$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa File: 9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa (raw, json) Hash identifier: AHfFkef2wGkW0NJsfxNqucLzrxUKoyoaHP3QKtpOVm8= Subject key identifier: EE:BA:31:83:EA:2C:F1:31:23:28:FA:91:22:32:87:6E:33:AF:CE:D9 Certificate issuer: /CN=dfb066c3-6f23-4900-8595-27446299d106 Certificate serial: 010D0C9F4328584EA6C8ADA1754A338759C83F10 Authority key identifier: D1:CF:42:2C:11:AF:42:C2:34:C3:04:08:96:E8:4E:59:34:F5:3B:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa Signing time: Tue 28 Jul 2026 18:37:02 +0000 ROA not before: Tue 28 Jul 2026 18:37:02 +0000 ROA not after: Mon 26 Oct 2026 18:37:02 +0000 asID: 16276 IP address blocks: 192.65.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/dfb066c3-6f23-4900-8595-27446299d106.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/dfb066c3-6f23-4900-8595-27446299d106.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:c8:ad:a1:75:4a:33:87:59:c8:3f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb066c3-6f23-4900-8595-27446299d106 Validity Not Before: Jul 28 18:37:02 2026 GMT Not After : Oct 26 18:37:02 2026 GMT Subject: CN=6a85fb4e-2af1-406d-9666-5f2378dac14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:f5:bb:40:07:0a:a0:00:11:eb:80:1b:d9: 17:71:86:4a:ac:37:ac:8f:cc:22:38:35:8a:ab:39: d5:b6:12:12:37:e2:da:b4:5c:70:2a:20:56:8c:db: 1c:58:7b:ff:d1:97:7a:bc:5b:e1:64:2a:ed:76:ff: 1d:d2:30:20:54:76:86:82:ad:94:f1:fd:80:39:94: 11:61:67:46:15:a0:79:38:0d:66:b2:df:aa:c1:61: 64:1c:2e:44:cb:56:22:c6:a6:11:71:6a:47:d7:e0: b4:33:65:08:ad:24:a3:0b:f6:f1:89:17:c7:24:60: 65:f8:e1:c2:92:58:1c:93:c9:c2:80:13:ff:93:88: 52:47:48:e9:3f:a7:11:61:a2:67:3a:c7:1c:cd:f4: 74:d3:f0:06:e8:b0:d7:3c:98:bb:d0:2a:f8:93:1a: 01:05:a9:b1:30:eb:8e:41:30:24:06:4d:e8:ee:e0: a8:38:73:76:d4:bc:34:4c:5f:55:19:3f:d3:5b:75: 95:27:d0:8c:f8:c6:e3:e7:b2:49:ae:89:c3:25:f3: dc:41:60:fe:af:23:d6:9a:b2:82:97:f3:f7:c9:4f: fe:e0:27:c6:70:05:75:3f:f0:a9:ee:1e:83:8a:21: a4:08:12:75:46:d8:c6:e7:df:f1:76:25:45:23:35: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BA:31:83:EA:2C:F1:31:23:28:FA:91:22:32:87:6E:33:AF:CE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/9c7b555e-afd9-3b05-92d0-a737c605c7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106/dfb066c3-6f23-4900-8595-27446299d106.crl X509v3 Authority Key Identifier: keyid:D1:CF:42:2C:11:AF:42:C2:34:C3:04:08:96:E8:4E:59:34:F5:3B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dfb066c3-6f23-4900-8595-27446299d106.cer sbgp-ipAddrBlock: critical IPv4: 192.65.