$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/86946973-d9e3-36d6-bf61-ad06a033a3ff.roa File: 86946973-d9e3-36d6-bf61-ad06a033a3ff.roa (raw, json) Hash identifier: L9Yei05mc/r6CB2ORomC4ZVqUGTVkiydKSMHytK7go4= Subject key identifier: 34:09:C0:51:57:F0:F0:BB:50:5C:5E:E1:82:0D:F9:8F:1D:4F:35:45 Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584EA799FF1F61DC29A83A5BEA00 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/86946973-d9e3-36d6-bf61-ad06a033a3ff.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63448 IP address blocks: 65.17.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:ff:1f:61:dc:29:a8:3a:5b:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9abd5712-d1de-4b63-85e6-f6bcc58e1693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:92:56:a4:09:73:18:06:83:28:d8:9b:b7: 1c:cd:05:d8:a9:05:48:e6:7b:4f:eb:9b:30:32:6f: 94:41:32:06:30:73:da:c3:11:e1:05:08:86:6b:ac: 44:33:8e:a2:0f:06:ba:56:ff:26:ef:93:95:91:ed: b1:32:2b:98:c9:d2:92:dc:8d:73:a1:36:2f:17:1e: f0:94:19:e0:c8:ff:13:08:a8:15:d3:98:c8:a9:45: 4f:66:ad:1e:da:a7:ee:ae:9e:ce:8e:c0:d6:79:a1: d0:49:29:c2:2a:f8:0f:ee:b1:5e:ef:88:09:f5:58: 64:63:f2:0e:93:d0:ae:3e:14:af:20:df:13:cf:15: 19:5a:a9:4d:eb:43:c6:43:be:77:f5:54:ad:e5:09: 1a:d4:32:1f:cc:0c:bb:2d:a4:9b:d2:2c:7c:cb:14: 61:2e:f8:56:a0:be:45:66:73:7c:1c:e6:e8:de:ac: bd:d3:3c:75:1b:a3:b9:83:11:7f:b2:e5:6e:3f:ed: 23:d3:33:6a:3c:a1:fc:45:df:ad:69:b2:14:9f:45: dc:e2:f6:4a:68:23:e0:c5:30:62:00:01:6e:ea:a9: c7:10:1e:1d:ab:40:f6:e2:7e:54:30:83:34:28:82: 97:9b:67:8b:b3:b5:81:49:20:3f:3f:02:53:21:9d: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:09:C0:51:57:F0:F0:BB:50:5C:5E:E1:82:0D:F9:8F:1D:4F:35:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/86946973-d9e3-36d6-bf61-ad06a033a3ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 65.17.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0f:e3:e2:f3:d0:9c:e9:b1:32:08:5e:e6:22:3d:43:b7:a8: ab:36:95:7b:75:1e:7a:83:ec:0b:f5:8b:21:9f:c4:92:c6:f5: 7a:53:c2:d2:47:e6:2f:ba:d6:fe:d3:d1:b2:4f:b1:6b:3a:4e: 05:1c:1a:6a:d0:65:8c:fd:2d:58:28:8f:b5:c7:f9:a6:9f:ef: 35:34:74:c5:d7:3d:f1:cf:bb:63:e3:6d:af:34:d9:c4:58:44: 95:15:fd:89:57:8b:93:51:65:a9:3d:24:b4:93:fa:e8:f2:66: 25:60:7e:50:88:c1:1b:8d:3f:55:76:d1:d1:67:be:2b:df:ed: 46:3e:a5:64:4c:fb:c8:19:5f:0c:df:d8:94:fb:13:9f:68:2f: 1b:44:d6:58:b8:82:3c:06:c0:e9:3b:62:fc:db:2f:f3:7e:55: 1a:0c:9b:2c:18:2f:d9:6d:4a:74:54:c7:ec:21:22:b9:e5:0a: 9f:54:ac:45:fd:b3:42:e3:bf:91:d4:09:f8:06:dd:75:f8:d7: 00:32:ec:70:e3:88:f9:f8:0d:ae:a5:ad:e3:14:dd:96:6d:d6: 13:71:4a:86:8d:6e:39:da:19:55:60:39:b3:2a:18:53:d9:58: 36:b6:b5:6a:17:ba:37:5c:0d:3c:9e:94:5a:c8:49:10:48:8f: fa:32:5a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmf8fYdwpqDpb6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWFiZDU3MTItZDFkZS00YjYzLTg1ZTYtZjZiY2M1OGUxNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdySVqQJcxgGgyjYm7cczQXYqQVI5ntP65sw Mm+UQTIGMHPawxHhBQiGa6xEM46iDwa6Vv8m75OVke2xMiuYydKS3I1zoTYvFx7w lBngyP8TCKgV05jIqUVPZq0e2qfurp7OjsDWeaHQSSnCKvgP7rFe74gJ9VhkY/IO k9CuPhSvIN8TzxUZWqlN60PGQ7539VSt5Qka1DIfzAy7LaSb0ix8yxRhLvhWoL5F ZnN8HObo3qy90zx1G6O5gxF/suVuP+0j0zNqPKH8Rd+tabIUn0Xc4vZKaCPgxTBi AAFu6qnHEB4dq0D24n5UMIM0KIKXm2eLs7WBSSA/PwJTIZ0hSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQJwFFX8PC7UFxe4YIN+Y8dTzVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvODY5NDY5NzMtZDllMy0z NmQ2LWJmNjEtYWQwNmEwMzNhM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQRGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwP4+Lz0JzpsTIIXuYiPUO3qKs2lXt1HnqD7Av1iyGfxJLG9XpTwtJH 5i+61v7T0bJPsWs6TgUcGmrQZYz9LVgoj7XH+aaf7zU0dMXXPfHPu2Pjba802cRY RJUV/YlXi5NRZak9JLST+ujyZiVgflCIwRuNP1V20dFnvivf7UY+pWRM+8gZXwzf 2JT7E59oLxtE1li4gjwGwOk7YvzbL/N+VRoMmywYL9ltSnRUx+whIrnlCp9UrEX9 s0Ljv5HUCfgG3XX41wAy7HDjiPn4Da6lreMU3ZZt1hNxSoaNbjnaGVVgObMqGFPZ WDa2tWoXujdcDTyelFrISRBIj/oyWlA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:34:02 2026 by rpki-client