$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa File: dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa (raw, json) Hash identifier: BOfl7j40aJrG7Hk4K1NhrYmB4dzeup6XLpvZEeQzOlI= Subject key identifier: 8D:30:D0:0B:63:3A:76:02:4F:8A:8D:71:A6:7B:29:6B:BF:85:D0:50 Certificate issuer: /CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Certificate serial: 010D0C9F4328584E6F3EB8D89EDC72DD95B1E4C0 Authority key identifier: 26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 18438 IP address blocks: 204.136.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:b8:d8:9e:dc:72:dd:95:b1:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=698bf8e2-11fb-4b82-ba30-41be39c67b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:73:4f:7f:96:39:e9:62:aa:e0:d2:87:fb: 57:ac:6a:4b:38:d7:eb:8d:ba:6a:cd:3a:d4:8c:ee: 79:45:b8:cf:7a:4d:2b:e8:4e:c0:7a:27:d5:ed:03: 7a:4c:c2:6a:6e:79:9b:58:83:2d:af:a7:c5:23:6e: 01:78:b6:37:8e:df:bf:b8:4a:b5:2b:7a:a5:0c:04: 91:04:ca:dd:1b:30:76:d9:1b:54:4c:bd:a7:99:be: 27:0c:b5:6f:5c:ba:e2:42:d9:e8:77:8b:f6:0d:41: 9e:00:40:94:cb:1f:ab:fa:8a:29:76:cc:d4:ca:15: d1:6a:13:15:c1:87:1e:89:83:d8:b5:ed:86:e4:da: b1:2c:f4:57:7c:d5:5c:dd:f4:dc:61:5f:7d:d2:46: ab:5d:ea:d3:a6:42:1e:6b:fe:44:ce:ff:f9:b7:54: d4:6c:95:6b:ce:d2:16:cf:84:62:b3:9d:e0:a4:ab: e2:78:b5:91:9d:74:a0:19:37:68:c2:e6:8d:94:51: e8:6a:30:65:b6:37:7c:ac:c5:92:dc:ce:25:c3:47: 26:77:ba:81:0a:ff:50:9a:aa:63:bf:70:78:70:1e: 81:86:35:cf:df:a0:81:28:c5:fd:f8:58:a9:fe:8c: 64:1d:dc:93:f9:cd:77:1c:32:87:8d:f8:c0:98:a8: e4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:30:D0:0B:63:3A:76:02:4F:8A:8D:71:A6:7B:29:6B:BF:85:D0:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl X509v3 Authority Key Identifier: keyid:26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer sbgp-ipAddrBlock: critical IPv4: 204.136.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2d:1d:39:39:82:21:cd:3d:b4:a3:d9:b5:7b:3b:5e:dc:c1: d7:20:88:65:dc:3d:17:c4:ba:bf:8d:12:6d:8d:1e:c5:48:a4: 97:3c:b9:02:85:73:67:ca:31:11:a8:50:88:76:bc:55:d5:9c: 27:98:71:a1:ca:c8:f4:cc:47:49:85:0f:fe:66:02:2a:c6:96: da:51:12:84:0d:6c:45:35:15:22:e3:e0:ed:15:05:fd:36:e1: 2b:bd:2d:74:45:87:9a:0c:05:67:22:75:29:38:1f:2b:ed:1d: a3:53:cc:96:9e:a8:f9:dd:78:22:81:c6:41:df:d7:db:97:6f: a8:f6:49:c6:e3:33:04:04:dd:b9:9c:ab:ff:ed:f3:5c:31:67: 25:5f:f1:ef:0b:80:46:5a:52:b9:9a:3e:87:fc:2b:3c:9c:5e: 2e:78:4f:17:ac:42:94:c2:e7:1a:1b:f9:12:e4:16:9f:4a:a4: 7c:83:11:97:cd:b2:c0:55:ea:ce:a1:51:31:ac:93:cd:51:57: db:71:d2:38:70:28:98:f8:58:35:fc:a9:78:e7:29:24:f0:06: a6:dc:75:90:f3:7f:0a:d8:35:ac:ab:8e:ff:7a:ab:2c:44:0d: 53:4e:1b:cf:26:73:4b:5a:f7:44:f9:60:ed:36:91:45:5a:0a: fe:f4:91:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPrjYntxy3ZWx5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiM2U1ZWUtMjljOC00OTVlLTk4ZmMtYTIwNmM0ZTE0 OTIyMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk Njk4YmY4ZTItMTFmYi00YjgyLWJhMzAtNDFiZTM5YzY3YjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVRzT3+WOeliquDSh/tXrGpLONfrjbpqzTrU jO55RbjPek0r6E7AeifV7QN6TMJqbnmbWIMtr6fFI24BeLY3jt+/uEq1K3qlDASR BMrdGzB22RtUTL2nmb4nDLVvXLriQtnod4v2DUGeAECUyx+r+oopdszUyhXRahMV wYceiYPYte2G5NqxLPRXfNVc3fTcYV990karXerTpkIea/5Ezv/5t1TUbJVrztIW z4Ris53gpKvieLWRnXSgGTdowuaNlFHoajBltjd8rMWS3M4lw0cmd7qBCv9Qmqpj v3B4cB6BhjXP36CBKMX9+Fip/oxkHdyT+c13HDKHjfjAmKjk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0w0AtjOnYCT4qNcaZ7KWu/hdBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNGIz ZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2YzRlMTQ5MjIvZGNmMWRjMTAtZTM3NS0z ODQ4LThjNDItYTRlOGQzYTEyNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDRiM2U1ZWUtMjljOC00OTVlLTk4 ZmMtYTIwNmM0ZTE0OTIyL2Q0YjNlNWVlLTI5YzgtNDk1ZS05OGZjLWEyMDZjNGUx NDkyMi5jcmwwHwYDVR0jBBgwFoAUJnF1WwkDvEi8KhzRfc2+lfXLWPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNGIzZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2 YzRlMTQ5MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAtHTk5giHNPbSj2bV7O17cwdcgiGXcPRfEur+NEm2NHsVIpJc8uQKF c2fKMRGoUIh2vFXVnCeYcaHKyPTMR0mFD/5mAirGltpREoQNbEU1FSLj4O0VBf02 4Su9LXRFh5oMBWcidSk4HyvtHaNTzJaeqPndeCKBxkHf19uXb6j2ScbjMwQE3bmc q//t81wxZyVf8e8LgEZaUrmaPof8KzycXi54TxesQpTC5xob+RLkFp9KpHyDEZfN ssBV6s6hUTGsk81RV9tx0jhwKJj4WDX8qXjnKSTwBqbcdZDzfwrYNayrjv96qyxE DVNOG88mc0ta90T5YO02kUVaCv70kZ4= -----END CERTIFICATE-----Generated at Thu Jul 9 21:02:21 2026 by rpki-client