$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa File: 5a606c85-561e-306f-971c-7cb0a887d723.roa (raw, json) Hash identifier: oJmdCQ1czzpm1tOaCIzxiO9we4SeX5WKnRmOGK3EuhI= Subject key identifier: 41:A6:0D:58:50:CD:C4:A6:9E:E5:5C:57:37:F6:A7:39:F6:54:68:1D Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584EA7889858698E78B9702CC0A0 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 5377 IP address blocks: 216.9.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:98:58:69:8e:78:b9:70:2c:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d65b17f0-4ace-4fa6-935f-66cdf144a6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:bd:14:83:be:3e:10:9c:36:a9:6f:89:3d: 4f:1c:4d:9e:01:fa:22:09:92:58:ce:f8:ef:9f:ca: e6:93:94:fe:c9:22:c1:bb:87:b3:5d:c2:42:61:42: 24:73:1f:06:de:e9:d0:7c:92:48:17:d8:db:de:7b: 5d:73:2f:95:09:84:32:e2:30:4f:b4:08:db:31:fe: ab:b9:c8:c8:65:c5:8b:8c:5e:72:33:a6:37:5f:c6: 6c:72:d1:6d:bf:28:52:09:2a:9f:b8:0f:02:40:70: c7:76:25:d3:ae:fe:74:90:98:2d:4e:0d:3b:5a:01: 12:39:d8:44:81:df:ed:f6:48:26:a2:6a:da:c3:d1: 51:dc:eb:e6:8f:6a:ed:fe:8c:b5:fc:ef:82:2a:d2: 39:f0:f3:18:6a:24:5e:f3:b4:06:33:b6:b4:1b:68: 72:d0:6e:54:8a:71:51:91:2d:c4:17:f4:54:48:21: 36:c9:2e:2c:0e:d2:5a:d2:94:1d:b7:dc:4b:c5:67: 5e:35:98:c8:c1:95:3d:c7:da:0f:05:88:a7:31:61: c3:87:70:bf:43:16:89:22:a2:db:54:be:92:b2:7f: 7c:20:49:2b:32:f3:6d:26:d9:dc:78:3d:86:2b:13: f5:d4:79:7e:2f:1c:18:58:3d:3a:6c:85:80:62:14: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:0D:58:50:CD:C4:A6:9E:E5:5C:57:37:F6:A7:39:F6:54:68:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 216.9.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:13:5d:77:dc:be:43:60:db:5f:89:0d:ae:c6:f3:45:bb:25: 29:e5:5c:83:4a:ab:38:c9:29:48:0d:31:69:90:03:7a:c6:4f: b0:ac:21:ec:8e:2d:cb:03:89:df:54:df:81:b8:f4:6a:ed:59: 8a:08:9a:97:67:0d:e4:33:32:7f:7d:73:33:dc:3b:ac:42:d9: f7:07:ff:43:20:db:76:58:bf:1d:cd:7e:6a:a7:4a:0c:34:f4: 76:d7:16:1f:06:99:99:b8:e5:06:75:30:40:ca:01:e0:2a:4e: d7:79:bc:03:23:98:fe:3f:92:e6:af:2b:90:a9:c4:ce:3d:68: 33:78:f1:19:75:4c:d4:51:72:01:85:be:61:df:f9:43:9f:f6: 30:de:73:56:d5:bf:da:28:ef:e3:b2:9c:41:74:9a:a8:b7:8f: 0f:37:e8:04:1c:4f:af:22:d2:a1:4d:67:b4:d6:f8:60:35:6e: dc:1f:1b:b8:7d:85:f3:c7:6c:cc:45:49:e1:d0:8c:ce:6a:e6: f6:87:04:74:3b:b0:c7:ba:4c:03:a6:22:03:e9:8a:ed:b2:f1: 0a:15:f2:de:22:41:f8:36:47:d1:6e:10:33:df:a1:3c:88:11: bd:fd:47:bf:64:17:75:60:fd:de:56:d4:fe:62:0c:87:fb:b1: ec:49:bb:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJhYaY54uXAswKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDY1YjE3ZjAtNGFjZS00ZmE2LTkzNWYtNjZjZGYxNDRhNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOG9FIO+PhCcNqlviT1PHE2eAfoiCZJYzvjv n8rmk5T+ySLBu4ezXcJCYUIkcx8G3unQfJJIF9jb3ntdcy+VCYQy4jBPtAjbMf6r ucjIZcWLjF5yM6Y3X8ZsctFtvyhSCSqfuA8CQHDHdiXTrv50kJgtTg07WgESOdhE gd/t9kgmomraw9FR3Ovmj2rt/oy1/O+CKtI58PMYaiRe87QGM7a0G2hy0G5UinFR kS3EF/RUSCE2yS4sDtJa0pQdt9xLxWdeNZjIwZU9x9oPBYinMWHDh3C/QxaJIqLb VL6Ssn98IEkrMvNtJtnceD2GKxP11Hl+LxwYWD06bIWAYhQISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGmDVhQzcSmnuVcVzf2pzn2VGgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvNWE2MDZjODUtNTYxZS0z MDZmLTk3MWMtN2NiMGE4ODdkNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4TXXfcvkNg21+JDa7G80W7JSnlXINKqzjJKUgNMWmQA3rGT7CsIeyO LcsDid9U34G49GrtWYoImpdnDeQzMn99czPcO6xC2fcH/0Mg23ZYvx3NfmqnSgw0 9HbXFh8GmZm45QZ1MEDKAeAqTtd5vAMjmP4/kuavK5CpxM49aDN48Rl1TNRRcgGF vmHf+UOf9jDec1bVv9oo7+OynEF0mqi3jw836AQcT68i0qFNZ7TW+GA1btwfG7h9 hfPHbMxFSeHQjM5q5vaHBHQ7sMe6TAOmIgPpiu2y8QoV8t4iQfg2R9FuEDPfoTyI Eb39R79kF3Vg/d5W1P5iDIf7sexJu+Y= -----END CERTIFICATE-----Generated at Wed Jul 29 09:50:46 2026 by rpki-client