$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa File: d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa (raw, json) Hash identifier: 4Km5VdfjEhXBqGyvzwbQN8b0kTR+HQ4dRaYpHrPh4+w= Subject key identifier: 7E:92:DF:E4:26:45:3A:C0:03:92:E9:A8:B7:67:42:1A:F0:2E:47:09 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA794024AA1FFBCD08BD95100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21723 IP address blocks: 209.53.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:02:4a:a1:ff:bc:d0:8b:d9:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bdb86b6a-aaa2-469e-b70c-0e7f9b60a56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:bf:fa:57:41:89:93:b4:ac:20:ed:f5:e3: 72:2d:0b:23:3d:19:f7:46:6f:83:66:87:0c:49:13: 5f:ed:e5:0c:30:e8:db:a1:37:a0:65:52:10:8a:0c: e2:b7:28:1f:da:86:08:5d:33:c1:fd:85:33:d4:f4: a2:54:a1:6e:99:d4:f1:51:59:2e:28:f5:28:77:82: cd:1e:31:8b:8e:e7:97:c6:5c:0f:51:48:2f:7a:3d: 61:8a:ba:ba:d2:55:43:24:cb:b9:c2:e6:0a:46:de: 3b:df:70:23:e1:bd:4c:6f:b1:fe:dc:93:6a:58:2e: c7:3d:ef:b7:a9:70:fb:f6:b1:6a:6a:7e:43:fa:2a: 29:96:5c:7a:99:c6:5a:87:b9:00:bf:65:6c:05:6f: d3:4d:d3:4f:5d:fc:aa:9f:30:51:2c:f1:ec:63:b9: d7:32:6f:fc:bc:cc:04:4f:3d:df:a1:aa:ff:3d:78: 34:a8:74:25:56:e0:b0:dd:91:4d:1d:ca:21:3c:f0: 75:41:df:0f:86:9d:45:f3:a6:7c:4a:dd:6a:8f:c8: 4b:5b:17:20:a3:d9:d7:f2:12:8b:bf:23:96:24:e9: 57:25:21:68:e6:ea:ce:b7:29:48:90:74:87:5d:74: dc:ad:75:8b:48:03:bd:63:7d:96:67:02:36:e5:17: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:92:DF:E4:26:45:3A:C0:03:92:E9:A8:B7:67:42:1A:F0:2E:47:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:02:33:25:57:b5:e7:c8:14:19:60:42:1e:73:ef:66:05:07: d3:72:ad:bb:af:b2:e0:9e:2b:84:8e:2a:45:39:6e:c7:ee:d5: af:91:4e:81:a4:cd:ef:bf:8a:40:36:85:ff:58:5d:22:00:07: a1:c1:4a:9f:d2:70:4f:77:c6:55:36:54:79:d9:fa:ed:b5:4b: 30:e5:13:b0:54:2a:76:62:b4:2b:cd:35:90:41:26:ad:27:88: 8b:ce:2f:7c:4f:15:69:db:b4:66:57:5b:3e:83:eb:43:ef:6c: 77:51:7b:af:22:e7:fe:3e:2f:c8:a4:7e:ae:11:93:bc:76:30: 91:25:cb:c9:65:6d:60:9f:75:91:53:78:75:fd:09:6c:d8:f6: 3b:93:57:04:f5:c3:12:3a:c3:9d:88:67:ae:7f:a6:43:1c:4d: 65:46:43:a9:7c:d9:8d:94:f7:fd:6f:f5:15:da:f8:ca:d3:44: 40:b8:7d:f6:40:14:f8:29:af:e6:2f:67:66:c7:0f:bc:50:cc: 71:8d:51:33:9f:06:64:c2:bb:d2:81:43:09:4f:c7:5b:e1:72: 15:e6:9a:72:07:8e:f4:0b:b5:b9:1f:39:0b:c1:c5:c4:ce:70: fb:5c:dd:eb:73:5d:ff:19:62:24:62:8b:aa:84:ca:a9:c5:ad: 81:b4:7d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlAJKof+80IvZUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmRiODZiNmEtYWFhMi00NjllLWI3MGMtMGU3ZjliNjBhNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaW/+ldBiZO0rCDt9eNyLQsjPRn3Rm+DZocM SRNf7eUMMOjboTegZVIQigzitygf2oYIXTPB/YUz1PSiVKFumdTxUVkuKPUod4LN HjGLjueXxlwPUUgvej1hirq60lVDJMu5wuYKRt4733Aj4b1Mb7H+3JNqWC7HPe+3 qXD79rFqan5D+iopllx6mcZah7kAv2VsBW/TTdNPXfyqnzBRLPHsY7nXMm/8vMwE Tz3foar/PXg0qHQlVuCw3ZFNHcohPPB1Qd8Php1F86Z8St1qj8hLWxcgo9nX8hKL vyOWJOlXJSFo5urOtylIkHSHXXTcrXWLSAO9Y32WZwI25RczgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6S3+QmRTrAA5LpqLdnQhrwLkcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDMyYTZkYzEtZGFhNS0z MWJmLWIzMjQtZjM1MmZiZjg5ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsCMyVXtefIFBlgQh5z72YFB9NyrbuvsuCeK4SOKkU5bsfu1a+RToGk ze+/ikA2hf9YXSIAB6HBSp/ScE93xlU2VHnZ+u21SzDlE7BUKnZitCvNNZBBJq0n iIvOL3xPFWnbtGZXWz6D60PvbHdRe68i5/4+L8ikfq4Rk7x2MJEly8llbWCfdZFT eHX9CWzY9juTVwT1wxI6w52IZ65/pkMcTWVGQ6l82Y2U9/1v9RXa+MrTREC4ffZA FPgpr+YvZ2bHD7xQzHGNUTOfBmTCu9KBQwlPx1vhchXmmnIHjvQLtbkfOQvBxcTO cPtc3etzXf8ZYiRii6qEyqnFrYG0ffY= -----END CERTIFICATE-----Generated at Wed Jul 29 09:33:29 2026 by rpki-client