$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/4582e0f2-2e29-381f-9a84-205b3c6396bc.roa File: 4582e0f2-2e29-381f-9a84-205b3c6396bc.roa (raw, json) Hash identifier: +nvNCwR5wcOQaEXnpk+FsAnZbQawvl/TJwMQrjSq7hQ= Subject key identifier: 48:77:5F:FA:F7:76:C6:C7:82:3B:B4:1C:E1:77:62:88:16:B5:C5:EB Certificate issuer: /CN=bff279fd-d394-4080-81b8-6c481e38a07f Certificate serial: 010D0C9F4328584EA797E47DF733629A632CBCC0 Authority key identifier: 9B:C6:26:41:7A:37:C8:87:AD:20:34:85:31:1A:20:9C:09:B8:9F:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/4582e0f2-2e29-381f-9a84-205b3c6396bc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 18849 IP address blocks: 72.19.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:e4:7d:f7:33:62:9a:63:2c:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff279fd-d394-4080-81b8-6c481e38a07f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=682b1998-8849-4a9b-88de-907bb8d010b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:2d:8d:a3:2b:75:89:03:11:c3:e6:c3:78: ef:73:e8:13:b5:8f:17:1b:1b:55:e9:55:bf:95:af: 06:dc:c2:6b:9c:16:bf:80:8b:c2:90:13:f0:77:9a: 84:fa:e8:4b:f8:1b:e3:4f:60:7c:f0:b9:5e:e6:5d: cf:c3:ab:14:73:c9:6c:f7:df:2e:0e:2c:0a:9b:aa: c1:1a:58:b2:0d:c7:d3:ed:62:6e:48:63:07:65:a0: 79:e1:03:5e:06:6a:c3:57:29:56:b2:64:d2:6b:20: df:f7:3c:70:26:8a:b0:76:aa:0f:4a:15:85:14:cb: 3e:2d:83:dd:72:9e:05:1b:4b:46:11:e6:ca:f8:92: b6:89:71:2d:1a:01:f0:32:76:c0:cf:70:bc:d6:fb: b0:ce:af:52:54:4e:f4:a9:49:23:d7:98:9e:73:d4: 87:ec:56:d0:fa:c2:b3:de:5d:cc:e9:4f:0c:c8:50: 64:8c:27:ad:d8:b5:0a:93:04:2c:d3:84:50:15:e9: e9:ca:63:90:d9:11:65:3f:08:7d:97:4b:71:5d:89: d2:99:d4:12:0b:e3:83:d8:c6:ab:82:25:6c:48:d8: a6:c3:83:20:e7:fc:4e:4e:89:37:c2:27:33:8b:51: 16:2b:b0:bb:46:cd:65:9c:99:5b:aa:e1:2a:9e:d7: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:77:5F:FA:F7:76:C6:C7:82:3B:B4:1C:E1:77:62:88:16:B5:C5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/4582e0f2-2e29-381f-9a84-205b3c6396bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.crl X509v3 Authority Key Identifier: keyid:9B:C6:26:41:7A:37:C8:87:AD:20:34:85:31:1A:20:9C:09:B8:9F:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer sbgp-ipAddrBlock: critical IPv4: 72.19.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:46:af:0a:a5:37:82:6f:d6:78:15:c2:4e:34:d7:8d:b6:2a: af:7f:00:53:9e:aa:89:d0:80:94:7a:3e:44:99:ed:49:ea:38: 05:cd:10:55:18:40:d0:89:3b:01:a0:37:a7:c3:6c:28:36:71: a9:ac:04:69:94:7c:5a:ee:d1:79:ea:c2:07:65:a8:6b:b0:dd: 35:90:a9:b3:a7:75:d5:ec:62:77:38:98:02:8b:bf:6b:4f:71: f8:02:ba:d6:83:5b:40:e7:ca:07:e6:7d:32:f6:14:5b:e5:db: e9:15:6f:47:74:b8:ee:9d:80:ff:91:fb:db:b8:9e:ad:10:8e: 48:dd:63:42:a7:66:35:65:5e:f9:58:ca:64:56:59:f3:89:13: 56:5b:c8:87:76:58:2f:33:6d:de:7b:f0:7f:82:8b:7e:ec:8c: 6b:fe:2a:d5:3b:c9:a0:a6:f4:8c:5f:d4:09:40:96:ad:cc:e5: 23:88:9e:f3:98:fe:bb:00:00:cf:ae:1f:90:39:51:67:94:b3: cd:b2:cd:3f:8c:91:e2:ff:82:c5:7e:32:38:49:0b:24:b7:cd: 73:de:12:90:fd:91:3b:58:e3:39:b6:b5:12:75:4d:3e:e9:af: b7:73:07:ce:e8:5a:b8:50:8e:c9:46:3b:30:85:87:7a:95:be: 31:17:db:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+R99zNimmMsvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmMjc5ZmQtZDM5NC00MDgwLTgxYjgtNmM0ODFlMzhh MDdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjgyYjE5OTgtODg0OS00YTliLTg4ZGUtOTA3YmI4ZDAxMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD0tjaMrdYkDEcPmw3jvc+gTtY8XGxtV6VW/ la8G3MJrnBa/gIvCkBPwd5qE+uhL+BvjT2B88Lle5l3Pw6sUc8ls998uDiwKm6rB GliyDcfT7WJuSGMHZaB54QNeBmrDVylWsmTSayDf9zxwJoqwdqoPShWFFMs+LYPd cp4FG0tGEebK+JK2iXEtGgHwMnbAz3C81vuwzq9SVE70qUkj15iec9SH7FbQ+sKz 3l3M6U8MyFBkjCet2LUKkwQs04RQFenpymOQ2RFlPwh9l0txXYnSmdQSC+OD2Mar giVsSNimw4Mg5/xOTok3wiczi1EWK7C7Rs1lnJlbquEqntd4IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh3X/r3dsbHgju0HOF3YogWtcXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iZmYy NzlmZC1kMzk0LTQwODAtODFiOC02YzQ4MWUzOGEwN2YvNDU4MmUwZjItMmUyOS0z ODFmLTlhODQtMjA1YjNjNjM5NmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmZmMjc5ZmQtZDM5NC00MDgwLTgx YjgtNmM0ODFlMzhhMDdmL2JmZjI3OWZkLWQzOTQtNDA4MC04MWI4LTZjNDgxZTM4 YTA3Zi5jcmwwHwYDVR0jBBgwFoAUm8YmQXo3yIetIDSFMRognAm4n3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iZmYyNzlmZC1kMzk0LTQwODAtODFiOC02YzQ4 MWUzOGEwN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5GrwqlN4Jv1ngVwk401422Kq9/AFOeqonQgJR6PkSZ7UnqOAXNEFUY QNCJOwGgN6fDbCg2camsBGmUfFru0XnqwgdlqGuw3TWQqbOnddXsYnc4mAKLv2tP cfgCutaDW0DnygfmfTL2FFvl2+kVb0d0uO6dgP+R+9u4nq0QjkjdY0KnZjVlXvlY ymRWWfOJE1ZbyId2WC8zbd578H+Ci37sjGv+KtU7yaCm9Ixf1AlAlq3M5SOInvOY /rsAAM+uH5A5UWeUs82yzT+MkeL/gsV+MjhJCyS3zXPeEpD9kTtY4zm2tRJ1TT7p r7dzB87oWrhQjslGOzCFh3qVvjEX21o= -----END CERTIFICATE-----Generated at Wed Jul 29 11:48:14 2026 by rpki-client