$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa File: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (raw, json) Hash identifier: f0X4Vj+xDFmjTsJwOzlgwLIex0wiV9rHSNdTql9i6rI= Subject key identifier: DD:F1:13:78:A4:A0:14:91:23:4B:27:F2:87:AC:28:A3:80:71:43:06 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584EA797FE76D505EC167EB96EB0 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398419 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:fe:76:d5:05:ec:16:7e:b9:6e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cf4edc76-fc05-4447-a699-5450d5e3ad36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:cf:b5:de:10:31:e4:00:d5:5f:cd:69:56: fb:a0:93:df:ea:3c:ee:56:a9:73:a4:d1:2b:84:95: 4e:fd:a3:13:a6:98:69:24:df:5b:65:28:55:d2:64: e6:d5:f8:90:06:39:a5:2b:cb:9b:d2:1d:61:e4:7b: dd:25:e8:73:81:19:5f:3a:6c:6d:82:8f:93:db:55: 5e:60:1d:2f:b0:c5:87:4d:7d:54:ae:34:e1:2f:d1: 99:33:0c:2e:35:c3:b5:f8:92:b8:db:30:c9:39:ec: c4:05:28:30:8a:cf:a9:5e:f4:d7:65:6b:ec:21:ef: 6c:e5:97:99:2c:1f:7e:4a:54:0b:d9:45:2a:22:77: a2:cc:38:6c:90:b1:4e:22:6d:5d:8c:3e:ab:8c:14: 9f:89:1f:52:9a:89:b3:d3:1d:ba:19:20:9c:a5:4c: a3:8c:f7:e9:d4:fe:8a:26:b6:0b:46:5f:a5:1f:4a: d5:37:24:d3:de:6e:dd:0b:5d:46:83:74:ba:f6:08: a3:2c:48:1f:b4:5d:14:34:2c:4b:91:29:ce:04:15: b3:56:59:50:83:fc:d1:6b:13:7c:51:87:db:29:00: 40:e1:15:42:e1:08:0f:ce:98:1f:86:f1:d9:1d:a1: 55:1b:51:26:ff:b0:fd:e2:f6:43:c7:0e:71:dd:4d: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F1:13:78:A4:A0:14:91:23:4B:27:F2:87:AC:28:A3:80:71:43:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8a:89:e2:00:14:db:77:74:42:e3:88:c0:92:6c:9f:df:f8: b9:5c:51:fd:8a:bc:4a:d7:55:83:cf:55:60:14:2f:07:89:a3: 25:3b:86:49:b7:8b:0f:23:1e:90:a7:80:52:ac:2a:4e:22:1a: 47:a2:61:24:56:d5:81:2c:f0:5f:bd:f2:b6:9b:38:e0:c3:34: 9f:99:2a:45:a4:d9:d1:b9:4f:c8:16:de:cc:1a:14:34:51:35: 7b:a5:96:a0:24:be:67:90:95:ac:88:1d:93:94:36:80:e6:f8: 6f:9d:fb:bb:0a:76:19:0f:3f:7c:01:57:33:06:b1:33:b9:c8: f9:45:e0:c3:03:6b:87:67:3e:3f:84:3e:da:d0:52:1a:97:a5: c2:79:44:87:d8:f5:d5:4e:aa:2a:0b:b5:10:9b:ff:22:64:61: 51:88:b6:05:93:9a:1d:69:e8:24:ac:da:02:51:7b:81:ae:55: ac:41:26:97:a3:13:c4:5e:4b:41:9b:d1:8f:a8:ff:34:d5:30: 26:83:19:2b:55:6c:80:af:43:9f:9b:e4:a7:58:cc:c0:12:67: cb:93:8f:40:d5:a6:e7:4e:a1:51:a3:97:8a:80:56:7e:18:3c: 9a:be:18:bf:bb:64:d1:73:6e:d4:b5:d6:e3:c2:dd:6e:d5:97: 4e:f0:c0:6c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nl/521QXsFn65brAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2Y0ZWRjNzYtZmMwNS00NDQ3LWE2OTktNTQ1MGQ1ZTNhZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AfPtd4QMeQA1V/NaVb7oJPf6jzuVqlzpNEr hJVO/aMTpphpJN9bZShV0mTm1fiQBjmlK8ub0h1h5HvdJehzgRlfOmxtgo+T21Ve YB0vsMWHTX1UrjThL9GZMwwuNcO1+JK42zDJOezEBSgwis+pXvTXZWvsIe9s5ZeZ LB9+SlQL2UUqIneizDhskLFOIm1djD6rjBSfiR9Smomz0x26GSCcpUyjjPfp1P6K JrYLRl+lH0rVNyTT3m7dC11Gg3S69gijLEgftF0UNCxLkSnOBBWzVllQg/zRaxN8 UYfbKQBA4RVC4QgPzpgfhvHZHaFVG1Em/7D94vZDxw5x3U1kjQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN3xE3ikoBSRI0sn8oesKKOAcUMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmQzNTMwZmMtYWJhNC0z MGFhLWI1ZWUtNGNiNjdiNGU1MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOioniABTbd3RC44jAkmyf3/i5XFH9irxK 11WDz1VgFC8HiaMlO4ZJt4sPIx6Qp4BSrCpOIhpHomEkVtWBLPBfvfK2mzjgwzSf mSpFpNnRuU/IFt7MGhQ0UTV7pZagJL5nkJWsiB2TlDaA5vhvnfu7CnYZDz98AVcz BrEzucj5ReDDA2uHZz4/hD7a0FIal6XCeUSH2PXVTqoqC7UQm/8iZGFRiLYFk5od aegkrNoCUXuBrlWsQSaXoxPEXktBm9GPqP801TAmgxkrVWyAr0Ofm+SnWMzAEmfL k49A1abnTqFRo5eKgFZ+GDyavhi/u2TRc27Utdbjwt1u1ZdO8MBs -----END CERTIFICATE-----Generated at Wed Jul 29 11:17:18 2026 by rpki-client