$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/47952d11-1499-36e4-bd1b-cccf5890c931.roa File: 47952d11-1499-36e4-bd1b-cccf5890c931.roa (raw, json) Hash identifier: k9MKHBvfL1Z3UmsAXKYz7xVh9mAAQwMU1IxDYNGN05E= Subject key identifier: 30:D8:47:29:E6:C9:B1:D1:08:63:A1:D8:28:F8:5C:56:B6:0C:C5:D6 Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584EA788A55FF39BF40CD46B9280 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/47952d11-1499-36e4-bd1b-cccf5890c931.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14537 IP address blocks: 162.223.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a5:5f:f3:9b:f4:0c:d4:6b:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8879c8d8-4911-4bc5-8c61-ccb9287e10e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:7b:00:81:1b:56:94:34:03:d1:1e:1d:6e: 8b:8b:0e:a4:fd:57:6c:81:33:3b:0b:bd:6d:ac:46: a7:c4:d8:ff:49:47:2b:94:6a:3b:30:86:59:cb:cf: 4d:be:b7:8d:e0:52:fc:62:75:17:16:72:95:08:17: a5:e1:6c:aa:08:11:b1:41:bd:44:40:74:7c:45:89: ea:42:e9:0c:e2:cc:21:93:48:f5:dd:32:57:c9:e4: f2:1f:31:25:ee:d2:bc:9c:7d:a6:65:f6:1a:81:bd: 56:b2:bb:e2:c3:93:39:2d:af:7a:a7:fb:d1:41:ef: d8:2d:46:c3:5e:a3:99:0a:e0:8e:53:0b:20:82:f7: a2:8a:8e:ce:6e:43:ee:22:a9:28:0b:3e:91:40:98: 61:29:ae:8e:20:50:f8:a1:03:3e:0b:09:e1:d6:0b: 90:18:29:08:19:7e:80:48:11:97:e8:48:8c:43:a9: 64:62:d8:5f:86:93:bb:26:bc:19:4a:28:2b:05:ce: 05:0b:26:c3:09:81:91:a5:93:79:1a:8d:b9:72:a6: 25:53:59:24:44:7e:be:20:f1:56:9b:9b:28:33:1f: 3a:53:d5:6a:93:e9:ad:54:1f:9b:1f:48:df:0b:d8: 94:11:7a:e3:00:c4:b8:28:f1:0f:54:dd:d6:3c:90: 35:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:47:29:E6:C9:B1:D1:08:63:A1:D8:28:F8:5C:56:B6:0C:C5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/47952d11-1499-36e4-bd1b-cccf5890c931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 162.223.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0f:0d:1f:89:b6:9f:bb:3f:08:f3:7c:01:d9:d8:e7:a8:98: 10:ee:39:c7:5a:0a:5a:ae:66:d7:b5:50:b4:a0:49:36:cf:c3: d5:9f:bf:6f:9f:a5:06:a1:cf:d3:5e:45:39:c6:ee:4a:6f:b5: e3:b3:53:c1:6e:97:04:08:f0:2c:d1:58:e2:8b:a4:31:67:28: a8:4e:b6:b2:46:f2:de:38:72:28:b1:73:8f:6a:25:9d:ae:a8: b6:2a:b5:63:8c:1a:86:92:74:88:cb:ce:42:20:3a:49:4f:fd: f2:a6:5a:f9:c4:f5:93:02:28:2b:cf:52:51:0a:d7:cb:c3:09: bd:71:12:b2:e5:38:7c:ef:e7:5d:a3:67:71:54:d2:2e:f7:a5: 49:6e:6b:2d:8a:1a:09:b6:1f:a1:8d:4f:d3:b5:55:2e:1b:a1: 90:64:f6:c8:a7:61:4b:7b:0f:5e:97:d4:21:55:ea:ab:3f:7f: fa:74:6b:9c:ee:6e:2b:97:74:01:59:1e:6e:aa:87:b8:99:d1: 40:df:55:55:eb:00:aa:27:12:63:3f:c2:e4:9f:98:87:e7:2f: f5:82:20:6b:be:92:ab:38:e2:3c:94:ae:88:4c:e2:e9:11:cb: 1c:0a:69:61:ad:6d:13:14:25:5d:44:eb:ff:3e:b0:45:de:2e: 57:74:01:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKVf85v0DNRrkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODg3OWM4ZDgtNDkxMS00YmM1LThjNjEtY2NiOTI4N2UxMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qB7AIEbVpQ0A9EeHW6Liw6k/VdsgTM7C71t rEanxNj/SUcrlGo7MIZZy89NvreN4FL8YnUXFnKVCBel4WyqCBGxQb1EQHR8RYnq QukM4swhk0j13TJXyeTyHzEl7tK8nH2mZfYagb1Wsrviw5M5La96p/vRQe/YLUbD XqOZCuCOUwsggveiio7ObkPuIqkoCz6RQJhhKa6OIFD4oQM+Cwnh1guQGCkIGX6A SBGX6EiMQ6lkYthfhpO7JrwZSigrBc4FCybDCYGRpZN5Go25cqYlU1kkRH6+IPFW m5soMx86U9Vqk+mtVB+bH0jfC9iUEXrjAMS4KPEPVN3WPJA11wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDYRynmybHRCGOh2Cj4XFa2DMXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvNDc5NTJkMTEtMTQ5OS0z NmU0LWJkMWItY2NjZjU4OTBjOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDot9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8PDR+Jtp+7PwjzfAHZ2OeomBDuOcdaClquZte1ULSgSTbPw9Wfv2+f pQahz9NeRTnG7kpvteOzU8FulwQI8CzRWOKLpDFnKKhOtrJG8t44ciixc49qJZ2u qLYqtWOMGoaSdIjLzkIgOklP/fKmWvnE9ZMCKCvPUlEK18vDCb1xErLlOHzv512j Z3FU0i73pUluay2KGgm2H6GNT9O1VS4boZBk9sinYUt7D16X1CFV6qs/f/p0a5zu biuXdAFZHm6qh7iZ0UDfVVXrAKonEmM/wuSfmIfnL/WCIGu+kqs44jyUrohM4ukR yxwKaWGtbRMUJV1E6/8+sEXeLld0AS8= -----END CERTIFICATE-----Generated at Wed Jul 29 09:17:14 2026 by rpki-client