$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa File: 89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa (raw, json) Hash identifier: FkMcdJ886aClJ9YhMS85RKtyzkapuXBL765h3Wu1hzI= Subject key identifier: 50:5F:24:A3:19:9A:DC:A7:BC:BD:6B:CD:BC:38:1E:D7:ED:52:D9:49 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA786F1D048438292AD9B89C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32620 IP address blocks: 66.253.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f1:d0:48:43:82:92:ad:9b:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ee97aeca-b99f-4777-b9c7-6d99b52f4927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:12:7f:53:c8:b0:0d:f3:23:05:ec:04:19:cb: f0:ce:4a:c0:91:37:36:08:84:5a:60:75:d5:23:e2: e4:4d:55:96:7a:56:19:11:29:06:dd:98:3c:36:0b: 27:07:b2:58:3c:69:fc:59:5c:12:d4:be:8f:e4:a8: cb:03:72:07:4e:12:e7:0a:2b:71:db:79:5c:55:d8: ed:5f:70:9a:a0:8c:47:25:e4:b6:30:f0:8b:f6:d9: be:38:92:05:2b:3c:f1:be:b3:e1:be:8e:f8:85:cc: 70:f7:cf:62:f5:f6:24:7f:16:eb:18:5d:d6:ba:8f: a0:de:20:b1:33:20:ed:fb:5d:b8:e3:0a:3e:fd:01: 4e:6f:7e:4e:0c:5f:fe:08:69:de:06:8b:33:94:71: 0e:21:74:3e:88:a2:d0:98:51:80:fb:46:ad:cc:ee: 15:45:51:5d:95:b6:75:4e:d0:2e:be:fe:b5:02:61: 19:3f:e1:63:3d:b3:43:bd:f9:98:f2:08:b9:c9:d5: c4:c3:b3:b5:30:3c:d8:42:53:c7:1b:a1:a6:c8:ca: 89:57:f1:2a:0d:1f:11:c6:80:ee:03:95:e1:37:55: eb:4f:4a:7a:4d:e2:b1:8f:73:b5:a5:c2:cb:2e:82: 89:04:3a:ba:aa:63:38:35:43:28:44:e1:8c:ff:67: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5F:24:A3:19:9A:DC:A7:BC:BD:6B:CD:BC:38:1E:D7:ED:52:D9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89fd6bb2-f912-3ded-af1d-c7df74b7f0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:83:06:de:ea:96:b7:7e:ea:c2:75:21:05:be:31:60:63:97: 1b:12:38:f7:a5:f3:2c:ec:dc:02:a0:f5:36:1c:cb:4c:20:ad: da:fc:2d:55:98:a3:c2:1b:e7:78:02:3e:ab:dd:aa:1c:1f:41: 80:64:f3:cc:5c:5f:10:f0:c0:84:3a:63:a5:14:4e:ac:9b:3a: 0e:5d:bd:6f:d4:2e:9e:7b:f8:73:3a:93:c6:65:2a:e5:92:79: 12:94:7c:23:5b:fa:5e:cf:76:b6:03:b4:9d:a5:3d:79:a5:96: 55:df:bc:94:af:72:78:69:2a:c9:05:20:a0:cc:2e:e3:fb:9e: af:6c:4f:68:3b:47:ce:81:e6:60:bc:a7:c2:b9:19:ac:8d:60: 14:d9:8d:57:d1:ef:b3:6a:af:29:c4:97:ef:0d:5c:47:84:86: ec:8c:55:3e:29:5b:23:dd:16:cc:c2:28:c2:df:f1:89:86:2d: b1:37:3e:47:bd:ca:02:14:7e:b5:69:f4:18:c0:97:e0:64:b8: 38:a3:4a:90:88:ae:62:0e:72:55:3f:a0:6d:7a:76:21:76:0d: 6e:48:4b:5e:c9:2a:7f:c3:6c:23:26:d9:b8:d0:bf:e8:dd:56: bb:9c:65:6c:cc:26:26:49:d5:0f:69:04:ca:6e:67:79:ed:61: e6:6d:57:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvHQSEOCkq2bicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWU5N2FlY2EtYjk5Zi00Nzc3LWI5YzctNmQ5OWI1MmY0OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BJ/U8iwDfMjBewEGcvwzkrAkTc2CIRaYHXV I+LkTVWWelYZESkG3Zg8NgsnB7JYPGn8WVwS1L6P5KjLA3IHThLnCitx23lcVdjt X3CaoIxHJeS2MPCL9tm+OJIFKzzxvrPhvo74hcxw989i9fYkfxbrGF3Wuo+g3iCx MyDt+1244wo+/QFOb35ODF/+CGneBoszlHEOIXQ+iKLQmFGA+0atzO4VRVFdlbZ1 TtAuvv61AmEZP+FjPbNDvfmY8gi5ydXEw7O1MDzYQlPHG6GmyMqJV/EqDR8RxoDu A5XhN1XrT0p6TeKxj3O1pcLLLoKJBDq6qmM4NUMoROGM/2fAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBfJKMZmtynvL1rzbw4HtftUtlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODlmZDZiYjItZjkxMi0z ZGVkLWFmMWQtYzdkZjc0YjdmMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGDBt7qlrd+6sJ1IQW+MWBjlxsSOPel8yzs3AKg9TYcy0wgrdr8LVWY o8Ib53gCPqvdqhwfQYBk88xcXxDwwIQ6Y6UUTqybOg5dvW/ULp57+HM6k8ZlKuWS eRKUfCNb+l7PdrYDtJ2lPXmlllXfvJSvcnhpKskFIKDMLuP7nq9sT2g7R86B5mC8 p8K5GayNYBTZjVfR77NqrynEl+8NXEeEhuyMVT4pWyPdFszCKMLf8YmGLbE3Pke9 ygIUfrVp9BjAl+BkuDijSpCIrmIOclU/oG16diF2DW5IS17JKn/DbCMm2bjQv+jd VrucZWzMJiZJ1Q9pBMpuZ3ntYeZtVzc= -----END CERTIFICATE-----Generated at Wed Jul 29 19:42:39 2026 by rpki-client