$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa File: 3cffd828-cce9-3c73-a852-0976eaacdfbb.roa (raw, json) Hash identifier: VoTNgK+EieAQXFaLg7kVwZg7R455Kf+zJatZIHtdDoc= Subject key identifier: D5:36:DD:9A:F2:B1:DB:B8:94:81:F2:C1:F5:E4:06:32:2F:08:25:35 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E7634D8F61CB7AE2037DDD680 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 13576 IP address blocks: 216.106.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:d8:f6:1c:b7:ae:20:37:dd:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=787b8c08-074d-428d-91a1-8968f3b3d8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:db:fc:90:74:db:35:85:3d:41:36:da:28:76: 78:2a:0b:47:a9:a9:8f:53:67:7e:78:87:eb:25:7c: 12:f9:99:74:e7:0d:de:77:ef:0b:f1:65:eb:97:40: 28:5b:bf:d0:f4:b3:a1:11:3e:dd:45:a8:b1:bd:cb: 7e:76:83:b1:35:21:cf:c9:4c:82:15:4d:e5:48:ae: 07:6d:5c:29:79:e9:10:14:24:10:28:16:3e:f7:b1: 47:34:4a:25:56:f4:cb:b5:d1:94:24:a2:95:7d:60: 40:99:18:ad:99:5e:21:01:80:07:5a:6d:0d:d4:e8: b5:47:00:bc:dd:63:cc:e3:2c:d4:8b:98:d3:bf:14: 9a:aa:8c:50:3d:aa:bc:f3:08:97:40:07:f9:74:b0: cb:4b:0b:c4:bd:8c:ed:7b:c5:2d:78:34:95:99:35: 2b:c7:73:68:c7:60:2f:b1:65:a0:4a:d1:0d:53:c0: ce:2f:e4:69:dc:9d:99:b4:e0:b9:b6:c3:c1:b0:69: 82:ea:e3:c7:0e:a4:6c:86:1f:0b:f6:e6:2b:81:76: d0:fe:c3:a1:32:01:21:27:79:31:bb:2f:50:a1:41: 33:0a:80:b6:56:00:dd:f5:ba:d0:ed:9c:9d:cd:9d: e3:9d:f1:ca:17:25:20:8f:e0:18:d9:8b:3a:8c:c3: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:36:DD:9A:F2:B1:DB:B8:94:81:F2:C1:F5:E4:06:32:2F:08:25:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:0f:d6:c6:3b:22:a0:00:25:8f:a7:b2:df:7e:82:aa:81:bd: 7e:96:66:7f:0c:c5:61:73:95:5e:e7:ce:dd:f4:99:5e:41:42: 59:66:03:d6:14:44:f5:5e:d4:43:ed:29:ee:68:34:1e:7d:7e: 6f:74:e9:bb:68:6e:f9:32:c8:2a:58:23:13:15:56:6f:9e:5c: 86:ef:e4:38:ed:49:7a:f8:e4:30:cc:b8:84:a1:61:11:31:b7: a1:d9:dd:6a:fa:35:66:70:e7:64:4d:46:5b:c0:bf:c4:c1:59: f0:ac:bb:69:69:9b:2c:4e:9a:cd:eb:f5:e3:bb:02:e7:b4:64: cd:d0:19:92:12:d1:d8:f2:a0:09:0c:24:72:0a:f8:7f:c2:32: 97:5a:bb:f0:5c:30:0f:14:41:ed:df:cc:c0:3c:92:7e:6f:6f: 73:c2:d5:81:f6:93:80:ed:ff:dd:52:c2:e9:48:38:07:cf:f9: d9:9c:83:60:00:03:4c:13:88:26:57:4a:d2:d1:9c:4e:de:94: 25:4d:e7:0d:9d:bf:17:9d:09:69:1a:37:7a:ef:6c:d0:ed:0b: 5e:3c:e6:d3:8c:dd:eb:3e:37:b7:06:0d:d6:10:ec:7f:25:11: ef:a5:4c:96:46:ca:06:01:6a:04:9e:61:4a:4a:70:cb:de:da: 33:1d:5d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNj2HLeuIDfd1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk Nzg3YjhjMDgtMDc0ZC00MjhkLTkxYTEtODk2OGYzYjNkOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNv8kHTbNYU9QTbaKHZ4KgtHqamPU2d+eIfr JXwS+Zl05w3ed+8L8WXrl0AoW7/Q9LOhET7dRaixvct+doOxNSHPyUyCFU3lSK4H bVwpeekQFCQQKBY+97FHNEolVvTLtdGUJKKVfWBAmRitmV4hAYAHWm0N1Oi1RwC8 3WPM4yzUi5jTvxSaqoxQPaq88wiXQAf5dLDLSwvEvYzte8UteDSVmTUrx3Nox2Av sWWgStENU8DOL+Rp3J2ZtOC5tsPBsGmC6uPHDqRshh8L9uYrgXbQ/sOhMgEhJ3kx uy9QoUEzCoC2VgDd9brQ7ZydzZ3jnfHKFyUgj+AY2Ys6jMMwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU23Zrysdu4lIHywfXkBjIvCCU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2NmZmQ4MjgtY2NlOS0z YzczLWE4NTItMDk3NmVhYWNkZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANsP1sY7IqAAJY+nst9+gqqBvX6WZn8MxWFzlV7nzt30mV5BQllmA9YU RPVe1EPtKe5oNB59fm906btobvkyyCpYIxMVVm+eXIbv5DjtSXr45DDMuIShYREx t6HZ3Wr6NWZw52RNRlvAv8TBWfCsu2lpmyxOms3r9eO7Aue0ZM3QGZIS0djyoAkM JHIK+H/CMpdau/BcMA8UQe3fzMA8kn5vb3PC1YH2k4Dt/91SwulIOAfP+dmcg2AA A0wTiCZXStLRnE7elCVN5w2dvxedCWkaN3rvbNDtC1485tOM3es+N7cGDdYQ7H8l Ee+lTJZGygYBagSeYUpKcMve2jMdXWs= -----END CERTIFICATE-----Generated at Wed Jul 22 01:11:55 2026 by rpki-client