$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/3d907bac-aa4f-3787-8293-dd1becc955b7.roa File: 3d907bac-aa4f-3787-8293-dd1becc955b7.roa (raw, json) Hash identifier: e9ofaE0zmwYMv9vLihFcSalakMzhkkRqLEQUEM214kw= Subject key identifier: C5:E1:C3:FE:C6:D7:48:4B:04:FB:0D:1F:6A:B9:E8:77:13:D9:97:22 Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584EA5AA9663A2E95358786CCC80 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/3d907bac-aa4f-3787-8293-dd1becc955b7.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 16524 IP address blocks: 72.11.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:96:63:a2:e9:53:58:78:6c:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=fff95db0-59dc-4031-ad41-416332ba0869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:58:43:ec:79:57:b9:e2:38:ef:5c:7b:6e:6f: c8:1d:ce:02:47:3e:10:d5:3c:e0:43:5f:c7:3b:dc: 5e:a6:aa:d1:b0:f7:73:e7:e1:2e:51:26:0d:26:ea: 8e:47:cd:7f:c0:35:d3:3f:4c:23:5f:e7:ae:97:41: b9:32:f9:45:b3:41:f2:95:e1:b4:96:c6:c6:1d:e2: a6:5b:ab:43:5f:f2:b1:7a:5a:89:ee:f4:09:6e:06: d8:84:cc:1d:a7:07:aa:a7:fa:98:c4:7d:ae:90:bc: e6:a0:27:eb:93:ef:51:f2:fa:62:a9:4b:10:e9:28: 6f:26:30:a6:48:35:81:34:d2:dd:dc:b0:37:03:50: 69:b6:e1:86:51:a2:74:33:29:65:2f:78:58:3b:38: 65:3f:01:ab:e5:3f:af:d6:c3:b0:8a:a5:11:35:86: eb:4c:5f:f3:d2:4d:e2:6b:73:3a:23:df:ef:be:1b: c0:37:ac:76:2b:a1:32:95:5e:c1:15:29:8e:5d:e0: 40:ca:fc:2a:eb:48:af:96:63:69:f7:e0:75:27:16: 42:60:54:89:87:bf:08:1a:a4:05:a1:81:3a:b2:03: 02:5a:61:29:fb:b0:54:ef:c1:21:21:39:96:0f:34: ce:62:95:5d:e8:8a:bb:89:ca:b8:84:fb:10:8e:2b: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:C3:FE:C6:D7:48:4B:04:FB:0D:1F:6A:B9:E8:77:13:D9:97:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/3d907bac-aa4f-3787-8293-dd1becc955b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6a:2d:a0:3f:96:b2:e7:6b:d1:44:ee:c3:b5:1b:1a:65:61: 2b:4a:cb:59:1f:65:71:ba:bb:72:a6:14:c0:8a:cf:82:2b:5a: 5c:b3:87:69:51:0d:17:40:61:24:79:b6:c7:45:b1:8b:af:ce: f0:d7:3f:82:05:b5:4d:14:b2:d5:7d:95:8d:34:b6:8b:68:8b: 0e:7d:f9:9d:37:c3:91:e4:11:ad:bf:13:ba:50:86:ed:65:ec: 14:a1:96:5e:70:87:41:14:fb:d3:7d:5d:ca:31:8c:53:df:04: f3:85:db:91:b2:21:37:f2:57:e2:52:58:24:d4:04:38:50:8c: e8:7f:75:2f:f7:94:62:38:38:01:66:ca:7e:13:1b:87:28:d6: 26:f2:8f:33:55:70:ae:a9:34:60:07:6c:a7:08:2e:f9:2f:9e: f8:cb:1b:35:28:2f:8b:4b:c1:bf:67:8c:71:3a:cc:1d:aa:e7: 16:73:ed:b3:43:03:38:69:e6:46:97:d9:4e:2a:2a:4c:99:1b: 4f:40:61:49:7c:01:4e:14:82:e4:aa:c7:b9:af:3f:fe:3e:15: 02:2d:f8:7b:7f:9c:b1:bb:0f:fc:2b:76:7e:98:ae:95:87:f9: cf:65:b9:2c:20:0d:91:c7:2c:e7:5a:e7:97:da:18:7f:13:65: 2d:f2:a0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqpZjoulTWHhszIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk ZmZmOTVkYjAtNTlkYy00MDMxLWFkNDEtNDE2MzMyYmEwODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVhD7HlXueI471x7bm/IHc4CRz4Q1TzgQ1/H O9xepqrRsPdz5+EuUSYNJuqOR81/wDXTP0wjX+eul0G5MvlFs0HyleG0lsbGHeKm W6tDX/KxelqJ7vQJbgbYhMwdpweqp/qYxH2ukLzmoCfrk+9R8vpiqUsQ6ShvJjCm SDWBNNLd3LA3A1BptuGGUaJ0MyllL3hYOzhlPwGr5T+v1sOwiqURNYbrTF/z0k3i a3M6I9/vvhvAN6x2K6EylV7BFSmOXeBAyvwq60ivlmNp9+B1JxZCYFSJh78IGqQF oYE6sgMCWmEp+7BU78EhITmWDzTOYpVd6Iq7icq4hPsQjiu+QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXhw/7G10hLBPsNH2q56HcT2ZciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvM2Q5MDdiYWMtYWE0Zi0z Nzg3LTgyOTMtZGQxYmVjYzk1NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlqLaA/lrLna9FE7sO1GxplYStKy1kfZXG6u3KmFMCKz4IrWlyzh2lR DRdAYSR5tsdFsYuvzvDXP4IFtU0UstV9lY00totoiw59+Z03w5HkEa2/E7pQhu1l 7BShll5wh0EU+9N9XcoxjFPfBPOF25GyITfyV+JSWCTUBDhQjOh/dS/3lGI4OAFm yn4TG4co1ibyjzNVcK6pNGAHbKcILvkvnvjLGzUoL4tLwb9njHE6zB2q5xZz7bND Azhp5kaX2U4qKkyZG09AYUl8AU4UguSqx7mvP/4+FQIt+Ht/nLG7D/wrdn6YrpWH +c9luSwgDZHHLOda55faGH8TZS3yoM0= -----END CERTIFICATE-----Generated at Thu Jul 30 00:34:08 2026 by rpki-client