$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa File: 45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa (raw, json) Hash identifier: vZGkvG+ZYvMvTOGb/8l9EzN5L4IV4zdlHHl2+pTile4= Subject key identifier: A0:70:53:F4:FB:EF:DE:9A:37:D2:6D:DC:BD:D5:08:34:1B:5A:6B:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4C54991C71C2CF22BD144AA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 16625 IP address blocks: 72.246.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:99:1c:71:c2:cf:22:bd:14:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=408b8cd7-47f7-4d7d-9670-9a83dfbba309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:71:e7:38:d8:ad:7a:df:62:de:6d:11:34: f7:96:6c:77:3d:10:c5:68:89:97:8c:9f:a7:83:47: 8e:a4:70:c3:b6:f9:28:b6:3f:14:41:95:51:98:24: 77:b7:64:15:67:4c:d5:28:2b:60:a3:09:da:80:62: 24:33:74:8f:b9:50:67:65:b8:a7:18:9e:7c:6f:cd: 26:81:ea:eb:54:1f:b8:ed:a5:56:70:8e:4e:fd:c4: b0:cb:ee:f9:7c:50:a0:de:6c:bb:9b:5f:f1:24:59: 30:05:1d:47:05:fa:9a:1c:c9:19:a1:de:22:0d:11: 4c:77:a6:76:b3:7b:4a:5a:fd:1a:1c:6c:6a:03:e8: 31:a5:f4:ca:86:f8:86:4c:b6:9d:c0:36:7e:27:28: 87:fb:50:54:59:49:47:38:3b:5b:34:1f:5d:46:18: d8:77:bb:ad:f0:2d:92:8e:f7:cd:b0:0d:7a:43:cc: 93:90:03:89:fa:a7:87:15:bf:8d:e6:c0:53:ed:7c: 49:91:93:14:d9:27:ee:c4:20:79:42:43:c6:d1:c6: 26:ea:9a:e3:42:53:30:a6:e8:9e:1f:40:55:59:5d: 91:92:eb:31:61:56:26:07:2e:2c:d1:64:d0:4b:66: 89:2d:ff:c5:7d:a0:01:2a:99:8c:76:3b:d4:6c:56: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:70:53:F4:FB:EF:DE:9A:37:D2:6D:DC:BD:D5:08:34:1B:5A:6B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ea7a02-5ea2-3999-9a2a-ad602dd624ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ac:b6:bc:45:74:29:e5:1f:55:68:4b:f4:c7:35:6b:fd:70: 76:15:48:3c:bd:10:d9:f4:11:27:2e:37:ac:2a:a7:fb:93:7c: 52:93:07:61:6c:d2:19:57:4f:c0:3b:70:6f:b8:03:6f:a8:97: 41:6b:12:15:b4:dd:16:2a:db:31:5c:3c:d8:3b:f6:99:2f:a8: 7c:03:c8:41:c9:48:1f:0a:74:b9:23:77:91:4d:d9:e2:6b:17: b6:50:bf:f6:df:79:09:a6:be:9b:4c:2f:74:2a:cd:9d:ea:23: f3:b2:7f:9b:05:51:38:33:e0:43:3d:4e:fd:ee:24:5f:2e:8e: 4e:36:24:7f:d9:2b:22:2e:e7:fa:d9:77:75:df:e2:7b:54:51: a5:76:b2:b8:f0:2f:b5:a6:2e:5d:c4:78:12:f0:e7:3e:5d:19: 3f:27:84:b5:93:84:3d:35:d1:51:66:a4:b0:2d:63:4d:5e:bc: 98:2e:a8:cd:e4:46:17:c9:42:f3:1f:9d:63:61:70:48:9c:a3: 56:20:97:a3:4c:b3:db:53:78:24:81:e8:6e:fc:51:99:47:ba: a8:35:d2:c4:0d:f4:fd:0e:44:11:40:f5:9f:fc:4f:2b:13:2b: 84:31:39:54:4c:dd:dc:46:ad:97:45:01:fe:16:75:a3:ac:30: d7:2f:0c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVJkcccLPIr0USqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk NDA4YjhjZDctNDdmNy00ZDdkLTk2NzAtOWE4M2RmYmJhMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSxx5zjYrXrfYt5tETT3lmx3PRDFaImXjJ+n g0eOpHDDtvkotj8UQZVRmCR3t2QVZ0zVKCtgownagGIkM3SPuVBnZbinGJ58b80m gerrVB+47aVWcI5O/cSwy+75fFCg3my7m1/xJFkwBR1HBfqaHMkZod4iDRFMd6Z2 s3tKWv0aHGxqA+gxpfTKhviGTLadwDZ+JyiH+1BUWUlHODtbNB9dRhjYd7ut8C2S jvfNsA16Q8yTkAOJ+qeHFb+N5sBT7XxJkZMU2SfuxCB5QkPG0cYm6prjQlMwpuie H0BVWV2RkusxYVYmBy4s0WTQS2aJLf/FfaABKpmMdjvUbFaSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBwU/T7796aN9Jt3L3VCDQbWmufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVlYTdhMDItNWVhMi0z OTk5LTlhMmEtYWQ2MDJkZDYyNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCstrxFdCnlH1VoS/THNWv9cHYVSDy9ENn0EScuN6wqp/uTfFKTB2Fs 0hlXT8A7cG+4A2+ol0FrEhW03RYq2zFcPNg79pkvqHwDyEHJSB8KdLkjd5FN2eJr F7ZQv/bfeQmmvptML3QqzZ3qI/Oyf5sFUTgz4EM9Tv3uJF8ujk42JH/ZKyIu5/rZ d3Xf4ntUUaV2srjwL7WmLl3EeBLw5z5dGT8nhLWThD010VFmpLAtY01evJguqM3k RhfJQvMfnWNhcEico1Ygl6NMs9tTeCSB6G78UZlHuqg10sQN9P0ORBFA9Z/8TysT K4QxOVRM3dxGrZdFAf4WdaOsMNcvDMA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:42:26 2026 by rpki-client