$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa File: 717ad060-be4e-3d4b-8575-7481eb29f59e.roa (raw, json) Hash identifier: c8Zgqr0w00yL1CYjpA0espWOZwilFJGNiocUTGsYJEw= Subject key identifier: A2:FE:49:DF:A5:69:41:41:03:E3:D2:DB:52:14:DF:00:CD:AB:DC:8E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E78FF7B84379E8FE703AC5080 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 13576 IP address blocks: 216.249.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7b:84:37:9e:8f:e7:03:ac:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=e4261599-48b4-44f9-9619-efb880a966a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:00:03:c8:d8:00:ee:6e:c0:be:50:62:52: a1:57:b7:8d:d8:0f:a1:7e:cf:86:bc:50:70:80:e7: 85:25:c5:09:00:eb:a3:87:a5:cb:f9:e9:35:26:4c: 5f:89:f3:d9:b4:5f:4e:ec:e4:69:da:82:b1:b9:14: fe:6b:af:7a:15:d9:98:df:73:a1:3e:63:0c:5a:cc: 94:52:5a:0e:ce:b1:bb:69:31:57:93:f3:4a:dc:05: e0:6d:9b:20:37:f4:c8:20:27:3c:b9:34:c7:e4:65: 50:b1:a1:f1:83:09:4c:5f:6d:a3:50:75:d0:ad:b2: 7c:82:d7:d1:18:57:f6:2e:5a:6d:6d:53:66:36:4b: 33:12:b7:57:33:39:43:aa:91:8b:76:97:3a:d0:15: 50:f5:9e:8c:cc:07:5e:94:ff:8f:25:40:73:98:e0: e1:d3:40:6b:96:e1:e8:3c:05:78:e4:d2:be:e7:b0: 6f:60:e9:ef:f5:5e:37:33:4f:b7:e7:b6:ab:e1:6e: 9f:d0:5d:0b:6b:39:48:f9:82:7b:72:72:71:06:1d: 91:da:64:7d:2f:84:ef:25:de:42:54:64:e2:9c:94: de:68:cd:11:d0:a8:ba:c8:9c:99:ae:a1:90:ba:8c: a5:b2:c7:2f:8b:de:fc:34:62:52:cb:69:04:77:9b: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FE:49:DF:A5:69:41:41:03:E3:D2:DB:52:14:DF:00:CD:AB:DC:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:62:d4:07:a3:ce:4c:43:39:38:5a:c2:e7:a9:ec:ce:1b:b9: 2f:f1:ac:8f:fa:0d:3c:2f:52:aa:6f:87:05:c0:2a:80:f0:3c: 8d:c1:6d:f2:ae:10:af:e1:b4:c3:30:67:5c:76:59:c8:fe:66: 30:ee:9a:9f:5c:da:d7:0e:c3:d8:ac:d6:67:4e:9e:5a:e4:fc: 8f:b9:e6:6e:09:ed:27:06:ec:26:31:83:9f:84:40:fb:b3:59: e6:e3:a7:1f:e7:5a:45:26:d6:f3:8d:af:10:6a:02:fc:1d:62: 9a:00:dd:c8:24:cd:2f:02:d6:f9:11:63:e2:96:07:5f:dd:d6: ef:3e:4b:04:ff:bc:a9:a2:ab:94:2c:f9:68:e4:be:5d:4b:a1: 7a:f6:b1:7a:85:66:79:5f:2e:1e:70:86:96:26:42:95:98:d9: c6:ac:6c:3a:b3:96:3e:16:25:f5:02:82:d1:ed:53:77:e6:58: f6:2d:09:10:8c:de:e5:29:f4:c7:95:46:a2:c6:17:07:a9:a4: 7a:29:2b:c5:84:0e:f8:60:2a:fe:e6:c9:6a:2d:82:50:63:80: d0:34:48:92:68:5e:c6:21:64:b0:87:a8:86:60:85:56:dc:d3: 45:ac:fa:8a:bc:4b:9e:b8:46:9a:7d:12:28:9f:f9:a2:33:61: ea:e4:b4:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3uEN56P5wOsUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZTQyNjE1OTktNDhiNC00NGY5LTk2MTktZWZiODgwYTk2NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojIAA8jYAO5uwL5QYlKhV7eN2A+hfs+GvFBw gOeFJcUJAOujh6XL+ek1JkxfifPZtF9O7ORp2oKxuRT+a696FdmY33OhPmMMWsyU UloOzrG7aTFXk/NK3AXgbZsgN/TIICc8uTTH5GVQsaHxgwlMX22jUHXQrbJ8gtfR GFf2LlptbVNmNkszErdXMzlDqpGLdpc60BVQ9Z6MzAdelP+PJUBzmODh00BrluHo PAV45NK+57BvYOnv9V43M0+357ar4W6f0F0LazlI+YJ7cnJxBh2R2mR9L4TvJd5C VGTinJTeaM0R0Ki6yJyZrqGQuoylsscvi978NGJSy2kEd5vLvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL+Sd+laUFBA+PS21IU3wDNq9yOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzE3YWQwNjAtYmU0ZS0z ZDRiLTg1NzUtNzQ4MWViMjlmNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJi1AejzkxDOThawuep7M4buS/xrI/6DTwvUqpvhwXAKoDwPI3BbfKu EK/htMMwZ1x2Wcj+ZjDump9c2tcOw9is1mdOnlrk/I+55m4J7ScG7CYxg5+EQPuz Webjpx/nWkUm1vONrxBqAvwdYpoA3cgkzS8C1vkRY+KWB1/d1u8+SwT/vKmiq5Qs +Wjkvl1LoXr2sXqFZnlfLh5whpYmQpWY2casbDqzlj4WJfUCgtHtU3fmWPYtCRCM 3uUp9MeVRqLGFweppHopK8WEDvhgKv7myWotglBjgNA0SJJoXsYhZLCHqIZghVbc 00Ws+oq8S564Rpp9Eiif+aIzYerktFs= -----END CERTIFICATE-----Generated at Wed Jul 22 01:10:16 2026 by rpki-client