$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa File: 5d7ba423-e931-3576-a682-7ef77298c323.roa (raw, json) Hash identifier: D+8Alg6QkHORhMVe/TOV+BxqRXGDfzWtlRaXq3w4T90= Subject key identifier: 5D:26:3D:5F:CA:12:2A:5F:F4:29:C4:92:F4:35:62:EB:95:12:AA:29 Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F4328584E9BE5144FB467D0D8FE049E80 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 40788 IP address blocks: 192.64.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:14:4f:b4:67:d0:d8:fe:04:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=13876fd3-8f96-485f-906a-ea8894146e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:08:d7:25:cb:12:94:c1:4f:05:69:20:8a: 48:81:c7:0d:60:bc:61:36:6d:af:8b:54:35:e6:90: 64:b9:46:06:ee:ea:89:b5:53:e0:da:ce:2f:ab:3c: fd:c0:1e:02:37:0a:f3:d0:b1:8f:30:95:8d:e5:fa: 1a:4c:be:9b:67:9c:d3:26:cf:51:35:16:92:2e:67: 36:bf:93:76:5a:5b:d4:31:04:ef:65:39:56:00:45: 7f:ca:59:b8:2a:a1:92:5e:75:23:b4:32:f9:ab:c6: ab:6d:8e:35:8d:4c:50:71:f8:57:16:69:a0:88:fc: a4:31:5c:9e:b9:c6:d5:77:39:f4:ed:0e:62:f2:42: 5a:17:54:1e:6e:92:b0:41:6f:90:0d:be:3e:56:4c: 02:78:b6:d9:bd:d1:01:fa:45:60:2e:0b:ac:8c:10: 0a:95:c4:59:2b:11:64:dd:57:44:1c:5c:1d:1f:9a: 53:a4:83:5f:a0:e7:a2:60:40:6e:d1:67:91:8c:3b: 16:6d:f3:e2:4f:ee:3a:75:9c:c6:4f:38:20:20:8f: 99:4f:97:fc:8a:77:21:79:05:c8:e3:43:f7:1c:d9: b5:03:da:fb:03:76:57:7b:f3:06:10:b3:43:19:1e: 53:2d:31:c7:c5:36:1e:bd:53:c4:c6:34:80:33:c2: 4a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:26:3D:5F:CA:12:2A:5F:F4:29:C4:92:F4:35:62:EB:95:12:AA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 192.64.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a2:61:23:3d:b4:e2:2e:5b:50:a0:38:6c:26:d5:84:3b:b5: 4c:b8:52:44:58:33:99:09:17:b7:64:b3:09:71:d7:a6:aa:73: ae:51:2d:b8:3a:18:d3:e6:e0:fe:9c:de:7d:d4:f7:d9:34:6b: 6c:4f:46:12:f0:1f:57:58:f7:01:67:33:6d:bd:f5:56:9b:06: 9e:e3:c8:9c:86:c3:67:2f:f5:61:b6:4d:94:32:86:84:68:da: e6:97:19:91:e0:00:a6:6a:e8:7d:1c:5f:81:6c:c5:77:9e:32: 96:46:96:44:dd:1f:70:4c:6d:80:92:90:28:74:ae:86:80:09: 21:9b:65:e5:cd:05:d7:0f:a9:b3:11:df:ad:8f:9a:65:80:34: 24:f5:fd:6f:e5:f5:b1:85:50:b2:3f:a4:24:04:c2:c2:9c:16: 1e:ba:cd:3b:21:26:bf:0e:04:38:87:75:58:9a:5e:bf:c9:8f: 6d:57:af:a3:ca:40:4b:94:58:e9:91:6c:6a:9d:d7:36:d1:9a: 55:e6:b3:bc:d6:81:43:e7:ef:d6:03:e7:e6:df:2b:6a:88:a5: c3:a2:8f:47:05:77:59:3a:2b:83:0d:35:b7:33:c9:10:95:0d: c1:0f:43:bc:22:91:e4:32:a3:6d:dc:7c:d7:f1:28:3b:8e:89: 74:4d:46:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RRPtGfQ2P4EnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk MTM4NzZmZDMtOGY5Ni00ODVmLTkwNmEtZWE4ODk0MTQ2ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBII1yXLEpTBTwVpIIpIgccNYLxhNm2vi1Q1 5pBkuUYG7uqJtVPg2s4vqzz9wB4CNwrz0LGPMJWN5foaTL6bZ5zTJs9RNRaSLmc2 v5N2WlvUMQTvZTlWAEV/ylm4KqGSXnUjtDL5q8arbY41jUxQcfhXFmmgiPykMVye ucbVdzn07Q5i8kJaF1QebpKwQW+QDb4+VkwCeLbZvdEB+kVgLgusjBAKlcRZKxFk 3VdEHFwdH5pTpINfoOeiYEBu0WeRjDsWbfPiT+46dZzGTzggII+ZT5f8incheQXI 40P3HNm1A9r7A3ZXe/MGELNDGR5TLTHHxTYevVPExjSAM8JKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0mPV/KEipf9CnEkvQ1YuuVEqopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvNWQ3YmE0MjMtZTkzMS0z NTc2LWE2ODItN2VmNzcyOThjMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwEAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGiYSM9tOIuW1CgOGwm1YQ7tUy4UkRYM5kJF7dkswlx16aqc65RLbg6 GNPm4P6c3n3U99k0a2xPRhLwH1dY9wFnM2299VabBp7jyJyGw2cv9WG2TZQyhoRo 2uaXGZHgAKZq6H0cX4FsxXeeMpZGlkTdH3BMbYCSkCh0roaACSGbZeXNBdcPqbMR 362PmmWANCT1/W/l9bGFULI/pCQEwsKcFh66zTshJr8OBDiHdViaXr/Jj21Xr6PK QEuUWOmRbGqd1zbRmlXms7zWgUPn79YD5+bfK2qIpcOij0cFd1k6K4MNNbczyRCV DcEPQ7wikeQyo23cfNfxKDuOiXRNRvk= -----END CERTIFICATE-----Generated at Tue Jul 28 23:38:58 2026 by rpki-client