$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa File: 1a781c28-0942-31de-bd94-cb1c908194c5.roa (raw, json) Hash identifier: 4zP8DSmp3ViQspo4pmr7nTC3jTu+U0P8WTO09D1ZDsY= Subject key identifier: C9:13:C9:AE:F9:2E:2B:0D:AE:FA:15:79:5C:D4:70:0D:18:A7:4E:D1 Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F4328584EA79439522DC16EA34A81C540 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397373 IP address blocks: 67.21.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:39:52:2d:c1:6e:a3:4a:81:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=51a5786b-57df-4e53-855e-8a7a757ad144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:bf:b9:f7:f1:d1:65:2e:f9:a0:a0:6c:a2: 93:65:79:91:59:8c:21:b2:34:84:c6:18:13:41:f3: 6d:ec:b7:20:1c:a4:d7:34:ce:f8:8a:19:47:4f:38: e9:2b:33:a9:fd:08:37:0b:01:1e:e2:c7:ca:45:05: e1:fa:ff:c0:d1:23:f2:f7:eb:8b:ae:1e:34:1e:7e: 0b:91:29:39:c1:a8:6e:1e:09:9e:b3:b1:7a:85:57: a2:f1:a2:9b:db:ea:4b:4d:85:8e:e3:66:25:75:b9: 81:ce:23:e5:34:46:b1:05:1a:f6:5b:48:89:1e:82: 4b:63:3d:42:0d:60:15:de:d7:ed:b1:91:b3:c1:4e: 9f:79:0c:93:fd:ab:2f:5e:4a:7e:66:c4:5d:18:da: 60:de:54:bd:54:b4:4a:3e:06:cd:5e:6a:e9:49:59: 91:db:80:19:2f:75:9a:8b:54:c8:27:56:6f:82:3c: c5:ac:ca:4b:da:94:2d:ae:1c:a8:60:98:79:8c:89: 5f:92:ac:d6:81:49:db:9d:a1:b2:e7:84:c6:0b:6e: 76:0f:93:e1:d2:4e:bf:2a:48:7b:97:36:45:d3:cb: a4:c6:b6:fc:1a:4b:67:6d:6d:a1:78:c8:5b:67:1d: ff:96:74:5c:a5:46:b6:80:2f:d5:ba:33:b7:61:57: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:13:C9:AE:F9:2E:2B:0D:AE:FA:15:79:5C:D4:70:0D:18:A7:4E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 67.21.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e4:e8:2e:98:48:e0:00:c6:4f:f2:91:86:21:9d:37:2a:26: 54:a4:20:47:3b:3f:cf:d9:f3:fa:9d:7c:27:66:ed:d0:01:7e: 36:3f:aa:12:ac:76:e9:f3:f7:db:ca:b7:60:22:12:e3:81:d2: b5:54:e8:25:4a:97:60:50:13:3a:d1:56:a2:59:c9:0b:04:dc: 7f:32:ca:3c:94:80:65:c8:4c:a2:50:44:ab:c3:46:de:23:c1: 9a:15:91:d3:5c:e4:1f:92:c2:cc:b2:5b:ee:81:c5:29:76:da: e3:6b:bc:29:f2:0a:8c:d4:2e:77:b5:4a:0d:b6:48:5f:1a:5f: 79:8b:2b:da:09:7b:16:f0:d9:8d:cd:df:25:68:dc:fb:0d:a4: bd:f7:b5:46:91:db:90:d8:7c:52:d5:4e:bf:4b:15:76:3c:a0: d6:23:d1:18:f8:12:a4:cb:43:bb:05:ec:3a:79:00:c8:81:1a: 2a:f1:5d:d1:b0:68:07:79:3a:e3:8d:29:11:2a:6f:1b:80:fa: 72:75:7b:65:91:30:c8:cf:dc:eb:6c:bb:4e:48:18:ba:46:c9: 35:5a:71:47:7e:af:9c:83:20:69:13:e3:29:01:75:9f:8c:cd: 04:b3:51:31:05:60:2e:44:8d:ad:fd:f1:92:48:95:f2:0f:00: d3:57:e3:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlDlSLcFuo0qBxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTFhNTc4NmItNTdkZi00ZTUzLTg1NWUtOGE3YTc1N2FkMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAire/uffx0WUu+aCgbKKTZXmRWYwhsjSExhgT QfNt7LcgHKTXNM74ihlHTzjpKzOp/Qg3CwEe4sfKRQXh+v/A0SPy9+uLrh40Hn4L kSk5wahuHgmes7F6hVei8aKb2+pLTYWO42YldbmBziPlNEaxBRr2W0iJHoJLYz1C DWAV3tftsZGzwU6feQyT/asvXkp+ZsRdGNpg3lS9VLRKPgbNXmrpSVmR24AZL3Wa i1TIJ1ZvgjzFrMpL2pQtrhyoYJh5jIlfkqzWgUnbnaGy54TGC252D5Ph0k6/Kkh7 lzZF08ukxrb8GktnbW2heMhbZx3/lnRcpUa2gC/VujO3YVdrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkTya75LisNrvoVeVzUcA0Yp07RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvMWE3ODFjMjgtMDk0Mi0z MWRlLWJkOTQtY2IxYzkwODE5NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQxUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzk6C6YSOAAxk/ykYYhnTcqJlSkIEc7P8/Z8/qdfCdm7dABfjY/qhKs dunz99vKt2AiEuOB0rVU6CVKl2BQEzrRVqJZyQsE3H8yyjyUgGXITKJQRKvDRt4j wZoVkdNc5B+SwsyyW+6BxSl22uNrvCnyCozULne1Sg22SF8aX3mLK9oJexbw2Y3N 3yVo3PsNpL33tUaR25DYfFLVTr9LFXY8oNYj0Rj4EqTLQ7sF7Dp5AMiBGirxXdGw aAd5OuONKREqbxuA+nJ1e2WRMMjP3Otsu05IGLpGyTVacUd+r5yDIGkT4ykBdZ+M zQSzUTEFYC5Eja398ZJIlfIPANNX42s= -----END CERTIFICATE-----Generated at Fri Sep 11 20:43:41 2026 by rpki-client