$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa File: d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa (raw, json) Hash identifier: JrKJgF/s64THL3Cm9nZUpK6G64wo8v78vDNzVBxUGXw= Subject key identifier: 23:B0:67:7D:76:91:56:CF:37:79:B5:0C:CB:42:E2:56:09:CC:68:52 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584E9D4A75DB260243FC2D640248 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 62610 IP address blocks: 69.165.76.0/24 maxlen: 24 107.151.254.0/23 maxlen: 24 198.44.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:75:db:26:02:43:fc:2d:64:02:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=9b3d1eaf-9200-49c3-8567-d121c917b3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:39:c2:47:03:3e:40:46:a8:f7:fd:53:ed: 8f:cd:da:81:44:f3:f0:2f:61:b9:bc:11:f0:dd:6f: 3d:bf:a4:8a:f9:11:17:52:f7:4a:2c:c2:ab:42:57: 00:75:05:62:2b:cf:7b:0c:e1:71:59:2d:f7:b1:34: 78:14:5e:d7:fa:66:ad:67:08:cd:d2:e6:33:4e:10: 58:29:19:7b:7d:9c:29:b1:b9:b3:91:2e:2b:ce:65: 31:64:0f:17:83:85:c9:a5:88:b0:50:47:c2:f1:b1: 16:ae:7c:b8:5a:71:69:4b:2a:06:84:ca:12:85:d3: 74:eb:41:c0:74:de:c3:08:97:13:ed:55:88:3b:91: 26:51:54:85:d7:bc:ad:df:c4:6f:88:fb:dc:db:8b: 6f:9c:0c:d7:50:f8:9e:af:79:a6:92:a6:72:e6:10: cd:59:58:b4:6a:fd:96:c0:38:dd:2a:b8:4f:58:85: bf:58:16:79:81:7c:9d:34:72:9f:de:6a:3b:f3:2c: 45:9b:35:d5:56:34:67:1e:f8:a0:06:f9:fb:ed:66: 1f:a4:47:ac:11:fc:00:18:c6:f6:aa:81:89:59:d4: 91:16:50:2a:88:e2:33:39:a1:a7:9a:30:ac:71:6e: e9:89:bd:e3:91:8a:14:e6:df:e6:3b:52:7e:67:05: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:67:7D:76:91:56:CF:37:79:B5:0C:CB:42:E2:56:09:CC:68:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8de7eff-827e-384f-9dc6-c2fd02c4ee54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 69.165.76.0/24 107.151.254.0/23 198.44.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:28:7f:34:a0:4d:20:22:69:9c:1c:6c:1e:14:86:a1:b3:3e: 61:70:b7:79:ed:4f:b5:72:64:d2:49:fe:2a:7c:2b:30:60:7a: 2c:10:4d:48:66:3c:4c:a3:14:26:89:64:82:7c:8f:cf:a4:28: 07:bf:9e:75:59:74:06:ae:b6:cd:81:63:6e:85:99:8b:6c:12: 52:77:c8:bb:b1:02:17:33:7c:8d:73:17:f1:e0:ed:c3:2f:aa: c0:10:50:0e:24:bd:6e:a8:5e:35:63:18:43:18:cb:48:70:e8: 86:2c:98:dd:2f:42:10:d0:f9:8a:9f:d1:4b:b8:e4:43:e5:f3: d7:27:45:41:75:aa:1e:35:f8:b1:53:0a:fb:11:8b:2d:f3:8b: b4:71:68:38:f0:d5:b5:0e:75:ec:7c:9c:dd:b1:88:85:08:e6: 5e:71:2a:b2:78:24:99:be:d6:41:6a:41:4c:e2:5b:ee:25:21: 12:84:49:b8:86:5c:2c:f1:e0:65:93:6d:2a:e4:6e:8d:f5:a2: cc:28:40:25:be:4b:a3:5f:72:40:b3:9a:42:24:34:7d:7c:ab: 2d:23:cc:db:22:9b:f5:aa:b4:57:db:32:27:a0:20:42:a7:29: c6:7f:73:b6:a7:8e:b2:ff:cc:45:45:41:1b:99:da:28:5b:e5: 18:d4:43:4b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6dSnXbJgJD/C1kAkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk OWIzZDFlYWYtOTIwMC00OWMzLTg1NjctZDEyMWM5MTdiM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqo5wkcDPkBGqPf9U+2PzdqBRPPwL2G5vBHw 3W89v6SK+REXUvdKLMKrQlcAdQViK897DOFxWS33sTR4FF7X+matZwjN0uYzThBY KRl7fZwpsbmzkS4rzmUxZA8Xg4XJpYiwUEfC8bEWrny4WnFpSyoGhMoShdN060HA dN7DCJcT7VWIO5EmUVSF17yt38RviPvc24tvnAzXUPier3mmkqZy5hDNWVi0av2W wDjdKrhPWIW/WBZ5gXydNHKf3mo78yxFmzXVVjRnHvigBvn77WYfpEesEfwAGMb2 qoGJWdSRFlAqiOIzOaGnmjCscW7pib3jkYoU5t/mO1J+ZwX2KwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCOwZ312kVbPN3m1DMtC4lYJzGhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDhkZTdlZmYtODI3ZS0z ODRmLTlkYzYtYzJmZDAyYzRlZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQARaVMAwQB a5f+AwQAxiyrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGsofzSgTSAiaZwcbB4UhqGzPmFwt3ntT7VyZNJJ /ip8KzBgeiwQTUhmPEyjFCaJZIJ8j8+kKAe/nnVZdAauts2BY26FmYtsElJ3yLux AhczfI1zF/Hg7cMvqsAQUA4kvW6oXjVjGEMYy0hw6IYsmN0vQhDQ+Yqf0Uu45EPl 89cnRUF1qh41+LFTCvsRiy3zi7RxaDjw1bUOdex8nN2xiIUI5l5xKrJ4JJm+1kFq QUziW+4lIRKESbiGXCzx4GWTbSrkbo31oswoQCW+S6NfckCzmkIkNH18qy0jzNsi m/WqtFfbMiegIEKnKcZ/c7anjrL/zEVFQRuZ2ihb5RjUQ0s= -----END CERTIFICATE-----Generated at Tue Jul 28 23:30:09 2026 by rpki-client