$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa File: 1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa (raw, json) Hash identifier: tW8C9V/KLbpe0DPtBSrw6744X1iBgx2SvWVHmE9Sf20= Subject key identifier: 28:21:1B:B5:EE:BA:BE:45:2A:C6:70:C3:1A:94:57:91:FD:D8:8C:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E5A4A16B109359377EF2D4BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 63949 IP address blocks: 172.235.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:16:b1:09:35:93:77:ef:2d:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=853e122c-3a1c-472e-92ae-3a0e83f5e066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e6:b4:33:33:95:63:99:cc:78:7b:83:29:46: f9:4b:61:fd:ac:e5:85:bc:1f:da:a4:8e:a7:bd:be: e7:f1:33:0e:c3:d8:6d:6b:0b:2c:7c:b2:8f:73:55: 65:36:2b:dc:78:da:f5:76:2b:cd:de:5d:19:4e:0e: 40:83:1a:b2:55:49:e9:17:16:3b:f2:85:ce:56:2b: be:dd:53:5a:ac:33:43:89:fd:5f:66:d6:59:d1:52: a2:06:1a:91:4a:fc:4a:d4:6b:97:e7:ce:a7:b7:c8: 5f:b7:22:28:5e:a0:3a:14:c1:2a:8b:4e:68:af:93: 42:a1:4c:92:76:0c:8c:d3:58:76:0b:7c:6e:aa:9a: 0d:60:92:62:05:c9:9e:a7:5c:c1:8d:04:83:79:f0: 19:1b:e7:10:5b:4f:fe:95:d9:b3:5d:d6:0c:e5:64: 7b:c7:cf:a5:68:9f:0e:4b:60:4a:12:78:24:3b:87: bc:c3:82:13:8c:e9:29:ea:bc:99:d6:aa:9c:d7:a9: 6d:d9:ac:9a:79:34:18:69:34:21:a5:8e:c8:7b:8e: 22:b6:73:46:61:b9:4a:3b:54:66:8e:70:07:37:31: e7:a4:72:04:f5:34:64:4e:88:7b:13:af:e3:b5:ab: 27:a9:86:91:a6:35:5d:2d:f9:b2:b0:a4:ea:b8:27: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:1B:B5:EE:BA:BE:45:2A:C6:70:C3:1A:94:57:91:FD:D8:8C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:de:6d:96:45:43:09:1c:59:76:74:9e:8b:99:b6:20:9d:6b: 9c:9d:b8:cd:df:e1:21:72:1f:a4:f5:e0:63:a2:6f:01:ff:cd: 91:76:b8:a8:76:11:59:12:15:1a:2e:c9:32:7c:3c:31:f6:5a: 9c:ae:37:a6:2a:99:53:f1:88:e9:50:47:2d:ac:3e:41:c2:f3: 3b:3f:28:de:25:b1:12:50:98:92:3b:53:a3:14:77:be:3d:a2: 90:06:39:d0:19:cb:a9:ef:32:8c:82:0d:ee:1d:d5:01:ec:ba: 82:60:96:74:9f:d0:9d:6f:6f:07:c8:91:4a:d8:65:be:d8:67: 0b:05:79:e8:70:69:06:32:af:d3:54:d9:4a:b0:8f:5f:08:16: b9:87:cf:6e:a6:54:df:db:3b:d8:5c:de:4a:ff:7d:fb:77:d9: e2:47:bc:b5:cf:34:29:52:7b:29:42:1b:d7:b3:22:3e:8e:f1: af:3b:b3:aa:34:2d:b2:eb:46:c1:69:f3:ad:18:60:49:fd:fc: c4:73:ef:0e:47:32:77:0f:ac:da:2a:ad:d3:4b:ca:5a:b9:f4: 4f:47:d7:07:d5:10:35:0c:8e:ce:2b:bd:65:6b:64:65:3d:f2: fe:21:60:7b:79:db:19:bc:a5:e8:54:3d:70:8b:d5:c5:54:3a: ba:84:1a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aShaxCTWTd+8tS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ODUzZTEyMmMtM2ExYy00NzJlLTkyYWUtM2EwZTgzZjVlMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Oa0MzOVY5nMeHuDKUb5S2H9rOWFvB/apI6n vb7n8TMOw9htawssfLKPc1VlNivceNr1divN3l0ZTg5AgxqyVUnpFxY78oXOViu+ 3VNarDNDif1fZtZZ0VKiBhqRSvxK1GuX586nt8hftyIoXqA6FMEqi05or5NCoUyS dgyM01h2C3xuqpoNYJJiBcmep1zBjQSDefAZG+cQW0/+ldmzXdYM5WR7x8+laJ8O S2BKEngkO4e8w4ITjOkp6ryZ1qqc16lt2ayaeTQYaTQhpY7Ie44itnNGYblKO1Rm jnAHNzHnpHIE9TRkToh7E6/jtasnqYaRpjVdLfmysKTquCcEgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCghG7Xuur5FKsZwwxqUV5H92IxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTkzMmNlOTUtN2JlMi0z MGJmLTg0NzAtYjk4ZTViZDllZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnebZZFQwkcWXZ0nouZtiCda5yduM3f4SFyH6T14GOibwH/zZF2uKh2 EVkSFRouyTJ8PDH2WpyuN6YqmVPxiOlQRy2sPkHC8zs/KN4lsRJQmJI7U6MUd749 opAGOdAZy6nvMoyCDe4d1QHsuoJglnSf0J1vbwfIkUrYZb7YZwsFeehwaQYyr9NU 2Uqwj18IFrmHz26mVN/bO9hc3kr/fft32eJHvLXPNClSeylCG9ezIj6O8a87s6o0 LbLrRsFp860YYEn9/MRz7w5HMncPrNoqrdNLylq59E9H1wfVEDUMjs4rvWVrZGU9 8v4hYHt52xm8pehUPXCL1cVUOrqEGkk= -----END CERTIFICATE-----Generated at Tue Jul 21 21:20:40 2026 by rpki-client