$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/9a87db4a-c225-3e7d-bfd5-af3a608ad8c7.roa File: 9a87db4a-c225-3e7d-bfd5-af3a608ad8c7.roa (raw, json) Hash identifier: 9A1MvKScFn/6IPbHW4QsMCsKuAlQvFC6HlZlehWSmSQ= Subject key identifier: 3E:44:63:43:EE:A5:AD:04:13:75:FE:FF:C5:08:FC:A2:E6:6A:81:1C Certificate issuer: /CN=79ed687e-27f0-4e68-83d1-1811e64f1b28 Certificate serial: 010D0C9F4328584E9A7FAAD23C42A169B22B9538 Authority key identifier: C7:8C:29:37:61:DD:66:98:AF:4B:DC:E9:C9:B3:E1:A9:D4:5A:93:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/9a87db4a-c225-3e7d-bfd5-af3a608ad8c7.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 3361 IP address blocks: 173.225.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/79ed687e-27f0-4e68-83d1-1811e64f1b28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/79ed687e-27f0-4e68-83d1-1811e64f1b28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:aa:d2:3c:42:a1:69:b2:2b:95:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79ed687e-27f0-4e68-83d1-1811e64f1b28 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=cdc682fe-adb0-462d-8ef6-4004092d2b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7d:b7:55:76:50:54:7d:f4:c1:9f:d1:93:b0: 79:be:55:d5:03:00:f2:f0:77:ba:80:c4:68:e4:a1: ca:59:c4:93:d8:58:dc:37:d9:c7:1d:74:6a:5b:fd: 90:8b:78:1f:df:24:e7:ed:51:4e:65:09:2a:08:59: c0:7b:28:11:0b:0d:cc:28:e1:4c:f1:41:88:b4:84: 72:4e:11:65:dd:b2:ee:d1:aa:a7:4a:ab:10:d0:c3: 6d:69:f3:ef:ef:90:01:3f:a8:d3:49:87:d5:ce:99: 4c:46:e1:7c:a2:ca:e4:38:8b:ed:e3:e8:e9:0b:45: b4:79:7d:17:24:00:22:fa:ac:e9:b4:c7:db:84:81: 8e:2e:48:85:3c:74:59:82:04:42:c7:4b:62:46:98: d0:b4:9e:90:6e:21:97:cf:0f:37:0a:3b:e0:d6:41: cb:b4:8e:62:69:e1:15:89:b9:b7:7b:25:61:da:40: 6f:4e:90:ce:23:e5:f3:09:0e:ed:0a:25:b1:9e:a9: 15:48:70:03:cb:fb:fd:1e:4a:5f:d4:9b:ff:98:a0: de:eb:0e:fb:6a:46:97:14:42:d5:98:01:fa:74:47: 62:ce:23:ec:d8:6e:e5:ab:65:9e:c1:a7:87:16:ff: 0c:eb:b2:8f:59:36:3c:f7:5e:a9:ee:8f:14:df:06: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:44:63:43:EE:A5:AD:04:13:75:FE:FF:C5:08:FC:A2:E6:6A:81:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/9a87db4a-c225-3e7d-bfd5-af3a608ad8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/79ed687e-27f0-4e68-83d1-1811e64f1b28.crl X509v3 Authority Key Identifier: keyid:C7:8C:29:37:61:DD:66:98:AF:4B:DC:E9:C9:B3:E1:A9:D4:5A:93:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28.cer sbgp-ipAddrBlock: critical IPv4: 173.225.