$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa File: 5a3099c6-e346-3491-bde9-84061b37cc95.roa (raw, json) Hash identifier: 790dmFlXfrpr3L1W0t415b+i5+PB5CpcNDVUsFqz7UI= Subject key identifier: 86:DD:80:8A:5E:4C:8D:D8:1C:5C:BC:96:57:C6:F8:FB:3C:25:F0:46 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584EA794F9272677A6587941E480 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63062 IP address blocks: 72.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:f9:27:26:77:a6:58:79:41:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=09028f9c-c447-42e6-ae77-9f0dddcb8e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:7c:9f:87:a3:f9:a7:a0:2b:47:d9:4f:e1: 28:eb:ff:dd:0e:1c:cb:b7:fc:32:83:5c:0e:d0:33: 92:a8:77:ec:b2:4f:60:3b:5e:e0:cb:26:48:be:e2: 57:e9:00:19:ca:46:48:08:ae:1f:cb:30:a8:f0:54: 66:04:fb:05:6f:11:8d:d4:5f:ef:f0:aa:54:cf:85: b9:9f:25:e3:3c:45:76:e2:d0:27:c7:36:6a:c7:36: f8:d5:a2:c6:44:de:ac:63:1f:75:a1:b1:59:d2:17: bc:80:66:c8:25:2f:d6:aa:93:dc:14:98:12:83:f7: 81:c4:f5:fc:71:8d:16:d3:a3:a7:d4:43:46:85:9f: f5:6d:2d:c7:1e:6c:d3:3a:8b:15:95:2d:8f:03:d5: 28:68:7c:15:fc:a1:57:87:65:c1:75:63:d7:79:70: 4e:39:b9:23:92:84:97:87:51:29:73:75:9c:80:fa: 28:d0:de:d6:ef:ef:fc:e6:3f:73:04:f0:c4:6a:4a: ba:9f:7a:e2:c9:76:67:24:b5:45:cc:dc:4a:ef:4d: de:77:38:61:90:5a:f0:12:03:6a:cf:3f:fb:82:9c: 9a:1a:5b:3c:a6:b8:46:15:df:2e:bf:9c:c6:33:41: ff:56:df:86:10:5d:56:2c:56:8d:4c:bc:1e:f2:a1: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:80:8A:5E:4C:8D:D8:1C:5C:BC:96:57:C6:F8:FB:3C:25:F0:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.170.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e0:2c:dd:46:38:d2:ec:11:c1:85:c5:ae:46:9d:de:4f:8e: de:59:ed:58:c3:85:f2:b6:e4:dc:dc:1c:95:98:26:a1:3c:31: 22:af:92:1a:51:31:75:84:8a:77:90:a3:4e:a5:c2:28:9f:71: 61:c7:4e:f4:87:6c:6e:51:52:31:bd:30:2d:f1:0c:e3:93:b3: 9e:7c:f8:71:ce:50:15:05:db:a3:ec:aa:cf:8b:fc:70:20:0d: 6e:44:8a:91:f8:e1:e5:08:00:39:21:69:d9:44:44:83:f3:a5: c5:55:7b:95:fe:bd:39:ce:d0:d3:7d:38:64:f9:24:6c:2e:2d: 21:36:9c:d9:0a:39:83:c8:c0:d0:73:e3:52:85:22:b7:6b:2e: 56:76:a0:9c:ec:fa:3d:b7:76:1a:79:65:d0:43:e4:3c:e6:5e: 66:3f:11:9a:96:6a:c3:d1:51:ae:2c:87:f2:c4:1a:bc:46:1f: 71:e0:9e:0e:57:8a:92:c6:25:16:6c:57:93:2b:1e:94:3d:ba: 02:d6:c0:53:50:0b:2e:d9:0d:cf:54:70:fe:47:2b:31:89:e1: 50:c8:3f:9e:81:ef:c6:30:0d:5b:7d:9b:26:40:3f:ab:a5:32: 2f:d0:90:5e:1b:20:2f:ff:8b:d0:11:ef:51:89:91:82:dd:4a: 8d:22:46:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlPknJnemWHlB5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDkwMjhmOWMtYzQ0Ny00MmU2LWFlNzctOWYwZGRkY2I4ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifx8n4ej+aegK0fZT+Eo6//dDhzLt/wyg1wO 0DOSqHfssk9gO17gyyZIvuJX6QAZykZICK4fyzCo8FRmBPsFbxGN1F/v8KpUz4W5 nyXjPEV24tAnxzZqxzb41aLGRN6sYx91obFZ0he8gGbIJS/WqpPcFJgSg/eBxPX8 cY0W06On1ENGhZ/1bS3HHmzTOosVlS2PA9UoaHwV/KFXh2XBdWPXeXBOObkjkoSX h1Epc3WcgPoo0N7W7+/85j9zBPDEakq6n3riyXZnJLVFzNxK703edzhhkFrwEgNq zz/7gpyaGls8prhGFd8uv5zGM0H/Vt+GEF1WLFaNTLwe8qG2wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbdgIpeTI3YHFy8llfG+Ps8JfBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNWEzMDk5YzYtZTM0Ni0z NDkxLWJkZTktODQwNjFiMzdjYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASKrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXgLN1GONLsEcGFxa5Gnd5Pjt5Z7VjDhfK25NzcHJWYJqE8MSKvkhpR MXWEineQo06lwiifcWHHTvSHbG5RUjG9MC3xDOOTs558+HHOUBUF26Psqs+L/HAg DW5EipH44eUIADkhadlERIPzpcVVe5X+vTnO0NN9OGT5JGwuLSE2nNkKOYPIwNBz 41KFIrdrLlZ2oJzs+j23dhp5ZdBD5DzmXmY/EZqWasPRUa4sh/LEGrxGH3Hgng5X ipLGJRZsV5MrHpQ9ugLWwFNQCy7ZDc9UcP5HKzGJ4VDIP56B78YwDVt9myZAP6ul Mi/QkF4bIC//i9AR71GJkYLdSo0iRn0= -----END CERTIFICATE-----Generated at Wed Jul 29 13:38:57 2026 by rpki-client