$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/25222783-7964-3c18-9dc0-791c219e1498.roa File: 25222783-7964-3c18-9dc0-791c219e1498.roa (raw, json) Hash identifier: NEgSj5pSVSLRUkcmQQupaI9CQoe/nxG48LiqIkOKdO8= Subject key identifier: EB:5C:B6:22:52:BA:16:E6:BE:38:F8:65:45:8C:E3:C5:AC:34:D8:AA Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA7940BFBD1BB3126A0EFA900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/25222783-7964-3c18-9dc0-791c219e1498.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22457 IP address blocks: 216.123.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:0b:fb:d1:bb:31:26:a0:ef:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8856acbd-e38b-4cb9-a4ca-d2a804b09edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:76:a2:2b:84:f1:c8:83:4c:df:90:29:89: 00:a4:4a:27:40:6c:4f:11:7d:db:21:af:d3:62:84: c4:35:69:0c:58:10:bf:7c:9d:0a:ab:bb:80:83:5f: 17:b0:0b:f2:e1:9b:fd:d0:83:29:9c:ad:1d:dd:41: 54:62:5d:a8:f1:57:ba:cd:c6:b4:cb:93:b7:2f:3b: 00:2a:27:44:8c:e0:3a:44:f0:dd:02:1a:30:61:c0: 17:76:7e:d5:93:ca:49:22:24:fc:c0:fe:e0:6e:64: 5d:91:59:74:5a:a4:74:28:51:3c:a4:43:b1:8c:8c: 7c:7a:9e:df:97:84:d3:d0:76:af:59:47:ad:22:9a: 21:a1:93:00:d8:10:51:f4:14:5d:25:d4:5f:f4:22: 25:1e:52:10:fa:7b:08:80:0c:3c:b3:cb:c4:de:1a: c4:fa:cc:16:7d:9c:ea:97:1d:f0:a7:ce:d5:4f:af: 33:28:e5:e0:78:a7:71:6a:5d:dd:a9:d8:0f:c6:ac: 99:44:c1:24:4b:77:51:62:5f:d9:e7:93:50:6a:73: 2d:ce:81:75:a8:ac:9b:28:e5:a7:ef:38:56:72:0e: 7a:9f:c1:3e:bd:54:6e:e6:11:01:70:dd:7c:6d:a6: fe:42:fc:73:27:e1:a1:d8:38:aa:d3:77:cb:81:09: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5C:B6:22:52:BA:16:E6:BE:38:F8:65:45:8C:E3:C5:AC:34:D8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/25222783-7964-3c18-9dc0-791c219e1498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.123.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:02:f3:33:c5:eb:81:39:be:c2:be:74:88:15:9d:00:74:5e: da:eb:46:46:07:a0:4a:ec:5d:8e:71:d3:cb:ca:47:11:2e:d4: b3:90:68:54:ff:a9:e5:2d:8b:72:90:cb:ac:87:eb:ee:2a:94: 99:87:85:63:cd:54:32:81:df:2d:26:b5:04:97:9d:45:67:3d: e4:e5:7c:9f:fc:b1:46:2b:22:f0:b1:20:32:10:96:0e:b8:5a: 57:ed:40:02:46:14:75:36:40:2a:79:a2:6e:87:b6:70:15:5e: e6:fe:ed:80:c3:d0:b7:2f:d9:dc:2a:a6:ee:a6:ca:7d:31:60: 5c:d9:56:5e:92:b1:77:83:ea:06:56:66:75:13:1b:d3:5f:c7: 1a:f9:1a:f8:82:6f:f0:2e:17:d8:eb:26:45:5b:60:84:43:82: 83:78:1f:f4:de:39:5c:18:83:02:f5:b5:7a:cc:4d:f6:0c:9f: 0e:d0:4f:2f:70:d5:9a:c5:51:5d:a1:d3:a4:06:80:e4:f9:09: c6:ef:99:95:21:0d:49:25:10:01:15:99:85:2d:70:a3:fc:63: d4:04:02:c5:77:26:b7:43:b3:96:c0:ad:36:f6:3c:97:58:f1: fa:ca:da:81:02:d5:5f:dc:4a:ff:17:0e:de:a9:41:8a:b3:83: e6:d8:2a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlAv70bsxJqDvqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODg1NmFjYmQtZTM4Yi00Y2I5LWE0Y2EtZDJhODA0YjA5ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0h2oiuE8ciDTN+QKYkApEonQGxPEX3bIa/T YoTENWkMWBC/fJ0Kq7uAg18XsAvy4Zv90IMpnK0d3UFUYl2o8Ve6zca0y5O3LzsA KidEjOA6RPDdAhowYcAXdn7Vk8pJIiT8wP7gbmRdkVl0WqR0KFE8pEOxjIx8ep7f l4TT0HavWUetIpohoZMA2BBR9BRdJdRf9CIlHlIQ+nsIgAw8s8vE3hrE+swWfZzq lx3wp87VT68zKOXgeKdxal3dqdgPxqyZRMEkS3dRYl/Z55NQanMtzoF1qKybKOWn 7zhWcg56n8E+vVRu5hEBcN18bab+QvxzJ+Gh2Diq03fLgQnswQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtctiJSuhbmvjj4ZUWM48WsNNiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjUyMjI3ODMtNzk2NC0z YzE4LTlkYzAtNzkxYzIxOWUxNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Hv+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYC8zPF64E5vsK+dIgVnQB0XtrrRkYHoErsXY5x08vKRxEu1LOQaFT/ qeUti3KQy6yH6+4qlJmHhWPNVDKB3y0mtQSXnUVnPeTlfJ/8sUYrIvCxIDIQlg64 WlftQAJGFHU2QCp5om6HtnAVXub+7YDD0Lcv2dwqpu6myn0xYFzZVl6SsXeD6gZW ZnUTG9Nfxxr5GviCb/AuF9jrJkVbYIRDgoN4H/TeOVwYgwL1tXrMTfYMnw7QTy9w 1ZrFUV2h06QGgOT5CcbvmZUhDUklEAEVmYUtcKP8Y9QEAsV3JrdDs5bArTb2PJdY 8frK2oEC1V/cSv8XDt6pQYqzg+bYKmM= -----END CERTIFICATE-----Generated at Wed Jul 29 05:18:56 2026 by rpki-client