$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json) Hash identifier: Agy8Xan1b+MG1DNT7UIQIgGp0QhDx5mjzLzUr1hSHNw= Subject key identifier: 71:51:33:79:91:13:F1:00:DE:3F:85:15:0C:B0:09:3B:E8:24:4F:89 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584E9A7FDA53C3AD8DECED9F2A00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 11232 IP address blocks: 67.217.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:da:53:c3:ad:8d:ec:ed:9f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=8723dab6-4d45-4de7-9a62-fb00f9a42615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:8f:e3:9c:b4:6f:f3:15:07:43:7a:83:4c: 6b:0e:87:44:66:c4:3f:ae:9c:72:5d:ca:0d:25:5d: e9:ea:8d:2e:29:7e:37:23:17:35:ce:ab:37:c2:c2: 9f:c7:f8:f2:f7:26:69:42:eb:bf:d2:a1:d9:32:a6: 3c:9b:e7:bc:11:b5:26:ef:76:46:06:b6:c9:99:3c: 55:4e:92:67:74:2c:9a:bd:e4:48:0e:0a:3d:0d:e9: 0e:f2:aa:c9:8f:19:05:7e:58:a8:fc:5d:a3:76:67: c2:b3:a8:68:4e:f1:86:6a:e2:c6:5a:3b:bb:7c:b2: 3c:d1:cf:ed:1a:38:f6:45:45:b2:d4:71:0c:c3:7c: 7c:1f:1f:71:20:f1:2a:ee:a7:4f:86:e3:f1:3e:d4: 47:8a:15:39:75:1b:61:d5:5a:48:1a:cd:bc:47:ae: 26:9b:2e:f0:d8:0c:5b:6e:5b:61:77:5a:31:4f:bf: 8b:45:e0:f3:0f:71:5a:63:e9:94:79:99:8d:c6:1b: a7:f3:38:56:2a:07:ce:21:3b:af:59:02:95:b4:a9: 90:1d:f7:a6:df:85:e7:bc:2e:72:1c:ed:e5:8a:5c: 4f:72:92:5d:f8:7f:bd:ba:f9:89:05:92:ed:20:8c: fc:2c:19:42:6b:8d:93:1b:d5:f9:ac:f8:db:2a:5d: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:51:33:79:91:13:F1:00:DE:3F:85:15:0C:B0:09:3B:E8:24:4F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3c:5e:2e:94:e0:d4:cc:85:ea:02:44:2e:fb:1c:0a:89:d0: 0a:4d:2c:fe:eb:45:4c:ab:8e:0f:d2:38:c9:4b:f5:0c:aa:9a: d0:cd:d5:ea:03:06:89:4e:55:b0:d7:79:04:c0:26:c8:c9:28: 8e:11:d6:88:17:a0:9d:ef:8a:d5:06:43:60:a5:75:12:52:69: 4b:be:06:6f:cb:f2:05:b8:c7:bd:0e:6b:b5:85:49:9c:27:05: 5c:8a:55:17:31:13:da:fd:4d:8a:23:69:29:f4:36:1b:2c:f9: 0f:3a:d0:46:3b:4b:32:d2:13:b6:1b:4b:65:44:91:9e:cf:e1: 86:f3:28:d4:68:8d:69:18:0f:0e:b8:3c:27:25:01:58:9b:1b: ef:6e:32:30:fc:cc:30:56:ae:ee:46:e2:98:53:2e:6e:ea:58: 37:5c:34:0b:8a:fd:41:a0:c8:2b:85:dc:fd:f0:0d:77:a4:26: e1:46:f6:0a:b9:61:9f:16:ee:88:6a:17:ad:4d:8d:0e:15:1b: 0e:30:30:a3:1b:05:4c:b0:4c:fc:fd:2b:81:1e:1a:fc:77:07: 67:eb:e2:00:ee:fa:0c:12:68:72:94:ce:4e:06:8a:4a:83:83: 91:33:57:fa:40:de:a0:da:cd:ac:9b:9b:4f:d9:b8:3a:6f:2e: 09:a2:a3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9pTw62N7O2fKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ODcyM2RhYjYtNGQ0NS00ZGU3LTlhNjItZmIwMGY5YTQyNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoneP45y0b/MVB0N6g0xrDodEZsQ/rpxyXcoN JV3p6o0uKX43Ixc1zqs3wsKfx/jy9yZpQuu/0qHZMqY8m+e8EbUm73ZGBrbJmTxV TpJndCyaveRIDgo9DekO8qrJjxkFflio/F2jdmfCs6hoTvGGauLGWju7fLI80c/t Gjj2RUWy1HEMw3x8Hx9xIPEq7qdPhuPxPtRHihU5dRth1VpIGs28R64mmy7w2Axb blthd1oxT7+LReDzD3FaY+mUeZmNxhun8zhWKgfOITuvWQKVtKmQHfem34XnvC5y HO3lilxPcpJd+H+9uvmJBZLtIIz8LBlCa42TG9X5rPjbKl3BuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFRM3mRE/EA3j+FFQywCTvoJE+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDQxMjdmNDMtYWRiYy0z MzU4LTg4YWYtYTlhZTliMGE2M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw8Xi6U4NTMheoCRC77HAqJ0ApNLP7rRUyrjg/SOMlL9QyqmtDN1eoD BolOVbDXeQTAJsjJKI4R1ogXoJ3vitUGQ2CldRJSaUu+Bm/L8gW4x70Oa7WFSZwn BVyKVRcxE9r9TYojaSn0Nhss+Q860EY7SzLSE7YbS2VEkZ7P4YbzKNRojWkYDw64 PCclAVibG+9uMjD8zDBWru5G4phTLm7qWDdcNAuK/UGgyCuF3P3wDXekJuFG9gq5 YZ8W7ohqF61NjQ4VGw4wMKMbBUywTPz9K4EeGvx3B2fr4gDu+gwSaHKUzk4GikqD g5EzV/pA3qDazaybm0/ZuDpvLgmio1s= -----END CERTIFICATE-----Generated at Tue Jul 28 22:28:22 2026 by rpki-client