$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa File: 43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa (raw, json) Hash identifier: pAbPk5jO8WniJ+X2y83ZNwdJOTM2+3ex4D0RZxZNgYk= Subject key identifier: A2:FD:34:FA:E2:F3:78:EB:EC:63:A4:51:E0:B9:6E:65:66:3B:44:19 Certificate issuer: /CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Certificate serial: 010D0C9F4328584EA78F7167B66506CD220E5400 Authority key identifier: 93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 29900 IP address blocks: 66.146.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:71:67:b6:65:06:cd:22:0e:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5db199d-9dc8-4b83-b53b-b092f0d6e78e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d6d6b561-4ce5-4adc-ba37-f799efe6363a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6c:16:7a:87:87:fc:43:fe:85:d9:99:74:01: 10:ac:21:7b:cd:87:e8:b3:a2:3b:8f:b1:59:22:df: d1:f0:c3:19:89:bb:8c:1b:b3:d8:76:96:57:d2:d8: 8e:98:15:2d:59:98:f4:15:b2:09:5b:5a:af:0d:83: 43:e0:b3:97:ae:2b:d7:b2:d4:db:ed:d8:a2:0a:b8: 9e:ab:ed:cb:0e:2c:ef:86:19:aa:b5:10:75:7b:46: 25:a5:5d:03:58:be:22:96:f8:04:7b:62:20:6e:ef: cf:25:f8:1c:9a:f1:02:cf:05:a3:ed:ae:12:b3:86: 24:32:ee:aa:f0:c0:44:36:39:d5:9b:bf:ef:f6:f8: ac:ba:a4:4a:af:76:59:19:5f:34:c5:78:5a:5b:c4: ae:09:e1:d3:2b:33:7e:80:48:5d:35:59:78:6e:2a: 87:3a:a1:4d:bb:bf:2f:22:96:77:32:bb:35:74:10: 03:bb:9f:a4:af:12:6b:1b:00:dc:19:7d:33:89:c6: fc:26:00:d2:9c:58:19:86:53:0a:11:c6:d3:52:d8: ba:7a:4c:fc:65:f7:bc:07:65:19:78:68:e7:aa:ba: 5f:12:92:aa:b9:b5:6a:81:f1:98:c6:15:1a:25:73: 15:8e:8e:b4:3d:cd:94:e0:b7:2a:de:78:e7:dd:13: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FD:34:FA:E2:F3:78:EB:EC:63:A4:51:E0:B9:6E:65:66:3B:44:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/43de3b5f-7fe5-32cd-b732-8ba98f51db84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.crl X509v3 Authority Key Identifier: keyid:93:40:47:E4:F1:10:78:69:FD:0C:88:F4:8E:77:C9:8A:2D:6A:A8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e5db199d-9dc8-4b83-b53b-b092f0d6e78e.cer sbgp-ipAddrBlock: critical IPv4: 66.146.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bf:0a:2b:a5:18:77:53:41:a3:bf:24:12:f4:91:6b:78:45: 40:c0:bb:ba:aa:97:59:f2:02:86:93:fe:c0:9d:dd:e1:5e:e0: fd:54:8f:1b:84:d4:cf:38:fb:75:24:58:71:70:dc:29:57:80: ec:67:3c:96:46:5a:a9:0e:43:2b:95:bf:cf:42:4d:cc:c7:22: d0:5c:3b:87:bb:bc:3d:c8:af:f4:9e:30:d4:52:2f:2f:2b:f9: dc:3f:52:e7:b1:83:38:d1:4d:94:95:7a:53:ae:3a:c2:c9:02: 8e:05:10:76:70:b1:79:ca:6f:2b:3f:aa:7d:26:a8:56:92:e3: 4e:db:cd:17:af:24:77:4c:84:6a:76:6a:2f:43:c5:6d:1c:5b: e9:70:14:40:95:82:37:00:52:79:0b:bf:dd:21:61:62:4d:ac: 0e:d8:9e:73:0c:89:35:70:b7:83:95:ae:5f:0b:e2:e7:27:2a: 94:a1:45:cc:8b:b6:cb:e7:e7:16:59:01:a3:8f:05:b4:78:2d: d6:e6:f6:0a:79:14:98:f8:ff:a3:02:80:b0:ea:1b:0c:fd:9c: 46:17:96:e5:23:9f:d8:44:8e:d6:b7:f3:71:9f:51:0a:70:ad: 9d:57:ee:bf:b7:b9:bf:d1:70:c5:b6:1e:f8:f3:df:e2:45:08: 36:8a:f9:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3FntmUGzSIOVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVkYjE5OWQtOWRjOC00YjgzLWI1M2ItYjA5MmYwZDZl NzhlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDZkNmI1NjEtNGNlNS00YWRjLWJhMzctZjc5OWVmZTYzNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGwWeoeH/EP+hdmZdAEQrCF7zYfos6I7j7FZ It/R8MMZibuMG7PYdpZX0tiOmBUtWZj0FbIJW1qvDYND4LOXrivXstTb7diiCrie q+3LDizvhhmqtRB1e0YlpV0DWL4ilvgEe2Igbu/PJfgcmvECzwWj7a4Ss4YkMu6q 8MBENjnVm7/v9visuqRKr3ZZGV80xXhaW8SuCeHTKzN+gEhdNVl4biqHOqFNu78v IpZ3Mrs1dBADu5+krxJrGwDcGX0zicb8JgDSnFgZhlMKEcbTUti6ekz8Zfe8B2UZ eGjnqrpfEpKqubVqgfGYxhUaJXMVjo60Pc2U4Lcq3njn3ROqJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL9NPri83jr7GOkUeC5bmVmO0QZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRi MTk5ZC05ZGM4LTRiODMtYjUzYi1iMDkyZjBkNmU3OGUvNDNkZTNiNWYtN2ZlNS0z MmNkLWI3MzItOGJhOThmNTFkYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTVkYjE5OWQtOWRjOC00YjgzLWI1 M2ItYjA5MmYwZDZlNzhlL2U1ZGIxOTlkLTlkYzgtNGI4My1iNTNiLWIwOTJmMGQ2 ZTc4ZS5jcmwwHwYDVR0jBBgwFoAUk0BH5PEQeGn9DIj0jnfJii1qqMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNWRiMTk5ZC05ZGM4LTRiODMtYjUzYi1iMDky ZjBkNmU3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQpLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy/CiulGHdTQaO/JBL0kWt4RUDAu7qql1nyAoaT/sCd3eFe4P1UjxuE 1M84+3UkWHFw3ClXgOxnPJZGWqkOQyuVv89CTczHItBcO4e7vD3Ir/SeMNRSLy8r +dw/UuexgzjRTZSVelOuOsLJAo4FEHZwsXnKbys/qn0mqFaS407bzRevJHdMhGp2 ai9DxW0cW+lwFECVgjcAUnkLv90hYWJNrA7YnnMMiTVwt4OVrl8L4ucnKpShRcyL tsvn5xZZAaOPBbR4Ldbm9gp5FJj4/6MCgLDqGwz9nEYXluUjn9hEjta383GfUQpw rZ1X7r+3ub/RcMW2Hvjz3+JFCDaK+fM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:08:01 2026 by rpki-client