$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa File: 609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa (raw, json) Hash identifier: HfwDCGphY7CJsHTKy9Jm52Iw0kd+dwXirLMd59MyOS0= Subject key identifier: 4B:A3:76:4E:AF:7B:BF:6B:C5:F9:86:53:49:0F:07:61:8F:46:65:5B Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584EA79C43F3319F31410BA66D80 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394002 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:43:f3:31:9f:31:41:0b:a6:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ab984355-96a0-40b6-a46b-25468f4dea59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:71:05:9b:78:d3:c6:72:f6:30:f4:f0:78: ed:d6:1e:3b:a5:e7:a9:9e:3c:c4:61:55:cc:29:fc: e8:18:1f:cc:fa:b3:a3:0c:b2:ec:d9:81:5a:18:64: b4:89:ab:fc:f7:1b:03:ca:0d:ed:89:87:71:f9:58: ee:3f:63:30:a6:a9:ff:81:f5:22:a0:5a:f5:0e:27: ba:3e:4a:c7:1b:76:56:7b:52:c0:e8:44:79:fd:43: 16:5d:d9:6d:b4:14:d6:45:66:a5:14:cd:0e:f4:f6: db:b3:8b:b9:ce:39:b5:52:bb:1e:31:d8:18:d8:69: 6a:a5:6b:92:25:06:06:f3:27:56:7c:38:72:24:82: 93:2d:76:f9:11:7b:57:4d:d2:da:d4:22:4e:14:44: ed:51:9a:46:72:89:0d:98:93:ae:d2:9f:ff:33:da: 72:64:f9:5c:f8:58:27:4f:21:49:1b:0f:47:18:8a: 98:88:32:cf:c6:54:9b:2b:cb:f2:d1:bd:52:1e:2b: 63:4b:2f:fb:62:58:3b:4a:0a:6f:8e:f3:e2:f2:c2: 83:40:b1:63:32:06:cc:33:17:df:33:0f:98:6c:1a: ac:d4:ca:92:24:e0:12:f0:cf:d1:ac:a4:5b:d3:36: 77:bb:01:81:a9:0b:43:6e:a8:cb:b6:af:da:51:46: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A3:76:4E:AF:7B:BF:6B:C5:F9:86:53:49:0F:07:61:8F:46:65:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2c:99:0d:b0:b9:75:b1:eb:5c:32:88:45:59:49:fe:5e:2f: be:6f:9b:fd:93:52:6d:da:f6:a2:05:d2:00:d8:4b:21:b5:f0: ac:e8:dd:ce:76:b5:3a:6f:1f:1f:25:ea:43:6b:df:ab:eb:54: 91:5a:d0:0b:34:3f:41:d0:a6:e7:12:93:41:a9:90:e7:90:4b: a1:89:ec:28:23:f7:da:c0:54:2d:d6:0c:32:37:34:f5:5e:47: b0:dc:53:96:91:90:82:1d:05:5d:34:58:f6:b1:04:f0:44:9d: fd:34:1f:ad:4d:26:35:fd:e1:dc:c4:c0:49:ed:aa:f3:ef:5e: c4:b3:f3:1a:d8:f0:9f:09:5f:5d:fe:88:d9:17:c7:2d:74:f7: ad:3b:26:df:4c:86:bf:15:3d:31:48:62:80:d3:c9:c4:bd:ce: da:15:5b:08:ed:99:cf:a8:f3:86:f1:85:cd:a6:81:ca:84:1c: 3d:67:8c:9a:c1:9e:d8:f3:05:4c:48:d6:9b:24:ee:a4:f5:cc: f6:5a:a7:a8:ff:01:94:4f:64:8d:21:6f:1a:7d:69:7e:3d:1e: 6f:8a:6e:73:1b:9c:40:b4:ec:9a:bd:32:38:96:3c:e4:50:f7: ba:6c:a0:e3:92:27:16:9c:59:54:1b:12:70:15:5c:69:89:b9: 2e:45:be:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnEPzMZ8xQQumbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWI5ODQzNTUtOTZhMC00MGI2LWE0NmItMjU0NjhmNGRlYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl51xBZt408Zy9jD08Hjt1h47peepnjzEYVXM KfzoGB/M+rOjDLLs2YFaGGS0iav89xsDyg3tiYdx+VjuP2Mwpqn/gfUioFr1Die6 PkrHG3ZWe1LA6ER5/UMWXdlttBTWRWalFM0O9Pbbs4u5zjm1UrseMdgY2GlqpWuS JQYG8ydWfDhyJIKTLXb5EXtXTdLa1CJOFETtUZpGcokNmJOu0p//M9pyZPlc+Fgn TyFJGw9HGIqYiDLPxlSbK8vy0b1SHitjSy/7Ylg7SgpvjvPi8sKDQLFjMgbMMxff Mw+YbBqs1MqSJOAS8M/RrKRb0zZ3uwGBqQtDbqjLtq/aUUYiZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEujdk6ve79rxfmGU0kPB2GPRmVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNjA5ZWMxZTAtNDA4Yi0z YmZkLTk3NmItM2QwY2NiZDI5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0smQ2wuXWx61wyiEVZSf5eL75vm/2TUm3a9qIF0gDYSyG18Kzo3c52 tTpvHx8l6kNr36vrVJFa0As0P0HQpucSk0GpkOeQS6GJ7Cgj99rAVC3WDDI3NPVe R7DcU5aRkIIdBV00WPaxBPBEnf00H61NJjX94dzEwEntqvPvXsSz8xrY8J8JX13+ iNkXxy109607Jt9Mhr8VPTFIYoDTycS9ztoVWwjtmc+o84bxhc2mgcqEHD1njJrB ntjzBUxI1psk7qT1zPZap6j/AZRPZI0hbxp9aX49Hm+KbnMbnEC07Jq9MjiWPORQ 97psoOOSJxacWVQbEnAVXGmJuS5FvsM= -----END CERTIFICATE-----Generated at Wed Jul 29 04:33:14 2026 by rpki-client