$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa File: 6a7c1fcd-5997-353b-aa88-da1a2d616872.roa (raw, json) Hash identifier: iYL1HRehIAX8fhxefgh8CdxQAtsYIbGIKZy6p4yuu8Q= Subject key identifier: AA:A1:F7:59:C9:3E:3E:74:A4:ED:5D:A3:B5:FD:F3:23:7E:72:E3:E5 Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F4328584EA79CD16C6E8AB62655B78500 Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3737 IP address blocks: 23.172.16.0/24 maxlen: 32 68.70.0.0/19 maxlen: 32 72.28.0.0/18 maxlen: 32 199.96.176.0/21 maxlen: 32 199.192.136.0/22 maxlen: 32 199.241.168.0/22 maxlen: 32 2607:3e00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:d1:6c:6e:8a:b6:26:55:b7:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=09ecf2ce-2030-4375-87ee-1aa8e7aa21dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:f5:a9:8a:10:4b:22:b2:93:23:92:62:da: 03:8b:30:99:22:46:48:15:b4:d3:f2:12:15:b1:8b: 3e:b2:95:41:ac:2d:e6:6d:e5:4f:56:fd:ce:2f:26: 46:34:2e:0a:a1:67:7b:5b:57:7e:25:cf:e3:9b:cc: b9:aa:28:07:70:58:ed:36:b8:54:b6:0f:7c:6d:d9: d8:5a:c2:8a:ad:b0:12:ed:99:ae:e5:55:33:5c:04: 1d:e0:8f:8c:f1:16:81:2a:f5:df:de:59:c2:a5:7a: cf:5f:a5:28:ee:37:2d:04:58:b9:ab:7a:2e:e0:85: 87:4c:76:37:14:1c:35:b3:ac:1f:ef:c0:dc:cd:d6: ce:d2:cf:3a:d8:9e:78:7c:08:8e:f7:9b:cf:e9:09: a2:37:8e:e3:22:78:dd:27:39:ea:8a:12:58:89:4d: b1:48:4a:4a:4e:d9:ff:0c:2b:d8:25:84:d2:6e:fc: 1f:a4:21:4b:6b:dc:9a:52:10:7f:f4:21:14:ee:42: c9:e5:80:76:4d:3b:7d:1b:ba:2d:b6:f2:57:1b:8d: b9:1a:32:bc:73:0d:fa:2d:17:92:1c:23:ed:9a:ef: ec:7c:df:e6:fd:b1:70:64:c3:d5:99:88:0d:cb:e7: 66:16:3b:05:41:78:2d:78:07:4e:0b:93:20:43:80: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A1:F7:59:C9:3E:3E:74:A4:ED:5D:A3:B5:FD:F3:23:7E:72:E3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: 23.172.16.0/24 68.70.0.0/19 72.28.0.0/18 199.96.176.0/21 199.192.136.0/22 199.241.168.0/22 IPv6: 2607:3e00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1d:f7:14:3b:8f:80:ef:00:28:87:ef:19:53:83:38:ec:01: 55:7d:50:b5:14:1f:74:93:96:78:b0:fa:52:cc:81:5b:5e:30: a3:ed:2e:77:1c:9c:b5:bd:9d:54:5e:8d:17:91:32:18:33:4a: 80:ad:f6:c6:35:9f:7e:d4:ad:0e:09:97:94:57:a2:48:0b:c0: a4:5f:31:11:e2:37:d5:ec:f9:59:94:88:cb:cd:b1:8b:82:bc: cf:96:6d:4d:e9:27:74:12:f1:f6:4c:e0:32:91:53:e1:cf:c7: 79:ca:64:07:cd:67:e2:89:ab:71:fb:b9:62:95:a8:33:b5:fe: 4f:a9:b0:5d:d3:de:62:14:af:b4:19:a5:11:61:c0:0a:c2:53: a9:e4:1d:4d:cc:f7:a2:bd:12:4b:e7:69:0c:00:13:6b:7e:6a: 34:4c:8d:ea:70:ef:cc:76:ac:76:b0:93:8b:4d:e1:cb:47:04: 93:e2:5b:f5:49:aa:26:bf:df:c7:31:5a:ca:65:5c:97:85:69: cc:82:c6:41:6d:4c:ae:89:b8:c5:6b:ec:e5:ea:2e:ad:54:ca: 6c:4f:7b:d0:03:be:e1:0c:c7:81:b2:19:82:b6:80:3c:5f:d4: 7e:c5:66:ac:ee:d9:5a:a9:40:82:17:40:92:c9:b7:26:a6:a1: 94:9e:55:8e -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWE6nnNFsboq2JlW3hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDllY2YyY2UtMjAzMC00Mzc1LTg3ZWUtMWFhOGU3YWEyMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6L1qYoQSyKykyOSYtoDizCZIkZIFbTT8hIV sYs+spVBrC3mbeVPVv3OLyZGNC4KoWd7W1d+Jc/jm8y5qigHcFjtNrhUtg98bdnY WsKKrbAS7Zmu5VUzXAQd4I+M8RaBKvXf3lnCpXrPX6Uo7jctBFi5q3ou4IWHTHY3 FBw1s6wf78DczdbO0s862J54fAiO95vP6QmiN47jInjdJznqihJYiU2xSEpKTtn/ DCvYJYTSbvwfpCFLa9yaUhB/9CEU7kLJ5YB2TTt9G7ottvJXG425GjK8cw36LReS HCPtmu/sfN/m/bFwZMPVmYgNy+dmFjsFQXgteAdOC5MgQ4BFNQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFKqh91nJPj50pO1do7X98yN+cuPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvNmE3YzFmY2QtNTk5Ny0z NTNiLWFhODgtZGExYTJkNjE2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAF6wQAwQF REYAAwQGSBwAAwQDx2CwAwQCx8CIAwQCx/GoMA0EAgACMAcDBQAmBz4AMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBABod9xQ7j4DvACiH7xlTgzjsAVV9ULUUH3STlniw+lLMgVteMKPtLnccnLW9 nVRejReRMhgzSoCt9sY1n37UrQ4Jl5RXokgLwKRfMRHiN9Xs+VmUiMvNsYuCvM+W bU3pJ3QS8fZM4DKRU+HPx3nKZAfNZ+KJq3H7uWKVqDO1/k+psF3T3mIUr7QZpRFh wArCU6nkHU3M96K9EkvnaQwAE2t+ajRMjepw78x2rHawk4tN4ctHBJPiW/VJqia/ 38cxWsplXJeFacyCxkFtTK6JuMVr7OXqLq1UymxPe9ADvuEMx4GyGYK2gDxf1H7F Zqzu2VqpQIIXQJLJtyamoZSeVY4= -----END CERTIFICATE-----Generated at Wed Jul 29 06:28:24 2026 by rpki-client