$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa File: cb578ea6-9895-3de3-8e51-86848fbdb755.roa (raw, json) Hash identifier: QDrn4LggziApnosmudprkvI0+ClI6rFins38E+cqHJo= Subject key identifier: 9E:9F:EF:A7:77:B0:86:5C:DB:DB:01:98:12:B1:20:C8:FE:EA:D3:B1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E6F3A3B34568CAF73217C6280 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 13576 IP address blocks: 216.249.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:3b:34:56:8c:af:73:21:7c:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=a47be1a1-cf21-4d1c-9b27-8ffc964e376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:a2:ac:f1:52:8f:cd:c1:d0:8d:86:50:07: a3:81:7a:41:3b:a5:48:82:bc:ea:57:fc:0d:2d:d0: 9b:6c:a5:48:6e:33:cb:9e:3d:d4:e1:60:67:5e:c0: ce:86:0e:2c:46:cf:0d:34:92:fa:e9:73:77:a8:f8: 4c:65:e8:62:05:24:28:a9:a8:f4:c4:aa:04:54:01: 99:53:37:0a:4b:26:fc:47:d2:7a:bd:0b:ac:0d:e6: 0f:f7:66:77:bd:9b:7b:55:15:dc:8d:dd:ee:69:2d: 36:7e:20:cd:70:02:c6:24:68:19:e4:46:78:ad:71: b5:99:ec:dd:99:53:bb:33:aa:c4:ed:e8:8d:51:e7: 90:8c:d5:63:15:0e:b1:6a:09:2a:64:5c:c9:e7:57: e0:10:9c:37:15:14:4b:4d:41:6d:fe:49:fd:5f:e9: 7f:37:e2:7e:0e:fb:fd:e2:3b:f5:60:b6:96:2d:a0: d2:3c:6b:ea:32:5a:a3:f7:8a:f5:1f:5a:10:62:31: 49:62:c9:15:e5:1b:bf:2e:84:16:48:06:0e:02:6f: cb:f1:4c:3f:62:e6:9c:32:8f:f6:4d:37:83:26:86: 2e:7c:21:9d:a1:e1:08:f2:7e:b2:79:57:bc:cf:3c: bd:a7:66:ff:f1:f1:c4:80:bb:41:1b:98:dc:5f:27: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9F:EF:A7:77:B0:86:5C:DB:DB:01:98:12:B1:20:C8:FE:EA:D3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3e:0b:a9:20:2d:69:4d:16:6d:f3:eb:5e:53:11:dd:78:2c: 63:11:80:95:fe:81:96:cb:57:07:34:98:57:df:3c:00:12:ea: 69:19:52:fa:ee:9e:94:ad:c2:6c:c9:94:42:d4:c5:62:2d:e8: eb:f5:f8:38:df:b8:6a:a5:77:d6:d2:3f:83:eb:39:17:72:30: 2c:44:e6:a8:32:2c:32:4a:5f:18:f7:4c:d9:f3:c8:f6:ce:4c: 7d:53:ab:41:70:74:dc:c5:d6:78:e4:3b:2a:ae:dc:68:47:e9: b6:98:86:21:77:46:14:13:87:ba:df:87:7b:2b:16:8f:dd:dc: fc:c8:a1:3b:be:b5:1b:42:c4:65:61:5c:10:d9:99:f9:37:4a: de:a6:a3:fc:7e:aa:2c:2d:d1:9c:85:c8:9e:85:12:c3:63:5b: b7:79:17:29:b3:f7:c6:75:e4:ea:71:1f:f7:41:b3:04:7f:e0: dd:f1:3d:ab:c9:fe:09:b9:bc:fe:4c:b7:8c:30:11:35:bf:c9: 13:68:54:df:1d:e5:8c:b1:c2:96:87:10:08:84:66:6a:17:45: b1:b1:5b:93:5f:c0:38:61:1f:a9:f0:a6:56:70:f2:15:20:e3: 77:a1:b9:69:81:89:99:35:a4:70:4c:e5:ab:5f:42:a7:d6:9b: 90:43:b3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjs0VoyvcyF8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YTQ3YmUxYTEtY2YyMS00ZDFjLTliMjctOGZmYzk2NGUzNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT+irPFSj83B0I2GUAejgXpBO6VIgrzqV/wN LdCbbKVIbjPLnj3U4WBnXsDOhg4sRs8NNJL66XN3qPhMZehiBSQoqaj0xKoEVAGZ UzcKSyb8R9J6vQusDeYP92Z3vZt7VRXcjd3uaS02fiDNcALGJGgZ5EZ4rXG1mezd mVO7M6rE7eiNUeeQjNVjFQ6xagkqZFzJ51fgEJw3FRRLTUFt/kn9X+l/N+J+Dvv9 4jv1YLaWLaDSPGvqMlqj94r1H1oQYjFJYskV5Ru/LoQWSAYOAm/L8Uw/YuacMo/2 TTeDJoYufCGdoeEI8n6yeVe8zzy9p2b/8fHEgLtBG5jcXycAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6f76d3sIZc29sBmBKxIMj+6tOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2I1NzhlYTYtOTg5NS0z ZGUzLThlNTEtODY4NDhmYmRiNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0+C6kgLWlNFm3z615TEd14LGMRgJX+gZbLVwc0mFffPAAS6mkZUvru npStwmzJlELUxWIt6Ov1+DjfuGqld9bSP4PrORdyMCxE5qgyLDJKXxj3TNnzyPbO TH1Tq0FwdNzF1njkOyqu3GhH6baYhiF3RhQTh7rfh3srFo/d3PzIoTu+tRtCxGVh XBDZmfk3St6mo/x+qiwt0ZyFyJ6FEsNjW7d5Fymz98Z15OpxH/dBswR/4N3xPavJ /gm5vP5Mt4wwETW/yRNoVN8d5YyxwpaHEAiEZmoXRbGxW5NfwDhhH6nwplZw8hUg 43ehuWmBiZk1pHBM5atfQqfWm5BDs04= -----END CERTIFICATE-----Generated at Wed Jul 22 02:10:43 2026 by rpki-client