$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa File: ff6512e2-8768-347b-b6de-54dce8a114a8.roa (raw, json) Hash identifier: FcKQKks22+kL4nMz/G+0NOxE5LvhPPxT+ND9CdJYPYc= Subject key identifier: 6A:5A:93:13:A8:E9:46:52:21:91:DB:30:80:BE:4A:57:5B:34:F3:03 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584EA2DFC72A73045D323C262E00 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 12083 IP address blocks: 208.74.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:c7:2a:73:04:5d:32:3c:26:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=87d16cd7-e9b3-4ad4-9b06-6d2d2363d97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7f:5a:91:a6:01:09:3d:b7:46:b0:96:5b:ad: d9:05:6a:f6:f2:fa:19:7d:18:8d:cb:fe:7e:1b:ff: 2c:20:37:67:05:69:d1:ed:98:4d:6c:a1:25:b5:51: c2:f8:85:ee:0f:8a:03:5d:f8:02:60:8f:cf:f0:cf: 4d:3a:1d:81:e3:47:ec:f3:f0:b7:61:ba:c1:29:0e: 26:76:4f:5f:ae:be:4d:80:b3:51:67:54:ab:85:ef: 86:11:c2:9e:6a:1d:1a:86:0d:4d:11:01:71:3d:43: a9:59:56:b6:a3:56:3e:6a:0f:d6:8a:68:c5:60:76: be:70:a0:4a:54:22:c5:b5:01:8f:1e:17:21:c5:9f: 2d:5d:7b:10:9a:25:63:12:84:44:2a:5c:66:0d:9e: bd:00:84:72:15:b5:39:3b:f4:79:8b:38:7e:44:ad: 52:3e:4d:c9:ac:51:55:ce:37:d1:2c:44:d2:50:b0: e8:a5:7e:99:dc:35:f4:55:01:2b:26:de:8c:72:f4: cb:79:88:5f:60:90:b7:57:6e:97:55:59:cb:cb:7e: 63:c4:3b:02:a1:5f:7f:34:7f:d6:d1:30:29:82:55: 06:c6:66:26:5e:dc:c2:19:d5:52:0d:ed:17:0b:66: ec:06:ba:d7:1a:f0:ba:bb:83:04:c3:1e:9f:c8:20: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5A:93:13:A8:E9:46:52:21:91:DB:30:80:BE:4A:57:5B:34:F3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 208.74.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3c:75:47:61:1b:cf:37:e9:1b:f0:05:42:3f:a5:e7:72:b0: 3c:40:90:7d:6f:e9:a5:c1:cf:21:3c:39:de:d0:d6:8f:8a:f4: 07:ec:b2:b2:d0:ec:84:09:b9:4f:d5:e0:ef:5e:64:77:52:b9: fe:ef:9b:32:c1:31:ed:08:80:b7:af:8c:da:53:09:29:e2:5b: ce:f0:b2:86:06:3f:5f:4f:33:e7:b1:e2:54:d6:d2:60:45:74: 49:e1:60:7f:94:c2:c9:b1:41:a2:80:63:95:75:c6:c6:29:a8: 24:18:66:a2:f9:06:f9:68:9c:40:6b:20:c5:b7:b3:20:4b:f9: 7c:ad:7c:d1:16:e5:7a:67:ca:49:41:2e:8e:64:8c:ea:df:36: ec:6c:06:84:16:23:08:75:f0:9c:fd:0a:3b:19:7d:01:b8:23: cf:cc:97:ae:cd:6b:7a:6f:d1:4e:da:7f:dd:95:9d:8d:b4:ca: 7d:4e:a2:a1:ff:29:51:d0:5f:42:ef:76:a4:58:5d:96:50:ac: eb:1a:ef:1d:5b:7f:b2:32:68:c7:d9:ee:33:f1:af:38:4c:2e: 2d:8f:4e:6b:5d:cf:14:ba:42:c7:27:2a:4e:be:c3:47:5d:b1: d5:b6:ad:a6:bc:fb:70:4e:a7:ae:c1:03:06:1b:1b:f6:65:8f: 76:13:bc:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38cqcwRdMjwmLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk ODdkMTZjZDctZTliMy00YWQ0LTliMDYtNmQyZDIzNjNkOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj39akaYBCT23RrCWW63ZBWr28voZfRiNy/5+ G/8sIDdnBWnR7ZhNbKEltVHC+IXuD4oDXfgCYI/P8M9NOh2B40fs8/C3YbrBKQ4m dk9frr5NgLNRZ1Srhe+GEcKeah0ahg1NEQFxPUOpWVa2o1Y+ag/WimjFYHa+cKBK VCLFtQGPHhchxZ8tXXsQmiVjEoREKlxmDZ69AIRyFbU5O/R5izh+RK1SPk3JrFFV zjfRLETSULDopX6Z3DX0VQErJt6McvTLeYhfYJC3V26XVVnLy35jxDsCoV9/NH/W 0TApglUGxmYmXtzCGdVSDe0XC2bsBrrXGvC6u4MEwx6fyCBh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpakxOo6UZSIZHbMIC+SldbNPMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZmY2NTEyZTItODc2OC0z NDdiLWI2ZGUtNTRkY2U4YTExNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs8dUdhG8836RvwBUI/pedysDxAkH1v6aXBzyE8Od7Q1o+K9AfssrLQ 7IQJuU/V4O9eZHdSuf7vmzLBMe0IgLevjNpTCSniW87wsoYGP19PM+ex4lTW0mBF dEnhYH+UwsmxQaKAY5V1xsYpqCQYZqL5BvlonEBrIMW3syBL+XytfNEW5XpnyklB Lo5kjOrfNuxsBoQWIwh18Jz9CjsZfQG4I8/Ml67Na3pv0U7af92VnY20yn1OoqH/ KVHQX0LvdqRYXZZQrOsa7x1bf7IyaMfZ7jPxrzhMLi2PTmtdzxS6QscnKk6+w0dd sdW2raa8+3BOp67BAwYbG/Zlj3YTvIE= -----END CERTIFICATE-----Generated at Tue Jul 28 21:57:30 2026 by rpki-client