$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/af92c59d-0fc5-31f8-8930-bd6e313625c5.roa File: af92c59d-0fc5-31f8-8930-bd6e313625c5.roa (raw, json) Hash identifier: gxfosOLEnf2GWtICW+Uln7O5bHCK3hcvoE4BUH5PsFg= Subject key identifier: 94:8D:95:06:01:9F:CC:79:50:3F:8E:6C:DA:62:E2:04:7D:8A:45:23 Certificate issuer: /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340 Certificate serial: 010D0C9F4328584EA7884A6DCE482FE8F98C70C0 Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/af92c59d-0fc5-31f8-8930-bd6e313625c5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32707 IP address blocks: 216.8.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4a:6d:ce:48:2f:e8:f9:8c:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8cd0722d-4edd-4261-bcd9-7311808c865b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:78:e2:e5:a5:ab:af:99:0a:75:b5:d9:1e:2f: 4d:af:c2:9b:00:78:05:52:75:8c:a5:55:eb:da:38: d1:2f:08:03:45:fe:a2:22:7b:45:aa:e0:32:a1:e9: 97:dc:07:f2:ae:4b:a3:a0:74:b1:f7:fe:4e:a4:a8: ab:3c:ec:86:2d:34:f0:20:04:2b:51:2b:b1:2a:f5: 74:35:92:89:e8:98:7f:c2:e0:51:36:32:ec:fb:39: bc:bb:0d:7c:f4:53:2b:e9:80:35:23:f4:21:1d:de: c9:0b:dc:08:fc:64:e2:71:03:34:39:6b:22:29:b8: f0:42:24:1a:2c:f6:9c:1a:4b:80:0e:63:f2:e4:69: 46:f2:e8:5d:42:ee:04:1c:6d:3f:f7:dd:c1:66:34: 39:ac:ba:e2:75:94:c0:7e:99:10:3f:b1:9a:83:aa: 7e:36:ef:68:8c:1a:fb:0d:2d:d2:fb:bb:1c:1e:c0: e7:ba:d7:67:d4:45:86:c0:fa:d0:13:d5:b4:31:ab: 24:df:29:28:ae:b9:55:27:4d:2d:1d:19:42:11:16: 75:96:b9:0b:78:fe:fd:a9:8e:65:b3:3a:43:50:09: fa:2e:ad:c5:0f:db:94:5b:52:d1:8d:64:cb:08:5f: 07:86:c2:88:dd:0c:e3:41:fb:4d:0e:81:8a:f6:f1: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8D:95:06:01:9F:CC:79:50:3F:8E:6C:DA:62:E2:04:7D:8A:45:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/af92c59d-0fc5-31f8-8930-bd6e313625c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl X509v3 Authority Key Identifier: keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer sbgp-ipAddrBlock: critical IPv4: 216.8.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:88:a1:54:4f:4a:15:71:1e:3d:06:50:6c:6e:a6:97:2b:b9: 8e:57:8c:90:d5:fc:d7:ab:1e:cb:97:f2:6e:84:24:55:67:20: 05:ef:e7:5c:5c:9c:1d:14:5f:fa:ac:c8:a1:f6:1b:1f:66:8a: e3:d1:19:31:95:5d:07:4e:c5:7c:4a:26:4e:f0:4a:32:2a:de: 55:04:0b:6f:37:b2:56:d9:44:74:01:2c:33:65:c1:c4:81:e0: 58:bb:da:23:dd:b2:2e:1c:eb:3c:fb:d0:54:07:a8:11:93:87: 1e:e6:15:8f:d5:d9:ad:11:8e:38:6b:e4:be:fd:4e:49:fc:02: 1c:0c:79:e5:2a:6f:f1:25:a3:ab:52:eb:e9:f5:74:2c:cd:3e: fe:d4:92:9a:a9:d0:78:e9:f9:9c:df:6b:21:07:c9:a2:ec:c7: 24:31:95:6d:dd:9d:5a:c9:42:80:7a:4a:67:37:db:24:7f:25: 6f:14:77:a6:50:ee:11:46:97:77:bf:1c:d6:28:14:3c:81:d5: 92:65:f3:7f:63:ef:73:a6:84:a3:1c:ef:a0:6c:e7:62:74:ee: fb:1f:3b:ae:d5:62:4d:d7:1f:9d:26:07:42:f6:f4:dc:e7:61: 92:85:9a:f3:2e:ff:8f:63:e3:af:be:7a:5d:21:e1:15:ff:73: 2f:29:6d:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEptzkgv6PmMcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBlZDRhZjAtYWQ4NC00NGYxLTg0ZGEtY2Q5YjFjNjY3 MzQwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGNkMDcyMmQtNGVkZC00MjYxLWJjZDktNzMxMTgwOGM4NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hji5aWrr5kKdbXZHi9Nr8KbAHgFUnWMpVXr 2jjRLwgDRf6iIntFquAyoemX3AfyrkujoHSx9/5OpKirPOyGLTTwIAQrUSuxKvV0 NZKJ6Jh/wuBRNjLs+zm8uw189FMr6YA1I/QhHd7JC9wI/GTicQM0OWsiKbjwQiQa LPacGkuADmPy5GlG8uhdQu4EHG0/993BZjQ5rLridZTAfpkQP7Gag6p+Nu9ojBr7 DS3S+7scHsDnutdn1EWGwPrQE9W0Mask3ykorrlVJ00tHRlCERZ1lrkLeP79qY5l szpDUAn6Lq3FD9uUW1LRjWTLCF8HhsKI3QzjQftNDoGK9vHtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSNlQYBn8x5UD+ObNpi4gR9ikUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVk NGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDliMWM2NjczNDAvYWY5MmM1OWQtMGZjNS0z MWY4LTg5MzAtYmQ2ZTMxMzYyNWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzBlZDRhZjAtYWQ4NC00NGYxLTg0 ZGEtY2Q5YjFjNjY3MzQwLzMwZWQ0YWYwLWFkODQtNDRmMS04NGRhLWNkOWIxYzY2 NzM0MC5jcmwwHwYDVR0jBBgwFoAUfDeBNtBgaizY5B3JT+fA2zhddi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVkNGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDli MWM2NjczNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqIoVRPShVxHj0GUGxuppcruY5XjJDV/NerHsuX8m6EJFVnIAXv51xc nB0UX/qsyKH2Gx9miuPRGTGVXQdOxXxKJk7wSjIq3lUEC283slbZRHQBLDNlwcSB 4Fi72iPdsi4c6zz70FQHqBGThx7mFY/V2a0Rjjhr5L79Tkn8AhwMeeUqb/Elo6tS 6+n1dCzNPv7Ukpqp0Hjp+ZzfayEHyaLsxyQxlW3dnVrJQoB6Smc32yR/JW8Ud6ZQ 7hFGl3e/HNYoFDyB1ZJl839j73OmhKMc76Bs52J07vsfO67VYk3XH50mB0L29Nzn YZKFmvMu/49j46++el0h4RX/cy8pbUw= -----END CERTIFICATE-----Generated at Wed Jul 29 12:04:22 2026 by rpki-client