$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa File: 11be9af3-f515-32ba-a037-d02c859f7b8e.roa (raw, json) Hash identifier: 76c4TbBpggi1ZHf3ncJdLV4Pv03No20hyXGWBSTPUiY= Subject key identifier: FD:15:C0:BA:A5:59:9F:B3:E4:17:A8:F9:77:CA:41:B9:D7:C1:37:DF Certificate issuer: /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Certificate serial: 010D0C9F4328584EA5AA77DEDEE8D5DEFD352C80 Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 16276 IP address blocks: 40.160.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:77:de:de:e8:d5:de:fd:35:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=20fa1f5c-9ce0-4a66-950b-96f687cd78b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:b7:69:13:75:ba:d6:67:b0:c0:5f:10:37: b5:04:02:82:50:77:d0:cd:70:73:e6:89:41:83:53: c0:4a:5c:fe:bf:d7:2c:85:2e:a3:a6:57:87:88:fb: a1:67:c7:30:04:82:b4:e9:3a:59:3d:2c:67:5c:8c: 20:b5:74:99:3f:0b:7b:5c:82:8f:69:30:38:bc:c7: ad:7e:29:3e:f2:63:60:76:05:b5:a0:38:4e:dd:d0: 49:04:26:0d:36:a4:91:60:a5:4c:52:ee:bf:1e:bd: d9:d7:8b:a9:fc:e3:ab:b8:12:e3:25:a9:c2:ce:f8: ea:f5:7f:27:3d:db:f3:2c:3c:a2:f4:9a:78:67:32: e7:49:9c:af:c3:be:f0:93:0f:a8:7c:a3:27:88:9c: 11:aa:99:7c:d0:c0:17:b3:2a:5c:ad:e8:a2:03:bd: 37:02:33:3a:d7:b5:ae:52:bc:37:e2:f6:f1:a6:70: 0f:8f:d3:9d:1d:fe:8b:43:40:57:ed:35:c9:45:6c: b2:89:24:23:9a:9c:69:57:55:e7:fe:93:47:58:ab: a8:33:fd:68:c1:42:55:2a:20:ac:08:df:f1:1d:d9: 31:fa:e7:06:0c:87:41:5a:78:39:f0:5b:fe:5c:a0: 4a:39:47:5a:5f:fc:eb:13:b4:c4:12:a7:8f:72:93: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:15:C0:BA:A5:59:9F:B3:E4:17:A8:F9:77:CA:41:B9:D7:C1:37:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl X509v3 Authority Key Identifier: keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer sbgp-ipAddrBlock: critical IPv4: 40.160.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f7:15:db:03:e6:5b:4f:c7:61:87:67:a0:61:5b:c4:d1:7a: 64:9f:a3:0f:0d:f5:6e:a9:61:64:3e:f5:89:75:e8:92:dd:41: 3b:12:95:a5:73:5c:58:95:d9:6b:57:53:4f:72:fe:fa:b5:da: b9:e1:70:67:37:fe:cb:0f:19:ad:71:f5:cc:78:8d:a8:17:8d: 2a:0b:7a:6f:0b:13:1f:78:63:d5:90:54:3e:b8:1a:ca:12:b5: a8:61:63:09:3d:56:cf:c2:ab:08:c4:34:09:03:c1:aa:23:61: 5f:59:7e:0e:e5:0c:3a:52:03:ac:8f:1d:6e:3f:72:61:1c:4b: 07:41:1a:84:24:cb:b5:7a:56:76:3d:c2:12:fd:c3:fd:09:97: 14:4c:99:0d:06:38:fa:2a:3a:c4:ce:67:7b:c3:cf:07:34:27: fa:96:ed:ed:63:ac:57:f7:60:65:7b:27:c2:aa:42:fe:22:d6: 8c:94:8d:b3:d0:80:70:18:b6:8d:ad:c1:80:0a:9e:b0:ae:a6: b9:07:8c:70:73:95:be:8c:df:82:48:a4:60:3e:8c:25:46:88: 67:1a:19:b3:e1:0b:8a:e1:90:77:7c:ea:b8:32:a4:bf:6e:e9: cd:a1:8a:0e:31:78:1b:b8:bc:51:91:e0:35:b1:4e:80:26:42: d9:9d:42:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqnfe3ujV3v01LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2NmU0YTAtNTgxMC00YmI0LTljNTQtN2Y3MDNjY2Y0 Mjg5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk MjBmYTFmNWMtOWNlMC00YTY2LTk1MGItOTZmNjg3Y2Q3OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntK3aRN1utZnsMBfEDe1BAKCUHfQzXBz5olB g1PASlz+v9cshS6jpleHiPuhZ8cwBIK06TpZPSxnXIwgtXSZPwt7XIKPaTA4vMet fik+8mNgdgW1oDhO3dBJBCYNNqSRYKVMUu6/Hr3Z14up/OOruBLjJanCzvjq9X8n PdvzLDyi9Jp4ZzLnSZyvw77wkw+ofKMniJwRqpl80MAXsypcreiiA703AjM617Wu Urw34vbxpnAPj9OdHf6LQ0BX7TXJRWyyiSQjmpxpV1Xn/pNHWKuoM/1owUJVKiCs CN/xHdkx+ucGDIdBWng58Fv+XKBKOUdaX/zrE7TEEqePcpNYEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0VwLqlWZ+z5Beo+XfKQbnXwTffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2 ZTRhMC01ODEwLTRiYjQtOWM1NC03ZjcwM2NjZjQyODkvMTFiZTlhZjMtZjUxNS0z MmJhLWEwMzctZDAyYzg1OWY3YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjg2NmU0YTAtNTgxMC00YmI0LTlj NTQtN2Y3MDNjY2Y0Mjg5LzY4NjZlNGEwLTU4MTAtNGJiNC05YzU0LTdmNzAzY2Nm NDI4OS5jcmwwHwYDVR0jBBgwFoAUEHunC1iP+wF1ygZ5ghjPQfW9FmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2ZTRhMC01ODEwLTRiYjQtOWM1NC03Zjcw M2NjZjQyODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKKDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj3FdsD5ltPx2GHZ6BhW8TRemSfow8N9W6pYWQ+9Yl16JLdQTsSlaVz XFiV2WtXU09y/vq12rnhcGc3/ssPGa1x9cx4jagXjSoLem8LEx94Y9WQVD64GsoS tahhYwk9Vs/CqwjENAkDwaojYV9Zfg7lDDpSA6yPHW4/cmEcSwdBGoQky7V6VnY9 whL9w/0JlxRMmQ0GOPoqOsTOZ3vDzwc0J/qW7e1jrFf3YGV7J8KqQv4i1oyUjbPQ gHAYto2twYAKnrCuprkHjHBzlb6M34JIpGA+jCVGiGcaGbPhC4rhkHd86rgypL9u 6c2hig4xeBu4vFGR4DWxToAmQtmdQp4= -----END CERTIFICATE-----Generated at Thu Jul 30 07:08:56 2026 by rpki-client