$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/87e72f4e-fc53-35f0-bac7-94e575b586a5.roa File: 87e72f4e-fc53-35f0-bac7-94e575b586a5.roa (raw, json) Hash identifier: u7xfhYXQCWJVqMP4TTO1Vi3JGCoqO4kSfVbOPgAR3AU= Subject key identifier: 4A:79:4A:77:16:0B:49:26:4F:97:BA:7D:99:FF:AC:DF:1D:68:4B:7D Certificate issuer: /CN=41911571-6038-4a97-80ce-9611c78f050e Certificate serial: 010D0C9F4328584EA7879BCE041EB939EE38C200 Authority key identifier: DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/87e72f4e-fc53-35f0-bac7-94e575b586a5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33574 IP address blocks: 64.255.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:9b:ce:04:1e:b9:39:ee:38:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41911571-6038-4a97-80ce-9611c78f050e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=156c9a4f-3ea1-4fd2-b589-caec8092095f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:1e:6b:fe:a2:7e:d7:28:6a:8b:f7:29:3b: be:ab:9d:00:2a:12:8a:5d:34:e0:65:d8:1b:10:89: f3:8a:3a:48:1c:e3:8c:f8:55:c3:8d:0e:0c:7e:31: ae:a0:61:6c:36:fb:63:5b:08:36:b3:b2:9f:aa:c5: 7a:43:de:a8:d0:e1:14:b6:e8:55:7d:b3:fa:ec:d7: 17:76:32:b1:cf:3f:10:8d:d0:ab:42:17:87:45:bc: c4:bd:de:59:70:ef:fc:f8:d4:ce:ff:ce:d3:8f:21: 0f:ac:1e:a6:f3:f4:be:d8:85:7b:8a:56:76:be:9b: 33:a0:29:bc:3c:d2:3f:ab:41:2f:1c:4b:2f:e2:40: ce:9b:78:0d:ba:b1:4b:b0:b3:67:08:9e:87:74:08: 3d:0c:c3:24:cf:ea:e2:a5:88:f9:4f:29:b6:6f:ef: ee:85:71:9c:99:69:5c:a6:cf:ca:f6:2f:80:97:37: 66:05:5b:2b:c3:69:fb:50:53:be:85:cf:f6:e1:2d: 63:ee:08:0e:ab:1d:83:9f:08:02:81:1a:05:ec:9f: d7:6c:a7:25:60:ef:8e:15:3b:06:da:54:1b:fc:92: 09:2a:31:1a:26:79:77:77:eb:c1:05:db:cc:1b:03: ab:2a:03:5b:65:ca:f1:c3:64:dc:38:e6:4e:4f:82: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:79:4A:77:16:0B:49:26:4F:97:BA:7D:99:FF:AC:DF:1D:68:4B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/87e72f4e-fc53-35f0-bac7-94e575b586a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl X509v3 Authority Key Identifier: keyid:DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer sbgp-ipAddrBlock: critical IPv4: 64.255.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:68:49:37:71:c5:8e:91:3b:d5:11:7c:bb:72:16:ea:87:53: 0f:0b:68:e3:fc:87:d4:bc:fb:0c:fc:30:8e:6c:02:81:16:a4: f9:d1:16:e9:cb:93:22:6a:ea:2d:09:95:04:ee:1b:e1:05:db: 9b:d2:3b:ac:c9:78:4e:9b:eb:4f:e9:ab:d4:22:e3:88:92:43: 53:8f:f2:25:d1:33:52:f8:fa:2f:5f:6f:e6:49:21:9f:d9:5a: 76:e7:a2:77:f6:7d:0d:a6:6a:45:44:e0:08:c3:2e:2a:ae:08: 58:5e:39:15:f8:77:b8:75:ef:bb:1f:d9:5d:08:30:54:c2:99: 1f:e5:fa:61:22:e7:81:5e:7b:92:ca:94:f9:a5:e0:b5:3d:a4: ae:ab:af:f4:d8:0f:58:99:8e:38:61:26:c5:b4:19:6e:63:c6: d8:13:bf:6e:92:21:c4:b4:64:86:a9:20:1c:d8:35:9a:90:00: 60:e4:b0:d2:57:6d:82:33:27:54:96:d5:4e:a0:3b:a9:3b:d3: 21:09:1f:1d:4a:11:9c:d4:58:1b:75:bc:5e:a4:53:f9:b1:03: f4:ed:4d:8b:5e:9f:9e:63:30:41:98:66:e1:64:b5:13:ac:b4: 48:8e:89:5c:ed:41:3f:cf:34:f6:ac:56:e3:8f:a3:61:b2:09: 96:78:4a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5vOBB65Oe44wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE5MTE1NzEtNjAzOC00YTk3LTgwY2UtOTYxMWM3OGYw NTBlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTU2YzlhNGYtM2VhMS00ZmQyLWI1ODktY2FlYzgwOTIwOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNIea/6iftcoaov3KTu+q50AKhKKXTTgZdgb EInzijpIHOOM+FXDjQ4MfjGuoGFsNvtjWwg2s7KfqsV6Q96o0OEUtuhVfbP67NcX djKxzz8QjdCrQheHRbzEvd5ZcO/8+NTO/87TjyEPrB6m8/S+2IV7ilZ2vpszoCm8 PNI/q0EvHEsv4kDOm3gNurFLsLNnCJ6HdAg9DMMkz+ripYj5Tym2b+/uhXGcmWlc ps/K9i+AlzdmBVsrw2n7UFO+hc/24S1j7ggOqx2DnwgCgRoF7J/XbKclYO+OFTsG 2lQb/JIJKjEaJnl3d+vBBdvMGwOrKgNbZcrxw2TcOOZOT4LW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp5SncWC0kmT5e6fZn/rN8daEt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MTkx MTU3MS02MDM4LTRhOTctODBjZS05NjExYzc4ZjA1MGUvODdlNzJmNGUtZmM1My0z NWYwLWJhYzctOTRlNTc1YjU4NmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDE5MTE1NzEtNjAzOC00YTk3LTgw Y2UtOTYxMWM3OGYwNTBlLzQxOTExNTcxLTYwMzgtNGE5Ny04MGNlLTk2MTFjNzhm MDUwZS5jcmwwHwYDVR0jBBgwFoAU33DVtIgKccACLNhbw5BI3v+bU2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MTkxMTU3MS02MDM4LTRhOTctODBjZS05NjEx Yzc4ZjA1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQP/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdoSTdxxY6RO9URfLtyFuqHUw8LaOP8h9S8+wz8MI5sAoEWpPnRFunL kyJq6i0JlQTuG+EF25vSO6zJeE6b60/pq9Qi44iSQ1OP8iXRM1L4+i9fb+ZJIZ/Z Wnbnonf2fQ2makVE4AjDLiquCFheORX4d7h177sf2V0IMFTCmR/l+mEi54Fee5LK lPml4LU9pK6rr/TYD1iZjjhhJsW0GW5jxtgTv26SIcS0ZIapIBzYNZqQAGDksNJX bYIzJ1SW1U6gO6k70yEJHx1KEZzUWBt1vF6kU/mxA/TtTYten55jMEGYZuFktROs tEiOiVztQT/PNPasVuOPo2GyCZZ4Sns= -----END CERTIFICATE-----Generated at Wed Jul 29 06:29:23 2026 by rpki-client