$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa File: a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa (raw, json) Hash identifier: 3pf7unADtfQI1IdPgm2FO0y7ztq8mFsU1h5pUrEGG9U= Subject key identifier: B7:A5:62:E3:EB:88:AC:F1:93:B0:2C:0C:12:4E:BD:F8:6C:60:B5:30 Certificate issuer: /CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Certificate serial: 010D0C9F4328584E6B0A2FCC79C6CCF9991443C0 Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 32425 IP address blocks: 70.40.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:2f:cc:79:c6:cc:f9:99:14:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=6640ee5b-4c9a-46cc-8718-f0e3be337ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:4b:ca:cc:87:7d:23:ca:9f:b5:43:e3:a4: 61:97:b0:5d:32:09:c5:c6:75:0f:aa:a0:18:5e:3d: a2:80:76:de:17:67:68:0d:e5:36:90:64:51:9a:10: f6:5e:7f:b3:9f:7b:0f:a9:56:c8:af:b5:c3:51:56: 1d:35:83:1d:18:27:79:2d:c9:c4:0a:4b:66:51:52: 86:77:4f:50:8e:01:99:70:3a:39:32:7d:00:f4:70: 51:a6:25:49:40:3a:80:d1:04:4c:f3:78:4f:51:a3: 3f:ed:44:6b:26:87:4a:2d:f6:1a:39:fb:db:2d:b3: 47:6b:b9:ca:4b:2b:ec:9b:e7:6b:f1:89:1d:aa:e8: 0b:30:ff:67:2c:c4:0f:b4:7b:03:09:b8:b0:9a:7c: 2b:89:4e:d2:80:2b:39:89:21:d9:85:f7:9a:01:92: 35:44:d3:d2:64:e2:ec:bb:1c:6e:5b:dd:3f:64:da: b7:0d:9c:e9:9c:3f:38:32:ea:68:ee:04:02:47:cb: 51:84:23:0f:63:6a:0e:fe:ef:0d:c7:f1:2d:1c:e3: c7:02:b4:72:69:d5:98:6e:0a:16:fe:81:69:74:0b: b3:24:2b:00:37:b5:ad:49:f0:5b:03:6e:3e:12:98: bc:ea:b2:65:20:68:aa:2a:8e:5e:e2:50:23:51:90: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:62:E3:EB:88:AC:F1:93:B0:2C:0C:12:4E:BD:F8:6C:60:B5:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/a1dab487-a8a4-3bf4-820e-6fec2ed9d822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl X509v3 Authority Key Identifier: keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer sbgp-ipAddrBlock: critical IPv4: 70.40.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:26:5b:2d:c3:be:fc:87:70:f2:78:bf:8a:48:99:fc:08:9f: 49:e2:b7:9a:c8:d8:ff:cc:b1:b2:b6:14:fe:a1:b0:8c:f4:2a: 29:3f:70:f6:1d:30:20:a9:d5:e3:95:4a:02:64:f8:33:61:c4: 4c:96:91:52:dd:97:98:84:c4:3e:93:74:d3:25:b6:ce:8b:dd: 9c:45:31:49:10:b8:ec:8c:ff:46:69:19:f0:a7:3a:f4:79:1a: fa:f6:b6:27:ca:01:9b:bb:8a:32:c2:0e:82:16:99:73:ee:26: 19:a5:87:a7:ff:13:75:9d:44:04:2d:85:18:50:6a:0f:09:e8: 1c:b6:d1:9a:79:ba:fe:cf:44:62:8c:af:4b:d6:76:23:71:8a: 41:1d:7d:7d:a2:a2:6b:a6:97:04:b9:e8:e1:68:e2:19:e9:ba: 17:5b:fa:6b:85:e6:87:f5:bd:6c:37:2c:0a:81:42:59:51:e4: d0:cf:fe:d1:c8:9c:19:00:37:86:ea:a9:3c:e0:52:90:d9:30: 87:0f:91:86:da:6d:39:d8:00:89:30:09:3b:55:1d:66:bc:3e: a8:c6:80:6b:a5:5c:0c:91:8f:d4:31:a8:be:cc:fb:a3:2c:d4: 61:a9:f8:59:c9:36:f5:45:cb:20:8f:5b:1c:de:b1:63:27:5a: d2:0e:b2:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCi/MecbM+ZkUQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmMjk4N2ItNjVlOS00YjBmLTkwNjEtZjMyNGIzNjZm ZDk0MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk NjY0MGVlNWItNGM5YS00NmNjLTg3MTgtZjBlM2JlMzM3ZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuxLysyHfSPKn7VD46Rhl7BdMgnFxnUPqqAY Xj2igHbeF2doDeU2kGRRmhD2Xn+zn3sPqVbIr7XDUVYdNYMdGCd5LcnECktmUVKG d09QjgGZcDo5Mn0A9HBRpiVJQDqA0QRM83hPUaM/7URrJodKLfYaOfvbLbNHa7nK Syvsm+dr8YkdqugLMP9nLMQPtHsDCbiwmnwriU7SgCs5iSHZhfeaAZI1RNPSZOLs uxxuW90/ZNq3DZzpnD84Mupo7gQCR8tRhCMPY2oO/u8Nx/EtHOPHArRyadWYbgoW /oFpdAuzJCsAN7WtSfBbA24+Epi86rJlIGiqKo5e4lAjUZAyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLelYuPriKzxk7AsDBJOvfhsYLUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xM2Yy OTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0YjM2NmZkOTQvYTFkYWI0ODctYThhNC0z YmY0LTgyMGUtNmZlYzJlZDlkODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTNmMjk4N2ItNjVlOS00YjBmLTkw NjEtZjMyNGIzNjZmZDk0LzEzZjI5ODdiLTY1ZTktNGIwZi05MDYxLWYzMjRiMzY2 ZmQ5NC5jcmwwHwYDVR0jBBgwFoAUxt3F8684P/Bqh/r6+Mr1rsrEwzcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xM2YyOTg3Yi02NWU5LTRiMGYtOTA2MS1mMzI0 YjM2NmZkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEImWy3DvvyHcPJ4v4pImfwIn0nit5rI2P/MsbK2FP6hsIz0Kik/cPYd MCCp1eOVSgJk+DNhxEyWkVLdl5iExD6TdNMlts6L3ZxFMUkQuOyM/0ZpGfCnOvR5 Gvr2tifKAZu7ijLCDoIWmXPuJhmlh6f/E3WdRAQthRhQag8J6By20Zp5uv7PRGKM r0vWdiNxikEdfX2iomumlwS56OFo4hnpuhdb+muF5of1vWw3LAqBQllR5NDP/tHI nBkAN4bqqTzgUpDZMIcPkYbabTnYAIkwCTtVHWa8PqjGgGulXAyRj9QxqL7M+6Ms 1GGp+FnJNvVFyyCPWxzesWMnWtIOsno= -----END CERTIFICATE-----Generated at Tue Jul 14 11:59:29 2026 by rpki-client