$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa File: a14bef6f-3d0e-311d-9920-4d558906aa24.roa (raw, json) Hash identifier: UMG1A/7w/4ritQSBvDovPgW3t7xNykYZaQ8HsILDxiQ= Subject key identifier: 40:E8:2C:1E:0D:2D:81:0A:C4:4E:28:80:23:68:34:E8:02:8F:EB:32 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584EA78825CAEEA900A4891AC580 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23465 IP address blocks: 70.96.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:25:ca:ee:a9:00:a4:89:1a:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c87db1fe-6288-4e13-8f76-25f0f28b6811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:2d:48:50:d0:b9:96:cc:b8:22:be:c7:df: 2b:6c:98:eb:86:d0:69:eb:dd:6a:fd:84:79:a2:72: 2e:43:c6:7b:ea:64:33:f6:6a:54:9d:a0:51:5d:0c: 90:ff:3f:22:0a:01:0e:a7:e3:53:89:1e:b3:83:d4: 7c:4a:54:d2:a8:9d:1d:be:51:e6:8e:20:e7:2a:59: 99:d7:5a:6f:ac:5d:e4:a0:e3:86:2c:44:0c:c8:2b: e3:de:45:50:71:98:4b:e9:fb:59:c0:ff:58:0f:0d: 19:b1:7b:69:6b:80:4a:31:29:20:80:aa:b4:aa:9d: e0:7f:f1:c4:b5:22:d5:57:a9:21:1f:32:8c:4e:d0: d3:03:69:71:dc:8d:e3:68:10:2d:dc:8f:c2:40:ba: e7:36:4e:1e:d2:95:28:c1:82:42:16:fd:c3:6b:f5: a5:30:47:55:7e:e2:89:e4:2d:92:5b:f5:ca:cb:2f: 63:c7:c4:71:08:c2:21:20:a8:30:f3:91:a8:c8:da: f5:b2:8f:a5:11:52:24:2d:59:5a:fb:cc:5a:a5:41: 8e:71:37:22:b1:23:98:0d:35:ba:c7:10:b1:b1:29: de:59:54:84:09:e5:af:a8:ee:1f:e1:56:84:ee:bf: 6c:8a:dd:0a:5e:38:1e:da:bb:4b:e4:01:6e:5e:e4: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E8:2C:1E:0D:2D:81:0A:C4:4E:28:80:23:68:34:E8:02:8F:EB:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5d:1e:07:a9:2b:0e:38:64:87:aa:78:fc:be:b4:37:6b:c9: aa:41:ea:4e:d8:79:d6:c5:ff:88:57:18:09:42:82:74:c8:d9: 24:0d:61:76:3b:78:43:db:52:cf:3b:25:b7:c7:57:36:c0:41: c4:ce:6f:c3:28:81:d2:05:96:00:19:30:14:e3:0a:1a:53:87: 7c:23:80:b3:9b:e5:29:bf:d7:e6:bf:11:6d:44:14:5a:96:33: 83:81:cc:a5:55:4a:a1:77:d6:69:bc:e3:35:66:a1:8c:e6:27: 41:d4:71:c2:b5:2d:81:4f:56:83:43:84:1d:a3:01:43:7e:9f: 9c:3b:7d:64:f9:e8:fa:cd:21:44:f1:9d:cf:27:9f:1d:2a:95: 5b:c8:6e:a1:01:c2:d1:e9:74:2e:9e:a0:75:72:77:56:87:2e: a9:fe:06:55:7c:d7:1f:94:30:f0:d8:13:8c:cf:8f:90:88:40: 78:0c:72:95:d3:a8:f8:bf:89:bc:8b:54:a9:26:e4:54:9d:54: 0c:d8:58:f7:df:d5:ff:58:d4:8d:62:3f:ef:52:f0:f0:7f:30: 21:8b:4f:e7:93:72:4c:e4:cf:50:99:8f:75:dc:7b:97:22:45: 3e:ab:71:8d:89:37:d4:1d:2c:f2:2a:03:48:d2:0c:90:a0:b2: 9a:43:bb:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCXK7qkApIkaxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yzg3ZGIxZmUtNjI4OC00ZTEzLThmNzYtMjVmMGYyOGI2ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZwtSFDQuZbMuCK+x98rbJjrhtBp691q/YR5 onIuQ8Z76mQz9mpUnaBRXQyQ/z8iCgEOp+NTiR6zg9R8SlTSqJ0dvlHmjiDnKlmZ 11pvrF3koOOGLEQMyCvj3kVQcZhL6ftZwP9YDw0ZsXtpa4BKMSkggKq0qp3gf/HE tSLVV6khHzKMTtDTA2lx3I3jaBAt3I/CQLrnNk4e0pUowYJCFv3Da/WlMEdVfuKJ 5C2SW/XKyy9jx8RxCMIhIKgw85GoyNr1so+lEVIkLVla+8xapUGOcTcisSOYDTW6 xxCxsSneWVSECeWvqO4f4VaE7r9sit0KXjge2rtL5AFuXuQM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDoLB4NLYEKxE4ogCNoNOgCj+syMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYTE0YmVmNmYtM2QwZS0z MTFkLTk5MjAtNGQ1NTg5MDZhYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRmDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBdHgepKw44ZIeqePy+tDdryapB6k7YedbF/4hXGAlCgnTI2SQNYXY7 eEPbUs87JbfHVzbAQcTOb8MogdIFlgAZMBTjChpTh3wjgLOb5Sm/1+a/EW1EFFqW M4OBzKVVSqF31mm84zVmoYzmJ0HUccK1LYFPVoNDhB2jAUN+n5w7fWT56PrNIUTx nc8nnx0qlVvIbqEBwtHpdC6eoHVyd1aHLqn+BlV81x+UMPDYE4zPj5CIQHgMcpXT qPi/ibyLVKkm5FSdVAzYWPff1f9Y1I1iP+9S8PB/MCGLT+eTckzkz1CZj3Xce5ci RT6rcY2JN9QdLPIqA0jSDJCgsppDu5I= -----END CERTIFICATE-----Generated at Wed Jul 29 08:52:29 2026 by rpki-client