$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbf65b9-e159-3834-8050-400e8ea200d9.roa File: dcbf65b9-e159-3834-8050-400e8ea200d9.roa (raw, json) Hash identifier: BDLDKUZt5Ex9spNiyb1OfYU9lO2H6y0i8BvHSyJiBRc= Subject key identifier: D6:47:65:C0:2D:AA:11:58:9C:10:A9:12:83:30:5C:32:58:D7:6B:98 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EA17A73F4FA5263A140DC6E40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbf65b9-e159-3834-8050-400e8ea200d9.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 3257 IP address blocks: 173.232.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:73:f4:fa:52:63:a1:40:dc:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=6b376c41-df17-4cf6-bd48-82ff10f3fda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:83:7c:77:cf:40:66:1b:69:a5:b3:49:5b:cc: 0c:c1:41:81:91:51:28:d1:b7:23:b4:e4:d5:a3:9e: ee:72:3f:f0:77:4a:a3:c2:af:24:09:14:a5:06:42: f1:b4:b4:fb:35:84:da:34:8f:9f:74:03:ca:0c:08: 8c:8d:9f:be:fc:9e:91:c8:c6:ef:44:eb:bf:da:bf: 9c:8f:9e:b5:77:30:fb:67:61:5d:0b:62:a3:66:11: 8e:e2:c2:c9:2f:d7:ac:03:e9:59:0b:aa:56:5a:a8: 14:2c:00:33:b5:bb:ab:dd:fb:db:0f:6c:75:1b:18: b6:b9:5b:95:64:a1:1c:0b:2d:0a:e1:b3:dc:24:48: 1f:11:2d:f6:a6:4a:48:51:17:40:eb:dd:3e:3d:f0: 3e:90:95:f6:d7:8e:67:99:23:85:09:f8:19:53:34: 92:be:cb:27:9f:bc:8a:7e:0e:5c:38:1d:27:c3:45: 0d:64:e6:00:c1:2d:6a:85:56:18:db:b7:75:ea:c6: 6d:15:68:2f:a8:12:f4:06:47:91:d5:97:a7:03:aa: fa:86:4f:c8:b8:d4:63:60:69:48:34:29:dc:63:20: 6e:12:52:af:78:49:a2:ce:24:0f:98:06:53:c1:d9: da:94:34:9f:64:cb:cc:4f:fc:ca:d0:77:c9:ce:e0: 53:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:47:65:C0:2D:AA:11:58:9C:10:A9:12:83:30:5C:32:58:D7:6B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcbf65b9-e159-3834-8050-400e8ea200d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:42:d1:07:7c:9e:a3:5e:14:26:d7:be:84:28:1f:53:66:d3: 9a:37:a8:d8:16:fa:bf:f3:01:3a:e0:dd:f5:57:d5:d8:99:91: d4:c0:75:eb:45:72:57:e5:3a:c5:de:0a:d8:97:93:c6:58:2b: 7b:36:e4:ff:3a:7b:f7:ba:a0:94:a0:77:ec:f7:1a:d9:ea:f7: df:1e:12:22:4c:ff:27:c1:ad:d8:09:06:05:96:96:20:63:25: 6c:af:91:9e:f3:3b:01:6d:3b:a4:1b:bf:45:f6:6b:6e:d2:c5: 40:c5:5a:d1:2d:29:93:cc:89:88:7e:b3:c6:ce:d8:ec:3e:81: ba:7f:fc:63:7f:a5:f6:21:2f:d4:2b:5d:16:aa:02:bc:0d:1c: b4:6a:00:51:b6:06:af:31:77:f7:fe:50:cf:ca:e3:a0:7a:f8: 0a:3c:24:80:c4:63:d1:7c:ce:f6:5f:0e:a0:84:ab:11:56:21: 64:d1:ef:f2:e3:16:be:36:3a:6f:32:51:73:5c:a3:bf:98:5a: cc:a4:26:43:ab:68:8b:12:c0:7b:19:ac:4c:45:91:7f:db:fb: a6:48:59:d1:f9:76:2d:3a:16:b6:d2:74:ea:1b:24:75:aa:3c: 8c:26:b4:04:e3:3c:df:82:c5:37:33:90:62:6e:9c:24:22:25: 7d:88:01:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6henP0+lJjoUDcbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NmIzNzZjNDEtZGYxNy00Y2Y2LWJkNDgtODJmZjEwZjNmZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoN8d89AZhtppbNJW8wMwUGBkVEo0bcjtOTV o57ucj/wd0qjwq8kCRSlBkLxtLT7NYTaNI+fdAPKDAiMjZ++/J6RyMbvROu/2r+c j561dzD7Z2FdC2KjZhGO4sLJL9esA+lZC6pWWqgULAAztbur3fvbD2x1Gxi2uVuV ZKEcCy0K4bPcJEgfES32pkpIURdA690+PfA+kJX2145nmSOFCfgZUzSSvssnn7yK fg5cOB0nw0UNZOYAwS1qhVYY27d16sZtFWgvqBL0BkeR1ZenA6r6hk/IuNRjYGlI NCncYyBuElKveEmiziQPmAZTwdnalDSfZMvMT/zK0HfJzuBTLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZHZcAtqhFYnBCpEoMwXDJY12uYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGNiZjY1YjktZTE1OS0z ODM0LTgwNTAtNDAwZThlYTIwMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArej8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABC0Qd8nqNeFCbXvoQoH1Nm05o3qNgW+r/zATrg3fVX1diZkdTAdetF clflOsXeCtiXk8ZYK3s25P86e/e6oJSgd+z3Gtnq998eEiJM/yfBrdgJBgWWliBj JWyvkZ7zOwFtO6Qbv0X2a27SxUDFWtEtKZPMiYh+s8bO2Ow+gbp//GN/pfYhL9Qr XRaqArwNHLRqAFG2Bq8xd/f+UM/K46B6+Ao8JIDEY9F8zvZfDqCEqxFWIWTR7/Lj Fr42Om8yUXNco7+YWsykJkOraIsSwHsZrExFkX/b+6ZIWdH5di06FrbSdOobJHWq PIwmtATjPN+CxTczkGJunCQiJX2IAec= -----END CERTIFICATE-----Generated at Wed Jul 29 06:47:47 2026 by rpki-client