d1:34:be:d7:e3:4c:90:60:71:1f:44:53:9d: 57:43:53:87:dd:f6:0d:b4:3b:3e:6d:fc:18:63:2d: 44:95:fe:9d:15:9c:20:19:48:ed:e4:ab:ad:c6:50: c6:f6:4f:42:14:8a:1f:38:ec:ee:00:01:34:d7:98: 0f:31:8c:31:fe:c2:88:de:ed:7d:82:3a:6f:40:65: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8D:B1:EB:E6:A8:04:D7:F8:96:8B:4E:07:03:83:00:28:0F:B2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ed:56:be:f2:18:66:9e:45:94:f0:3d:b6:5a:b9:a3:16:e4: 14:8b:c9:3e:28:70:90:5f:46:83:67:bf:e0:c2:c3:ca:0a:ce: cd:24:09:15:19:10:c3:7b:89:b7:0d:36:33:1a:f1:97:92:b5: 05:d6:55:08:eb:dc:da:fa:35:71:b1:14:81:3d:20:db:f2:92: ed:7c:58:96:18:38:20:8d:d5:18:f7:75:2b:68:bb:fe:70:49: ce:49:8d:46:43:d4:c0:0b:a4:40:22:80:81:76:65:42:84:65: 68:76:ef:84:11:36:08:20:77:22:9c:c2:05:58:ef:04:22:eb: 25:c5:fb:be:ae:8b:79:1a:28:37:0f:10:f4:eb:a4:54:19:87: 2b:2b:b2:34:54:b0:28:d2:68:01:7c:02:75:35:0f:38:67:3a: 80:3b:85:99:2f:9b:ce:bc:1d:4f:be:24:7f:87:f1:50:ed:54: 41:dd:f9:f1:61:04:07:c6:d1:5a:50:ed:c8:03:ae:69:77:3d: 73:9b:d4:e5:73:02:bc:8f:6c:ed:75:8d:76:0e:39:68:df:f0: 66:20:aa:04:5c:37:fa:8b:c8:b1:cf:72:86:34:d8:ec:58:0c: 3b:45:4e:b1:1d:0a:c1:8d:00:2b:fa:48:c4:cf:e0:49:99:52: 11:36:74:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5jOaY3m0+MDR+ak4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI2MDcwNDEzNDk0MloXDTI2MDkxNDE1MjEyMlowLzEtMCsGA1UEAxMk YzcwY2QzMjItNjY2Ni00NzA3LWEwMTMtMGU1NWNjYjlkZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBwCZPtZNDh31pAIBNRAtuvhRomhUxUcpEQM jYAT5YQRFS0rfsVDz1DbkXua5Wa4bHxRghM6lMVLK8Fwjd5i+yYW2YagaBobYV3t 9qiPcsW0QuYOt5iOkV3kEkteSnoQrpMAIaMpVChNFAqrSSqCFEZo1Zz8KdNCugpC Rl+n68i2slPKkNwK0KqaJMNajYpaf10NIx6MyxXGDGjioNah2WT/kbNonQXvc2db wECu0XS/WLwcFdE0vtfjTJBgcR9EU51XQ1OH3fYNtDs+bfwYYy1Elf6dFZwgGUjt 5KutxlDG9k9CFIofOOzuAAE015gPMYwx/sKI3u19gjpvQGUGLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaNsevmqATX+JaLTgcDgwAoD7JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvOTZkYTczOTYtYmFmNS0z OGMwLTg1MTctZTNlOGRkNjRiNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzq6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHtVr7yGGaeRZTwPbZauaMW5BSLyT4ocJBfRoNnv+DCw8oKzs0kCRUZ EMN7ibcNNjMa8ZeStQXWVQjr3Nr6NXGxFIE9INvyku18WJYYOCCN1Rj3dStou/5w Sc5JjUZD1MALpEAigIF2ZUKEZWh274QRNgggdyKcwgVY7wQi6yXF+76ui3kaKDcP EPTrpFQZhysrsjRUsCjSaAF8AnU1DzhnOoA7hZkvm868HU++JH+H8VDtVEHd+fFh BAfG0VpQ7cgDrml3PXOb1OVzAryPbO11jXYOOWjf8GYgqgRcN/qLyLHPcoY02OxY DDtFTrEdCsGNACv6SMTP4EmZUhE2dJM= -----END CERTIFICATE-----Generated at Sat Jul 18 03:24:16 2026 by rpki-client