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:a3:0d:5d:5e:43:8b:17:2c:4d:7e:cf:bd:f3:a5:41:9b:e5: a1:7b:17:68:67:bf:1f:11:83:ad:a0:98:1f:0e:a5:6c:8c:33: ee:a8:01:d2:c1:5a:cf:ec:47:15:0e:f8:01:5e:06:23:70:92: 7a:77:9f:a4:68:e5:9c:55:76:21:d9:6b:cf:5f:5b:5e:df:17: 68:d9:d1:2e:1a:61:ba:bb:1b:9c:43:3f:d3:02:83:4c:55:fe: 8a:42:e8:76:85:83:df:10:b5:0a:22:33:98:61:11:8f:3e:c1: 87:68:b8:4a:16:83:d8:93:b5:de:b2:48:f0:c4:1e:64:30:5d: ce:ea:52:48:d9:b7:cc:6f:c0:53:ea:7f:2a:f6:fd:ab:a1:a5: f4:fc:ae:a4:52:0b:00:80:7b:0f:41:a8:2c:f9:5e:f9:df:b9: 36:1d:ec:db:4b:d8:0c:b6:a2:e3:fc:47:37:45:dc:e5:05:cc: 56:ba:ed:01:78:b7:19:2c:84:33:e1:11:29:6d:b9:6f:3d:38: 32:af:1d:a7:85:7c:10:56:4d:1a:fe:26:e1:9f:a4:56:e2:e2: c5:f1:66:a1:0c:4e:df:a5:4d:ee:23:93:8e:d4:08:b8:09:87: 24:ac:ec:23:8d:45:7f:8d:c2:de:98:3b:2d:01:89:06:36:b8: bc:f2:a7:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af6rSPEKhabIrlTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzllZDY4N2UtMjdmMC00ZTY4LTgzZDEtMTgxMWU2NGYx YjI4MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk Y2RjNjgyZmUtYWRiMC00NjJkLThlZjYtNDAwNDA5MmQyYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n23VXZQVH30wZ/Rk7B5vlXVAwDy8He6gMRo 5KHKWcST2FjcN9nHHXRqW/2Qi3gf3yTn7VFOZQkqCFnAeygRCw3MKOFM8UGItIRy ThFl3bLu0aqnSqsQ0MNtafPv75ABP6jTSYfVzplMRuF8osrkOIvt4+jpC0W0eX0X JAAi+qzptMfbhIGOLkiFPHRZggRCx0tiRpjQtJ6QbiGXzw83Cjvg1kHLtI5iaeEV ibm3eyVh2kBvTpDOI+XzCQ7tCiWxnqkVSHADy/v9Hkpf1Jv/mKDe6w77akaXFELV mAH6dEdiziPs2G7lq2WewaeHFv8M67KPWTY8916p7o8U3waGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5EY0Pupa0EE3X+/8UI/KLmaoEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83OWVk Njg3ZS0yN2YwLTRlNjgtODNkMS0xODExZTY0ZjFiMjgvOWE4N2RiNGEtYzIyNS0z ZTdkLWJmZDUtYWYzYTYwOGFkOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzllZDY4N2UtMjdmMC00ZTY4LTgz ZDEtMTgxMWU2NGYxYjI4Lzc5ZWQ2ODdlLTI3ZjAtNGU2OC04M2QxLTE4MTFlNjRm MWIyOC5jcmwwHwYDVR0jBBgwFoAUx4wpN2HdZpivS9zpybPhqdRak5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83OWVkNjg3ZS0yN2YwLTRlNjgtODNkMS0xODEx ZTY0ZjFiMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOjDV1eQ4sXLE1+z73zpUGb5aF7F2hnvx8Rg62gmB8OpWyMM+6oAdLB Ws/sRxUO+AFeBiNwknp3n6Ro5ZxVdiHZa89fW17fF2jZ0S4aYbq7G5xDP9MCg0xV /opC6HaFg98QtQoiM5hhEY8+wYdouEoWg9iTtd6ySPDEHmQwXc7qUkjZt8xvwFPq fyr2/auhpfT8rqRSCwCAew9BqCz5XvnfuTYd7NtL2Ay2ouP8RzdF3OUFzFa67QF4 txkshDPhESltuW89ODKvHaeFfBBWTRr+JuGfpFbi4sXxZqEMTt+lTe4jk47UCLgJ hySs7CONRX+Nwt6YOy0BiQY2uLzypzg= -----END CERTIFICATE-----Generated at Wed Jul 29 12:04:14 2026 by rpki-client