$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa File: 5db6d69b-412b-3266-902d-230d81c1875f.roa (raw, json) Hash identifier: 8/Kgy3nfDwVx2UtLQFQPGOyWX5/p1bGYMqgTFinKmnQ= Subject key identifier: 28:FB:51:14:D4:F1:73:BC:47:E1:76:52:DC:9F:77:AB:23:01:88:90 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA796112C62679261F903B160 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7861 IP address blocks: 209.29.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:11:2c:62:67:92:61:f9:03:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=46afa8fc-6f71-43b6-9baa-4a0571ce15e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:eb:53:61:3a:d6:86:5e:29:09:af:55:9e: 87:93:b2:b8:78:a6:89:c7:6f:4c:6b:dc:11:be:db: 96:f3:46:00:77:8c:9a:0e:ec:74:7e:7e:ce:25:2a: 83:7d:18:5f:79:8b:b4:fe:91:1e:f3:d6:c3:0d:3d: d6:79:70:82:3f:fd:e6:c6:a6:2f:bb:89:c0:f0:b3: 52:90:bd:f0:c3:ce:ce:97:33:7d:58:53:11:44:59: e1:eb:67:f8:b1:60:29:0b:28:ef:2b:68:4c:c2:03: e7:54:d6:43:82:0e:a5:1d:44:ff:ec:5f:c5:5f:ce: f1:7e:9e:fd:57:67:45:5c:2c:d7:d6:69:55:06:d6: 06:22:16:6c:2c:99:83:c9:8c:c7:92:b5:1b:cc:43: 52:96:06:79:f8:8e:1c:5b:b4:b4:b1:f3:17:ce:62: 92:3d:53:a5:d3:0d:01:96:e5:22:57:4f:eb:df:75: b0:a0:08:89:2f:06:12:29:3c:8d:ab:df:98:43:aa: 65:95:9f:14:f8:f5:46:11:3c:1f:97:81:c1:15:c1: 7c:3b:ae:44:4e:68:5e:64:f3:5e:30:9e:84:12:bb: 53:25:ed:29:23:9a:81:ce:87:d5:31:d9:ea:66:b4: e6:2f:45:ab:29:60:11:f5:1e:2c:7b:57:4c:71:c6: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FB:51:14:D4:F1:73:BC:47:E1:76:52:DC:9F:77:AB:23:01:88:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:bd:fa:40:88:f8:77:3f:46:82:24:c8:f9:77:d0:e9:d2:f6: 48:f1:77:1d:23:2f:82:8d:94:c8:87:fe:ce:d0:9c:3e:72:70: 50:59:33:2e:c7:4c:86:e8:c6:05:0d:30:1d:05:29:70:79:3c: 67:1c:f2:21:16:10:6c:64:8a:62:7e:d7:ed:04:77:d2:ec:30: d6:92:b0:63:b5:11:f5:ad:eb:cf:d4:4c:aa:ab:80:d5:97:6c: 74:be:86:17:aa:18:89:61:eb:ae:b2:06:11:a3:cc:7d:35:3f: d8:2d:d3:c8:87:57:27:48:93:27:2f:c7:01:1c:85:bd:92:2d: 48:fc:06:11:ea:8e:96:b8:95:7e:1a:45:e6:72:18:2d:44:80: 86:a6:e9:d9:95:74:ec:f5:16:d1:bf:37:64:55:62:98:98:30: 48:cf:b5:15:35:5a:fb:ec:14:8e:32:c8:0f:7d:f6:80:b2:ec: 19:06:47:3b:95:ce:a6:8d:7e:7d:6d:1b:8c:39:3a:f6:f6:02: df:8e:77:45:65:c8:cd:53:5e:23:b0:8e:d5:b5:cc:9f:7f:c0: d2:c6:82:cf:21:ea:fc:b0:fc:d3:f2:b2:9a:40:89:49:0a:32: fc:d8:cb:8d:51:ff:b4:17:6d:17:eb:8d:df:a1:67:ed:66:7a: 25:88:08:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlhEsYmeSYfkDsWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDZhZmE4ZmMtNmY3MS00M2I2LTliYWEtNGEwNTcxY2UxNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYrrU2E61oZeKQmvVZ6Hk7K4eKaJx29Ma9wR vtuW80YAd4yaDux0fn7OJSqDfRhfeYu0/pEe89bDDT3WeXCCP/3mxqYvu4nA8LNS kL3ww87OlzN9WFMRRFnh62f4sWApCyjvK2hMwgPnVNZDgg6lHUT/7F/FX87xfp79 V2dFXCzX1mlVBtYGIhZsLJmDyYzHkrUbzENSlgZ5+I4cW7S0sfMXzmKSPVOl0w0B luUiV0/r33WwoAiJLwYSKTyNq9+YQ6pllZ8U+PVGETwfl4HBFcF8O65ETmheZPNe MJ6EErtTJe0pI5qBzofVMdnqZrTmL0WrKWAR9R4se1dMccbE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj7URTU8XO8R+F2Utyfd6sjAYiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWRiNmQ2OWItNDEyYi0z MjY2LTkwMmQtMjMwZDgxYzE4NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0R3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu9+kCI+Hc/RoIkyPl30OnS9kjxdx0jL4KNlMiH/s7QnD5ycFBZMy7H TIboxgUNMB0FKXB5PGcc8iEWEGxkimJ+1+0Ed9LsMNaSsGO1EfWt68/UTKqrgNWX bHS+hheqGIlh666yBhGjzH01P9gt08iHVydIkycvxwEchb2SLUj8BhHqjpa4lX4a ReZyGC1EgIam6dmVdOz1FtG/N2RVYpiYMEjPtRU1WvvsFI4yyA999oCy7BkGRzuV zqaNfn1tG4w5Ovb2At+Od0VlyM1TXiOwjtW1zJ9/wNLGgs8h6vyw/NPysppAiUkK MvzYy41R/7QXbRfrjd+hZ+1meiWICMU= -----END CERTIFICATE-----Generated at Wed Jul 29 08:38:43 2026 by rpki-client