$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa File: f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa (raw, json) Hash identifier: INnLesYhqOZ44HdHTOiVV2q5Lfin5rU7HyiX8x8M+J8= Subject key identifier: FC:D3:B9:B0:63:BD:1B:B6:E2:11:89:D1:15:00:40:11:51:6F:50:DA Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584E9A7FDA2CB54F667BA39890E0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 11232 IP address blocks: 24.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:da:2c:b5:4f:66:7b:a3:98:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=fff2d28f-0252-4f65-94ad-376d1d2d6fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:45:b3:37:61:c0:ad:85:4e:f0:15:be:3f: fb:d5:85:2e:ea:25:6c:a3:3f:46:8e:03:d3:66:1e: ff:a4:e4:32:71:40:d9:b6:76:d2:6a:f1:b6:f1:80: a4:61:72:1e:7b:7a:79:3b:23:f2:66:46:b8:df:27: 95:4b:52:4e:89:62:2c:0b:7f:6e:c7:6c:da:38:ae: 99:d5:f6:3b:4e:a2:8d:21:17:07:48:fd:e3:23:9a: 93:68:6b:2d:84:40:c6:ee:72:61:25:3d:44:5e:7c: a2:3c:75:cb:7c:3a:0c:ae:e0:37:8f:f1:e9:74:e0: 34:da:e7:4a:c1:13:d4:2b:62:43:a3:6e:f0:20:b7: a3:3a:8c:8c:d2:5e:dc:91:21:db:22:56:4f:e3:f2: 56:5c:92:c9:68:78:3a:ac:62:f0:41:16:d5:42:3a: 0f:c3:02:cc:b0:83:a6:e3:85:64:f1:08:bf:40:16: 85:ab:b5:89:64:88:fe:a3:c2:97:99:21:b1:56:72: 73:81:96:7a:a9:c0:15:5d:47:07:16:6d:0d:d0:09: 47:fa:56:49:92:7f:11:43:1c:31:3a:f2:e8:89:bf: c2:d1:ec:2d:ed:7e:c0:f0:be:dd:2b:b9:a7:7b:04: 01:90:f0:75:14:a4:26:10:c7:66:72:e4:43:6e:51: d5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:B9:B0:63:BD:1B:B6:E2:11:89:D1:15:00:40:11:51:6F:50:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f1f6355d-e11f-3aa9-a524-06e24ed3ef12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:86:33:d7:a2:a9:31:d0:2a:28:b6:1e:60:49:5c:96:a7:19: 54:46:f2:c9:d3:43:3f:19:57:e6:8b:5d:b4:1e:46:03:bd:9b: ad:de:e6:33:a3:f6:cc:41:b6:b5:81:85:69:e5:19:d5:52:d1: 46:ab:dc:da:91:7a:2d:cc:fd:a0:a0:e5:45:a6:55:97:86:a3: 5a:98:4e:d9:9a:6b:72:ca:59:02:22:01:35:4a:9a:c5:e3:a9: aa:ae:76:a0:f1:ea:7d:57:00:2c:77:53:0e:cc:d6:b7:b2:a9: 51:8d:95:dd:75:13:0c:e7:16:71:12:f3:fe:d7:42:f8:41:9e: dd:d2:3a:dd:0c:9d:83:f2:63:6a:5c:a0:79:3e:a9:5f:1e:e9: 77:4f:2e:50:f6:1f:2d:e2:11:01:04:a4:e6:c4:5d:fe:67:20: ac:98:45:67:a8:59:1e:c2:70:a4:77:40:38:dc:03:2c:61:bd: 2f:62:83:5b:d4:5a:d3:4d:4f:c3:09:56:0c:30:90:1d:1d:40: 75:83:16:28:0b:eb:c1:af:e9:a0:33:3e:93:75:c2:46:79:a2: 7c:cb:41:e1:6c:6a:4c:f4:22:f6:49:5e:a0:76:f2:33:3f:01: d0:5c:3f:65:79:ff:35:84:6f:5f:e3:a9:db:0e:42:bc:a1:9d: 0c:96:4b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9ostU9me6OYkOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZmZmMmQyOGYtMDI1Mi00ZjY1LTk0YWQtMzc2ZDFkMmQ2ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK9FszdhwK2FTvAVvj/71YUu6iVsoz9GjgPT Zh7/pOQycUDZtnbSavG28YCkYXIee3p5OyPyZka43yeVS1JOiWIsC39ux2zaOK6Z 1fY7TqKNIRcHSP3jI5qTaGsthEDG7nJhJT1EXnyiPHXLfDoMruA3j/HpdOA02udK wRPUK2JDo27wILejOoyM0l7ckSHbIlZP4/JWXJLJaHg6rGLwQRbVQjoPwwLMsIOm 44Vk8Qi/QBaFq7WJZIj+o8KXmSGxVnJzgZZ6qcAVXUcHFm0N0AlH+lZJkn8RQxwx OvLoib/C0ewt7X7A8L7dK7mnewQBkPB1FKQmEMdmcuRDblHV3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzTubBjvRu24hGJ0RUAQBFRb1DaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjFmNjM1NWQtZTExZi0z YWE5LWE1MjQtMDZlMjRlZDNlZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOGM9eiqTHQKii2HmBJXJanGVRG8snTQz8ZV+aLXbQeRgO9m63e5jOj 9sxBtrWBhWnlGdVS0Uar3NqRei3M/aCg5UWmVZeGo1qYTtmaa3LKWQIiATVKmsXj qaqudqDx6n1XACx3Uw7M1reyqVGNld11EwznFnES8/7XQvhBnt3SOt0MnYPyY2pc oHk+qV8e6XdPLlD2Hy3iEQEEpObEXf5nIKyYRWeoWR7CcKR3QDjcAyxhvS9ig1vU WtNNT8MJVgwwkB0dQHWDFigL68Gv6aAzPpN1wkZ5onzLQeFsakz0IvZJXqB28jM/ AdBcP2V5/zWEb1/jqdsOQryhnQyWS8s= -----END CERTIFICATE-----Generated at Tue Jul 28 22:19:03 2026 by rpki-client