$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa File: 520a1c55-8b76-3016-a3f5-ef1de25431cc.roa (raw, json) Hash identifier: 91Q9+cx7BhVLmZHcg3hikdlPtr0z3L3QYNqf/e7SI9E= Subject key identifier: 38:D0:4C:5B:DF:44:D8:9B:80:BA:86:3F:03:4D:01:14:BB:CD:E5:CE Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F4328584EA790AF4BE499ACC78FE6FBC0 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30039 IP address blocks: 216.222.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:af:4b:e4:99:ac:c7:8f:e6:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f4687fa2-004d-4056-b522-2d59dd9cba45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:12:37:01:44:2e:77:ca:bc:93:f5:ff:2a: dc:c3:2b:ba:66:6d:1d:e0:f1:6b:8b:87:f4:4a:40: f1:cc:e8:ab:5a:ad:db:b8:be:af:71:90:c3:0e:9f: d3:8f:4b:8b:1a:e0:65:10:e0:c4:c6:35:51:cc:8c: 49:43:d5:2d:69:ed:83:c9:42:d5:a2:21:7c:21:d0: 85:77:22:e1:0a:bf:05:66:b3:3a:a2:9d:37:3a:9d: 02:da:e4:16:d5:66:2c:be:c6:ba:dd:5d:5f:4c:79: 31:dd:fe:d7:7f:31:b7:e6:a6:26:2f:ee:33:64:6f: 36:20:08:92:0a:bf:1c:60:54:c0:0c:fb:29:5f:b9: d6:8a:4d:76:4b:f0:03:ef:77:70:d8:4e:91:36:c9: 8c:45:a5:40:1b:49:8b:1e:74:c0:f0:cd:f3:fc:3a: 38:d1:91:5c:23:10:e5:f4:bc:5d:2d:c8:18:00:5e: cd:83:b7:89:4f:fc:fc:9e:92:81:22:79:51:05:16: 32:30:7c:fb:4e:af:13:35:4c:0a:63:2e:69:14:30: 4b:43:e9:87:e9:6e:3a:57:8d:4e:87:f5:a4:e4:4f: 68:fc:46:9f:6e:f2:1e:33:2d:26:84:00:8c:c0:e8: ea:45:b0:62:61:c7:95:eb:f2:e3:b8:a1:df:56:62: 60:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:4C:5B:DF:44:D8:9B:80:BA:86:3F:03:4D:01:14:BB:CD:E5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:03:fd:ba:4f:23:37:6e:73:00:ee:15:c9:6a:f8:0f:89:93: 4d:b7:72:e7:2a:a8:29:93:ea:c7:9a:a8:40:4d:75:8f:41:d0: 71:3c:55:b8:41:1f:94:41:c1:5c:4e:ab:d5:cd:3f:b1:51:1c: d5:84:9b:40:0c:f2:41:92:9c:a9:a3:15:d8:3b:88:ea:aa:34: 6b:7a:ee:88:cf:ea:b1:63:03:a9:43:c6:66:12:43:94:ec:6f: 7c:08:e4:f6:ae:37:6a:be:70:02:b9:d7:1a:54:32:c6:c7:48: b9:ba:85:35:52:c4:63:2c:93:a6:f5:64:49:47:11:f1:46:ee: 79:45:73:f3:20:2c:33:1b:37:69:05:bf:99:e5:46:02:3b:b0: 44:08:89:a0:34:c7:1c:85:c0:1f:7b:fd:c2:89:6e:f8:1a:c8: 11:cd:42:be:10:36:2f:3c:43:14:0d:25:ec:5f:16:63:1c:b6: 59:78:df:b1:cb:86:a7:87:a6:8c:07:67:6d:10:3e:e2:2f:77: fd:98:c1:d9:78:1d:ad:ea:36:c2:14:e9:b4:96:19:71:5b:32: 23:b0:dd:a1:03:b6:4f:a9:d2:04:be:7c:52:09:fa:54:60:8f: 48:b0:5a:c9:37:ad:a1:47:b9:7e:c2:58:34:90:f2:be:42:32: 51:46:b2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkK9L5Jmsx4/m+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjQ2ODdmYTItMDA0ZC00MDU2LWI1MjItMmQ1OWRkOWNiYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs18SNwFELnfKvJP1/yrcwyu6Zm0d4PFri4f0 SkDxzOirWq3buL6vcZDDDp/Tj0uLGuBlEODExjVRzIxJQ9Utae2DyULVoiF8IdCF dyLhCr8FZrM6op03Op0C2uQW1WYsvsa63V1fTHkx3f7XfzG35qYmL+4zZG82IAiS Cr8cYFTADPspX7nWik12S/AD73dw2E6RNsmMRaVAG0mLHnTA8M3z/Do40ZFcIxDl 9LxdLcgYAF7Ng7eJT/z8npKBInlRBRYyMHz7Tq8TNUwKYy5pFDBLQ+mH6W46V41O h/Wk5E9o/EafbvIeMy0mhACMwOjqRbBiYceV6/LjuKHfVmJgnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjQTFvfRNibgLqGPwNNARS7zeXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNTIwYTFjNTUtOGI3Ni0z MDE2LWEzZjUtZWYxZGUyNTQzMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkD/bpPIzducwDuFclq+A+Jk023cucqqCmT6seaqEBNdY9B0HE8VbhB H5RBwVxOq9XNP7FRHNWEm0AM8kGSnKmjFdg7iOqqNGt67ojP6rFjA6lDxmYSQ5Ts b3wI5PauN2q+cAK51xpUMsbHSLm6hTVSxGMsk6b1ZElHEfFG7nlFc/MgLDMbN2kF v5nlRgI7sEQIiaA0xxyFwB97/cKJbvgayBHNQr4QNi88QxQNJexfFmMctll437HL hqeHpowHZ20QPuIvd/2Ywdl4Ha3qNsIU6bSWGXFbMiOw3aEDtk+p0gS+fFIJ+lRg j0iwWsk3raFHuX7CWDSQ8r5CMlFGstI= -----END CERTIFICATE-----Generated at Wed Jul 29 09:33:28 2026 by rpki-client