$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa File: cf326abc-d15b-3239-975e-23598674000e.roa (raw, json) Hash identifier: 4MzJPH8gyoJr2aTjD1kiMyUGeTGRZWqWD5rVhQXOk0E= Subject key identifier: 18:57:55:84:3D:8A:01:04:EC:5A:5A:DE:47:F3:41:2B:85:B1:24:B2 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584E9A7FDA215239CC2C8ABA6B60 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 11232 IP address blocks: 24.52.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:da:21:52:39:cc:2c:8a:ba:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=3ac11e37-4a1c-424f-b8c6-246d3ee1bd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:31:77:41:67:8d:5f:34:24:80:69:56:24: c2:bf:4e:73:e7:91:26:b9:e1:61:0b:90:35:08:a9: 93:7b:3d:ea:3d:11:ea:8a:fb:85:77:96:f8:43:15: c6:b0:4d:e7:0c:95:01:78:fa:a8:2b:f2:48:28:c1: 89:4c:f8:89:92:d7:57:aa:bb:d4:55:b4:16:8f:f3: f5:fc:36:b5:a2:19:42:89:be:83:e1:44:5e:de:29: 57:6f:e7:52:fb:52:63:73:2b:2e:6d:4e:a3:d3:7f: 49:46:7d:29:e0:5a:69:ab:4d:88:ca:98:54:32:c1: 7d:d2:13:20:56:6b:bb:64:bb:fa:3e:eb:4e:12:b0: cf:16:4b:33:ca:8c:c2:fb:10:43:0b:2b:4e:d9:be: 6d:26:1b:5f:b1:f2:cf:e9:2d:6a:dd:0b:60:99:60: a5:02:0b:84:63:0a:2f:ad:7d:91:5a:00:79:67:d0: 16:f9:cc:79:f2:27:d5:16:c3:d4:a1:36:b5:b0:fb: 5e:f6:cc:2f:b5:1e:9c:af:4a:5a:e3:c0:09:a0:12: 57:b5:0e:04:3c:b8:52:f4:29:e3:dc:dd:a9:4a:9c: da:d0:89:fa:df:5d:d5:4d:2d:32:aa:60:c6:60:40: d6:b3:25:54:45:16:3b:96:e0:23:76:92:e6:a7:1d: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:57:55:84:3D:8A:01:04:EC:5A:5A:DE:47:F3:41:2B:85:B1:24:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.52.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ba:80:0b:4c:4e:b2:a3:05:04:0a:38:de:55:59:d9:0e:cc: af:b0:bf:86:f0:b8:04:c2:54:95:15:62:be:e4:12:f7:f8:3e: 47:e5:a1:21:f5:14:c4:fb:50:e8:16:d5:46:6e:c2:82:d3:7b: 35:6d:e5:bf:3c:b7:e1:37:22:40:95:82:f3:ca:ac:ba:ae:e1: f4:e9:31:2f:85:94:f1:55:d2:9e:13:40:e5:47:df:dc:8e:93: 3d:35:2f:2b:6b:db:e0:4c:ae:7b:e2:c1:6f:dc:97:fd:8f:73: 85:6e:5e:43:9b:b0:77:d0:ac:ec:71:ee:e6:fe:e6:d3:e6:01: c5:e8:bf:79:1f:bf:45:d4:79:59:a5:4d:d0:b6:75:e9:b1:9c: 0b:78:3e:cd:2f:15:65:ac:c6:8f:ec:5e:38:2c:fa:28:ff:37: 61:0e:42:cd:21:53:07:d9:ec:66:6a:25:f9:ab:bc:7d:71:7e: 07:4d:0e:5d:65:06:1d:44:f1:f9:b3:c9:11:84:fa:d9:6b:d3: 16:16:e6:56:f4:39:95:c2:ba:88:b1:cf:94:12:7d:57:0f:8d: 4c:d6:b8:b7:67:f8:86:be:f9:52:f7:65:ef:28:65:92:42:76: f2:9a:4d:98:c6:11:fe:f2:46:dd:46:a2:28:6d:e4:94:2c:08: 0d:4b:f3:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9ohUjnMLIq6a2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk M2FjMTFlMzctNGExYy00MjRmLWI4YzYtMjQ2ZDNlZTFiZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnAxd0FnjV80JIBpViTCv05z55EmueFhC5A1 CKmTez3qPRHqivuFd5b4QxXGsE3nDJUBePqoK/JIKMGJTPiJktdXqrvUVbQWj/P1 /Da1ohlCib6D4URe3ilXb+dS+1JjcysubU6j039JRn0p4Fppq02IyphUMsF90hMg Vmu7ZLv6PutOErDPFkszyozC+xBDCytO2b5tJhtfsfLP6S1q3QtgmWClAguEYwov rX2RWgB5Z9AW+cx58ifVFsPUoTa1sPte9swvtR6cr0pa48AJoBJXtQ4EPLhS9Cnj 3N2pSpza0In6313VTS0yqmDGYEDWsyVURRY7luAjdpLmpx0bLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhXVYQ9igEE7Fpa3kfzQSuFsSSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvY2YzMjZhYmMtZDE1Yi0z MjM5LTk3NWUtMjM1OTg2NzQwMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK6gAtMTrKjBQQKON5VWdkOzK+wv4bwuATCVJUVYr7kEvf4PkfloSH1 FMT7UOgW1UZuwoLTezVt5b88t+E3IkCVgvPKrLqu4fTpMS+FlPFV0p4TQOVH39yO kz01Lytr2+BMrnviwW/cl/2Pc4VuXkObsHfQrOxx7ub+5tPmAcXov3kfv0XUeVml TdC2demxnAt4Ps0vFWWsxo/sXjgs+ij/N2EOQs0hUwfZ7GZqJfmrvH1xfgdNDl1l Bh1E8fmzyRGE+tlr0xYW5lb0OZXCuoixz5QSfVcPjUzWuLdn+Ia++VL3Ze8oZZJC dvKaTZjGEf7yRt1Goiht5JQsCA1L83g= -----END CERTIFICATE-----Generated at Tue Jul 28 22:28:13 2026 by rpki-client