$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa File: 796a8503-13ba-3800-8978-3da85e63b13a.roa (raw, json) Hash identifier: z+aKFUmeMZdLoqfVC9Sa4F9bl4LNFtjkn5yQG8JuPDc= Subject key identifier: DC:17:E3:0B:79:37:E2:12:13:A7:AB:7D:88:5A:C9:7F:6B:46:B4:94 Certificate issuer: /CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Certificate serial: 010D0C9F4328584E9BE50AD5C7263E0166C73120 Authority key identifier: 95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 952 IP address blocks: 172.110.130.0/24 maxlen: 24 185.167.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:0a:d5:c7:26:3e:01:66:c7:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=88451c7c-4392-4e97-ae33-598149f449fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:60:51:96:ff:ef:cd:30:6e:eb:6d:9e:5a: b0:5e:46:c8:57:2d:7a:6e:ea:00:89:0a:0d:17:b3: 4c:6e:bf:99:9d:14:e2:aa:11:03:7f:9a:18:d9:f5: be:86:37:d9:65:3a:45:af:82:da:cb:ef:cb:dc:24: 87:89:66:e0:f0:ed:56:bf:26:40:05:82:87:44:1f: cf:da:c7:c3:e2:13:ee:e4:32:b2:54:c8:26:0f:06: 60:f4:74:cf:e6:cc:9b:11:93:06:08:a8:0e:86:03: 90:8e:5f:90:4f:1a:62:62:bd:0f:df:99:8d:14:23: f3:fa:ee:09:23:71:e6:f6:22:00:86:a7:50:9f:dc: c5:69:02:73:98:36:fa:c4:03:1e:8b:ba:15:30:44: c8:1a:80:80:03:7c:05:23:3d:53:b1:bd:a7:21:f3: 35:db:a8:26:29:13:95:52:af:ec:7b:39:0c:77:98: 3a:10:97:e5:c6:5a:00:3d:e7:67:78:00:96:e0:ea: 4a:c7:3e:c8:fa:31:2b:5c:eb:ce:79:8a:f5:f1:c6: af:aa:8d:2f:44:e8:1c:d1:e3:35:60:60:80:51:7c: e9:b4:dc:9a:6f:fe:cb:9e:1d:83:00:c4:4a:9f:9f: a4:aa:84:c7:a8:21:f0:31:33:93:36:84:70:08:0b: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:17:E3:0B:79:37:E2:12:13:A7:AB:7D:88:5A:C9:7F:6B:46:B4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/796a8503-13ba-3800-8978-3da85e63b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl X509v3 Authority Key Identifier: keyid:95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer sbgp-ipAddrBlock: critical IPv4: 172.110.130.0/24 185.167.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e5:48:db:67:6d:c7:d8:da:e4:c8:2f:7f:6b:e7:0e:17:2a: c4:39:96:df:64:7b:06:7d:ef:83:be:18:08:b1:90:2b:b3:e8: ca:04:2b:e5:e6:08:da:e5:d2:bc:9c:2a:23:bd:ab:8b:a6:5f: fc:a4:19:30:c0:4a:fd:a7:b1:41:04:da:c8:84:64:07:d5:01: 96:2e:71:ea:9d:10:52:7a:83:d7:9a:e0:c3:1f:cf:2b:dc:89: f4:a2:17:2f:df:a9:db:41:da:90:6c:8d:8d:2a:a7:2a:2f:28: b5:35:8f:a1:af:c7:29:1c:4b:4f:f1:81:0c:79:69:45:b7:2a: 3e:eb:4b:80:a9:88:2d:37:46:f8:6f:bd:47:e1:79:ca:f8:7b: 79:5c:41:7f:93:07:6d:cf:c2:fa:39:23:43:47:42:bf:84:c1: e1:e2:cd:c0:a1:58:70:12:9c:bb:41:ba:19:bc:c9:b2:ef:b2: 92:f4:a3:2c:d2:02:40:79:d2:3a:ee:93:8b:1f:fe:fa:dc:f4: 1a:81:1a:32:f0:45:82:73:cb:a9:37:a4:b4:77:3a:c8:78:c8: c4:e2:f3:b8:4f:bd:71:ab:32:a9:6d:7c:ee:40:fd:f0:4b:e8: e4:6b:dc:2d:4f:63:23:cf:fb:e8:8d:aa:6b:2e:4f:9d:e5:2b: 2b:81:2d:cb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6b5QrVxyY+AWbHMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYwZmJkMGQtMWUwYS00YjhhLWI0NjctMGI2MTk3ZDhi NWQwMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ODg0NTFjN2MtNDM5Mi00ZTk3LWFlMzMtNTk4MTQ5ZjQ0OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMhgUZb/780wbuttnlqwXkbIVy16buoAiQoN F7NMbr+ZnRTiqhEDf5oY2fW+hjfZZTpFr4Lay+/L3CSHiWbg8O1WvyZABYKHRB/P 2sfD4hPu5DKyVMgmDwZg9HTP5sybEZMGCKgOhgOQjl+QTxpiYr0P35mNFCPz+u4J I3Hm9iIAhqdQn9zFaQJzmDb6xAMei7oVMETIGoCAA3wFIz1Tsb2nIfM126gmKROV Uq/sezkMd5g6EJflxloAPedneACW4OpKxz7I+jErXOvOeYr18cavqo0vROgc0eM1 YGCAUXzptNyab/7Lnh2DAMRKn5+kqoTHqCHwMTOTNoRwCAuKpQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNwX4wt5N+ISE6erfYhayX9rRrSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBm YmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYxOTdkOGI1ZDAvNzk2YTg1MDMtMTNiYS0z ODAwLTg5NzgtM2RhODVlNjNiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTYwZmJkMGQtMWUwYS00YjhhLWI0 NjctMGI2MTk3ZDhiNWQwL2E2MGZiZDBkLTFlMGEtNGI4YS1iNDY3LTBiNjE5N2Q4 YjVkMC5jcmwwHwYDVR0jBBgwFoAUlQ7z/AkyQbqHL902TDItyhUVPeEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBmYmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYx OTdkOGI1ZDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG6CAwQA uae2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEnlSNtnbcfY2uTIL39r5w4XKsQ5lt9kewZ974O+GAixkCuz 6MoEK+XmCNrl0rycKiO9q4umX/ykGTDASv2nsUEE2siEZAfVAZYuceqdEFJ6g9ea 4MMfzyvcifSiFy/fqdtB2pBsjY0qpyovKLU1j6GvxykcS0/xgQx5aUW3Kj7rS4Cp iC03RvhvvUfhecr4e3lcQX+TB23Pwvo5I0NHQr+EweHizcChWHASnLtBuhm8ybLv spL0oyzSAkB50jruk4sf/vrc9BqBGjLwRYJzy6k3pLR3Osh4yMTi87hPvXGrMqlt fO5A/fBL6ORr3C1PYyPP++iNqmsuT53lKyuBLcs= -----END CERTIFICATE-----Generated at Thu Jul 30 06:55:57 2026 by rpki-client