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5e:36:a8:52:51:7f:8b:79:65:4f:be:ad:fd:f2:b2:37:2e: b3:03:d6:a5:9f:bc:c9:b8:0b:de:5e:ab:dc:57:15:81:b5:3c: ed:76:2d:45:54:f5:84:55:41:91:39:b0:36:99:5c:e9:9e:2a: 1f:20:3c:d1:a7:23:aa:52:f6:17:fc:f3:35:e8:f1:11:7b:ae: dd:66:89:78:ac:4c:12:ae:b5:85:64:bf:bd:8b:fa:c8:3b:81: 87:75:a2:53:38:ee:5c:3a:20:cf:b4:90:88:90:cd:f3:d0:0a: 3d:ad:33:c4:c2:8c:5c:90:5c:25:12:ef:48:a9:e2:91:10:fc: 85:61:be:f4:15:32:d4:4a:20:fe:bd:f0:47:1e:96:04:40:84: 31:8a:d3:2a:38:42:f5:d7:7e:15:53:46:8c:96:ee:76:a1:13: 65:b9:64:65:24:c5:4e:2c:21:96:6f:8d:9a:34:5e:3b:f5:29: ab:db:8d:64:a0:96:4d:b1:3c:57:a9:d9:3b:d4:34:b6:60:86: e7:50:db:1e:81:f8:48:15:53:27:89:e7:a8:b6:56:35:14:63: dd:83:af:53:1b:6e:64:7d:2c:9c:31:c3:ea:8a:25:fe:9a:25: 39:a8:c1:2b:e0:68:10:e3:34:37:95:99:db:0a:c0:f8:9c:01: 40:bd:2b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6myK2hdUozh1nIPxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiMDY2YzMtNmYyMy00OTAwLTg1OTUtMjc0NDYyOTlk MTA2MB4XDTI2MDcyODE4MzcwMloXDTI2MTAyNjE4MzcwMlowLzEtMCsGA1UEAxMk NmE4NWZiNGUtMmFmMS00MDZkLTk2NjYtNWYyMzc4ZGFjMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK71u0AHCqAAEeuAG9kXcYZKrDesj8wiODWK qznVthISN+LatFxwKiBWjNscWHv/0Zd6vFvhZCrtdv8d0jAgVHaGgq2U8f2AOZQR YWdGFaB5OA1mst+qwWFkHC5Ey1YixqYRcWpH1+C0M2UIrSSjC/bxiRfHJGBl+OHC klgck8nCgBP/k4hSR0jpP6cRYaJnOscczfR00/AG6LDXPJi70Cr4kxoBBamxMOuO QTAkBk3o7uCoOHN21Lw0TF9VGT/TW3WVJ9CM+Mbj57JJronDJfPcQWD+ryPWmrKC l/P3yU/+4CfGcAV1P/Cp7h6DiiGkCBJ1RtjG59/xdiVFIzWwjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO66MYPqLPExIyj6kSIyh24zr87ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZmIw NjZjMy02ZjIzLTQ5MDAtODU5NS0yNzQ0NjI5OWQxMDYvOWM3YjU1NWUtYWZkOS0z YjA1LTkyZDAtYTczN2M2MDVjN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZGZiMDY2YzMtNmYyMy00OTAwLTg1 OTUtMjc0NDYyOTlkMTA2L2RmYjA2NmMzLTZmMjMtNDkwMC04NTk1LTI3NDQ2Mjk5 ZDEwNi5jcmwwHwYDVR0jBBgwFoAU0c9CLBGvQsI0wwQIluhOWTT1OxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZmIwNjZjMy02ZjIzLTQ5MDAtODU5NS0yNzQ0 NjI5OWQxMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwEEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEteNqhSUX+LeWVPvq398rI3LrMD1qWfvMm4C95eq9xXFYG1PO12LUVU 9YRVQZE5sDaZXOmeKh8gPNGnI6pS9hf88zXo8RF7rt1miXisTBKutYVkv72L+sg7 gYd1olM47lw6IM+0kIiQzfPQCj2tM8TCjFyQXCUS70ip4pEQ/IVhvvQVMtRKIP69 8EcelgRAhDGK0yo4QvXXfhVTRoyW7nahE2W5ZGUkxU4sIZZvjZo0Xjv1KavbjWSg lk2xPFep2TvUNLZghudQ2x6B+EgVUyeJ56i2VjUUY92Dr1MbbmR9LJwxw+qKJf6a JTmowSvgaBDjNDeVmdsKwPicAUC9K0A= -----END CERTIFICATE-----Generated at Mon Aug 24 03:36:27 2026 by rpki-client