$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa File: dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa (raw, json) Hash identifier: 1O/hKZEvpICJnK4QUcwJHsKwvz2SK1tLCpYgaFBruYg= Subject key identifier: 22:4C:51:F4:A6:30:6C:56:72:73:90:3D:E0:5B:63:C2:31:07:86:F2 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584EA787D30C4EEBA00B7E70C940 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 212238 IP address blocks: 172.102.218.0/24 maxlen: 24 216.158.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d3:0c:4e:eb:a0:0b:7e:70:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2a1cc65e-9d94-4032-8da4-d9b9188cd1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:4e:07:41:0c:d2:6b:a2:20:a9:e6:aa:af: 86:00:bc:4d:db:62:ba:37:ed:71:1d:23:cf:67:cd: c2:d6:94:67:7a:c8:a9:27:16:43:51:e3:d2:1c:44: 8b:b3:44:eb:c7:01:10:c1:77:99:a7:5f:1c:70:58: b8:24:1a:72:98:c1:1f:f2:15:7d:f5:2b:40:36:f7: ee:e7:0a:03:d1:f9:3c:ff:81:4b:05:eb:06:85:49: 62:4e:ab:59:2e:2d:5a:c7:0d:a4:78:b1:d1:45:44: 33:b2:0f:cc:9d:a3:b7:93:c1:7f:3b:9c:6c:4a:36: cf:70:57:55:d4:97:9c:e8:8a:b0:4a:fd:09:43:55: a7:81:23:54:fe:1a:53:37:6d:58:58:ac:59:40:2c: ab:71:35:2b:83:48:00:68:9e:4a:c7:f5:37:f8:71: 72:3b:54:80:e3:38:89:61:59:d4:7b:3a:ab:13:04: 6c:6d:4c:ac:4e:ec:f9:5a:51:8b:2d:66:9d:2b:58: 5f:16:fb:fc:5d:95:c3:4f:e9:86:28:a5:a4:16:d3: 8b:ad:59:ae:b8:86:44:eb:6d:84:fe:e7:6f:94:bd: 5b:f6:8e:f6:4f:19:2b:8c:a5:83:9c:49:29:a3:6f: 04:5d:c2:15:26:b6:b1:23:e3:1d:ce:10:6e:4d:07: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4C:51:F4:A6:30:6C:56:72:73:90:3D:E0:5B:63:C2:31:07:86:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.218.0/24 216.158.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a9:0a:7e:00:b8:de:57:bc:f8:84:95:4f:50:58:e5:0b:f9: 5e:94:62:4b:cb:09:f6:d4:eb:e0:53:66:ff:e4:f0:2e:08:fe: ea:e0:21:75:c1:05:7b:fa:97:88:7c:69:79:01:66:96:7f:a6: 12:63:86:d5:37:5a:18:48:99:09:27:8f:f2:a4:db:2c:4d:d3: 07:16:7c:df:fa:af:10:da:d8:40:f5:69:f5:09:2a:4b:46:c2: 7a:04:76:c1:8b:d9:c9:94:f2:61:a9:8c:3f:1e:4b:24:d8:34: 8f:23:67:38:26:ca:88:56:16:40:cb:e2:bf:c1:af:a4:c8:93: 79:14:2f:cc:db:4d:df:4b:ef:8e:ed:34:0f:25:1b:f8:2c:27: f9:ff:b6:f7:5e:12:ed:84:c4:d5:b2:33:4e:5d:e5:91:69:0f: 9c:61:f1:d2:2c:af:bf:5a:71:a6:52:68:ad:12:18:72:5c:d9: a9:e1:22:a2:8c:7e:74:05:56:ea:9d:f3:c0:09:e7:38:8f:bf: 0c:f4:ec:0a:a5:5b:86:db:79:b9:3b:d3:01:9f:a5:61:c8:50: 9f:2f:b4:fd:09:97:8a:c2:1b:79:8d:3a:d1:6a:99:b3:97:b5: 89:b2:ec:70:61:78:7a:d2:54:f4:78:04:c3:44:00:7c:fa:e5: d8:d4:a6:27 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nh9MMTuugC35wyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmExY2M2NWUtOWQ5NC00MDMyLThkYTQtZDliOTE4OGNkMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspxOB0EM0muiIKnmqq+GALxN22K6N+1xHSPP Z83C1pRnesipJxZDUePSHESLs0TrxwEQwXeZp18ccFi4JBpymMEf8hV99StANvfu 5woD0fk8/4FLBesGhUliTqtZLi1axw2keLHRRUQzsg/MnaO3k8F/O5xsSjbPcFdV 1Jec6IqwSv0JQ1WngSNU/hpTN21YWKxZQCyrcTUrg0gAaJ5Kx/U3+HFyO1SA4ziJ YVnUezqrEwRsbUysTuz5WlGLLWadK1hfFvv8XZXDT+mGKKWkFtOLrVmuuIZE622E /udvlL1b9o72TxkrjKWDnEkpo28EXcIVJraxI+MdzhBuTQeVuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCJMUfSmMGxWcnOQPeBbY8IxB4byMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZGMwMGUxOGQtMjgzNS0z MGIyLWFlZGMtMGY4MTg1ZWM0YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbaAwQA 2J7NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEypCn4AuN5XvPiElU9QWOUL+V6UYkvLCfbU6+BTZv/k8C4I /urgIXXBBXv6l4h8aXkBZpZ/phJjhtU3WhhImQknj/Kk2yxN0wcWfN/6rxDa2ED1 afUJKktGwnoEdsGL2cmU8mGpjD8eSyTYNI8jZzgmyohWFkDL4r/Br6TIk3kUL8zb Td9L747tNA8lG/gsJ/n/tvdeEu2ExNWyM05d5ZFpD5xh8dIsr79acaZSaK0SGHJc 2anhIqKMfnQFVuqd88AJ5ziPvwz07AqlW4bbebk70wGfpWHIUJ8vtP0Jl4rCG3mN OtFqmbOXtYmy7HBheHrSVPR4BMNEAHz65djUpic= -----END CERTIFICATE-----Generated at Wed Jul 29 12:52:37 2026 by rpki-client