$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa File: f7690f1e-c39d-30e1-9d78-56741c6780a0.roa (raw, json) Hash identifier: yFN5AZAnb5rikJnJfWmtC6j+KnjixKapp7aeKzOii5g= Subject key identifier: B7:31:B2:63:0C:33:CF:13:D7:C0:4C:80:6B:12:C3:37:5E:2B:73:D2 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584E9A7FD884CB9E32B324224C40 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 11232 IP address blocks: 209.169.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d8:84:cb:9e:32:b3:24:22:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=add087d6-da16-43ef-b979-c1032fd43b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:9f:1a:ed:12:c4:e6:1c:2c:35:9f:8c:34: f4:80:13:1c:5d:b7:ee:a2:31:ba:cb:db:2b:a4:2a: 9f:d8:63:42:3e:70:3a:fe:bd:03:35:8d:2e:bf:09: 3c:df:4d:d1:17:a0:65:f5:41:8d:aa:d7:9b:56:1d: ff:bf:9a:12:89:b1:43:90:7f:a7:10:2c:1e:5c:94: 99:27:f0:36:e1:69:cf:24:63:1c:32:91:06:c3:ef: 14:07:26:d8:34:fd:99:cd:48:cd:23:cc:87:18:b5: 04:42:21:5d:94:a0:41:9e:08:4b:1e:9d:b5:66:80: 1b:b5:d2:a0:25:94:98:56:02:61:70:4e:f0:e7:1c: f9:61:e7:71:f9:36:54:d2:10:2d:a8:76:72:b5:5a: b3:79:3f:2d:58:c0:64:8c:0e:34:08:f6:b8:9d:13: 34:2d:ae:d8:1f:c5:9d:e2:f7:d4:32:e5:b2:fe:84: 21:70:73:cd:05:df:91:b1:e7:57:6c:21:31:68:8f: a6:87:4d:71:8e:50:46:dc:33:e3:9f:11:ea:47:a0: e8:b3:94:e7:3c:d0:5c:ce:3b:f6:d8:47:84:cb:cf: bb:59:57:15:b0:a5:e0:6a:12:85:20:03:73:24:82: 67:9d:4d:a0:37:b9:97:19:a1:ba:f4:97:66:47:63: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:B2:63:0C:33:CF:13:D7:C0:4C:80:6B:12:C3:37:5E:2B:73:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 209.169.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:25:4d:fa:40:48:ef:45:4e:9c:d4:c0:c7:aa:0d:13:34:ba: 94:ff:3d:9a:13:73:e1:69:e6:3d:fc:6c:60:b2:fc:67:37:c7: 19:60:81:7e:a4:28:fe:3f:8d:83:62:2b:84:c8:f8:ef:c0:87: d8:83:b0:90:30:fe:a3:f3:78:72:14:f0:72:ed:75:5b:9f:2f: b9:ab:49:cc:6f:25:ef:70:92:f5:93:88:4e:38:24:bd:83:b0: d2:ba:17:4d:01:21:19:5d:5f:5d:e9:b0:ff:70:2e:2b:d8:36: 99:b6:4e:34:80:90:ac:96:55:0d:30:67:47:39:05:fa:69:55: 7a:b9:91:7d:84:eb:be:f9:3c:31:dc:bb:c6:a3:5e:aa:60:31: 15:d9:96:e9:54:3e:fa:24:37:bb:ca:b9:c9:9a:bd:cb:99:ed: 7c:11:dd:4a:a0:9c:e3:01:dd:98:02:0f:9e:2b:00:08:d2:8c: f1:80:1b:cb:76:d4:12:78:08:a9:4c:c8:cf:f7:21:83:c1:78: 9e:6c:b1:0d:8c:cf:74:0c:58:8f:75:b1:4b:70:2e:49:9a:a1: 5e:89:4f:c8:74:27:63:1f:85:e3:02:85:6e:0c:64:ef:f2:70: d8:dd:91:df:32:37:dc:de:f5:c6:e5:37:71:1a:95:b5:c7:2a: 76:da:4d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9iEy54ysyQiTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk YWRkMDg3ZDYtZGExNi00M2VmLWI5NzktYzEwMzJmZDQzYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouefGu0SxOYcLDWfjDT0gBMcXbfuojG6y9sr pCqf2GNCPnA6/r0DNY0uvwk8303RF6Bl9UGNqtebVh3/v5oSibFDkH+nECweXJSZ J/A24WnPJGMcMpEGw+8UBybYNP2ZzUjNI8yHGLUEQiFdlKBBnghLHp21ZoAbtdKg JZSYVgJhcE7w5xz5Yedx+TZU0hAtqHZytVqzeT8tWMBkjA40CPa4nRM0La7YH8Wd 4vfUMuWy/oQhcHPNBd+RsedXbCExaI+mh01xjlBG3DPjnxHqR6Dos5TnPNBczjv2 2EeEy8+7WVcVsKXgahKFIANzJIJnnU2gN7mXGaG69JdmR2PgPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcxsmMMM88T18BMgGsSwzdeK3PSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjc2OTBmMWUtYzM5ZC0z MGUxLTlkNzgtNTY3NDFjNjc4MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0anQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIlTfpASO9FTpzUwMeqDRM0upT/PZoTc+Fp5j38bGCy/Gc3xxlggX6k KP4/jYNiK4TI+O/Ah9iDsJAw/qPzeHIU8HLtdVufL7mrScxvJe9wkvWTiE44JL2D sNK6F00BIRldX13psP9wLivYNpm2TjSAkKyWVQ0wZ0c5BfppVXq5kX2E6775PDHc u8ajXqpgMRXZlulUPvokN7vKucmavcuZ7XwR3UqgnOMB3ZgCD54rAAjSjPGAG8t2 1BJ4CKlMyM/3IYPBeJ5ssQ2Mz3QMWI91sUtwLkmaoV6JT8h0J2MfheMChW4MZO/y cNjdkd8yN9ze9cblN3EalbXHKnbaTRc= -----END CERTIFICATE-----Generated at Tue Jul 28 23:39:08 2026 by rpki-client