$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa File: 09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa (raw, json) Hash identifier: wZXZEWgsXqdooCcFk2Uiv22aKGXNWQD/9DW2S7yzyNI= Subject key identifier: 05:C5:AD:8F:04:C3:61:BF:1D:AC:55:5D:52:BC:CC:5F:6A:E9:0A:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6144C153554846F40ED15680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 184.26.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:c1:53:55:48:46:f4:0e:d1:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=597d67db-e106-4384-bc2f-88fe866ebfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:fd:41:1a:0b:91:85:64:14:9d:d0:94:fe: ca:6a:2a:9d:b3:1e:d0:6e:64:a3:63:69:15:fb:39: d4:fc:78:03:be:2c:16:0b:72:93:52:47:ad:4a:dc: 7d:b4:7b:fe:0e:94:24:f1:56:fe:e8:4d:3f:a1:82: 98:64:4a:44:c1:6f:c5:b6:36:9d:34:a8:76:d9:11: d9:9a:35:1d:b0:1d:49:4e:33:66:2b:97:d4:cd:2f: 63:89:30:a0:3e:81:95:7e:aa:0d:67:81:b8:c0:2f: e4:d0:be:df:35:fb:5b:38:61:ec:c5:75:14:96:f7: 6d:ce:92:a4:2f:f8:ee:8b:36:39:bb:e5:a7:8d:a9: ef:ce:79:d5:d9:f2:75:f6:3b:dc:43:93:6b:c0:36: 43:63:82:33:bb:f6:f5:96:59:d4:ee:a6:ae:9f:eb: fc:fc:7e:38:0b:01:c5:52:e0:d6:7c:0c:79:0c:5d: 16:2c:49:8d:02:7a:57:fc:65:32:af:95:f4:06:38: a1:13:84:4e:6a:8b:9a:d6:af:bb:e0:1e:7a:e2:65: 68:56:2b:33:9b:d1:5a:78:cf:e4:0f:16:7d:66:39: 93:cf:78:56:cb:69:22:94:81:be:46:50:f6:32:71: b8:9b:f7:5e:05:19:96:08:ec:6b:ae:7d:30:1e:f3: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:AD:8F:04:C3:61:BF:1D:AC:55:5D:52:BC:CC:5F:6A:E9:0A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09f4dfad-72fc-33d6-9d36-7379648d9fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.26.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:52:c4:27:70:5d:be:39:0b:4a:ed:cf:f1:bc:c6:8c:3a:ac: 05:59:6e:e9:d3:8a:51:3a:cb:37:e0:df:2b:4d:c7:a1:53:ac: a2:7d:a5:97:9a:93:76:19:46:28:a1:88:25:ac:38:fc:9e:31: 70:f0:c8:84:15:2b:08:2c:0c:da:07:f0:11:19:ec:bf:bf:49: 5a:e9:06:3b:db:af:62:8d:02:a3:78:3e:cf:3b:c4:ab:4e:54: 34:e1:b3:a7:6e:d5:55:72:03:f6:85:7c:25:4d:ef:46:7c:e9: 00:59:b3:d7:d3:b0:5d:bc:14:50:76:f4:15:07:e3:06:e4:91: af:83:86:8e:e9:1a:e6:f0:70:38:e3:8a:82:33:81:f4:e8:e4: a8:05:e2:d3:47:1c:51:7c:8f:da:b3:17:ac:ee:49:31:fc:17: 73:3c:25:69:45:fc:a6:48:f2:23:08:2d:96:60:e8:5c:ed:3e: 05:5d:d2:e0:fb:dc:fb:1b:c4:6d:ec:8b:d0:b8:1e:94:01:4e: de:a5:56:72:71:99:4a:d4:ae:9c:ee:b1:dc:e6:42:a0:f7:23: a9:a9:d8:44:94:8a:12:9f:d4:3a:c3:c8:0a:17:e3:a0:cf:0b: c7:d5:3f:2d:46:29:c2:8e:dc:ed:8b:03:9d:53:71:90:ea:8e: 55:51:33:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRMFTVUhG9A7RVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NTk3ZDY3ZGItZTEwNi00Mzg0LWJjMmYtODhmZTg2NmViZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyof9QRoLkYVkFJ3QlP7Kaiqdsx7QbmSjY2kV +znU/HgDviwWC3KTUketStx9tHv+DpQk8Vb+6E0/oYKYZEpEwW/FtjadNKh22RHZ mjUdsB1JTjNmK5fUzS9jiTCgPoGVfqoNZ4G4wC/k0L7fNftbOGHsxXUUlvdtzpKk L/juizY5u+WnjanvznnV2fJ19jvcQ5NrwDZDY4Izu/b1llnU7qaun+v8/H44CwHF UuDWfAx5DF0WLEmNAnpX/GUyr5X0BjihE4ROaoua1q+74B564mVoViszm9FaeM/k DxZ9ZjmTz3hWy2kilIG+RlD2MnG4m/deBRmWCOxrrn0wHvMhJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXFrY8Ew2G/HaxVXVK8zF9q6QoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDlmNGRmYWQtNzJmYy0z M2Q2LTlkMzYtNzM3OTY0OGQ5ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuBoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5SxCdwXb45C0rtz/G8xow6rAVZbunTilE6yzfg3ytNx6FTrKJ9pZea k3YZRiihiCWsOPyeMXDwyIQVKwgsDNoH8BEZ7L+/SVrpBjvbr2KNAqN4Ps87xKtO VDThs6du1VVyA/aFfCVN70Z86QBZs9fTsF28FFB29BUH4wbkka+Dho7pGubwcDjj ioIzgfTo5KgF4tNHHFF8j9qzF6zuSTH8F3M8JWlF/KZI8iMILZZg6FztPgVd0uD7 3PsbxG3si9C4HpQBTt6lVnJxmUrUrpzusdzmQqD3I6mp2ESUihKf1DrDyAoX46DP C8fVPy1GKcKO3O2LA51TcZDqjlVRM9A= -----END CERTIFICATE-----Generated at Tue Jul 21 19:58:48 2026 by rpki-client