$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa File: ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa (raw, json) Hash identifier: USmMUmpKdicBp0OQzCl66JYSd1QmNRdfioWiKVdfxRU= Subject key identifier: 8D:D8:EF:CC:63:9B:53:04:F7:78:CE:74:BB:82:1F:22:91:4D:81:B7 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584EA78EFA578847A4087AD91B00 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40509 IP address blocks: 172.86.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:fa:57:88:47:a4:08:7a:d9:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9609a623-b54c-4605-b553-f484d47e2275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:45:30:6d:f2:f9:09:d3:f0:0c:d5:8e:8d:0e: 94:be:51:bc:5d:05:df:db:fa:8c:00:ef:aa:c5:aa: 6a:cf:f3:3d:0e:87:a1:9b:47:c5:46:a1:d8:e3:41: e1:ef:dd:5e:84:9d:e4:7f:8b:98:94:08:97:da:9d: bf:25:c0:86:63:47:3f:9e:71:0e:9c:af:11:4f:3c: 43:4b:7b:32:32:7d:e8:95:e3:23:f3:10:cf:08:0d: 00:5f:6a:d0:f5:a6:c5:69:5d:bf:a8:a2:47:8a:a9: 04:70:e3:15:7f:a9:fb:00:db:fa:db:50:44:29:fa: 53:8f:65:ee:81:6c:ea:02:d1:2c:68:6b:13:fa:57: 3c:37:d4:07:29:39:58:8c:0c:aa:7d:a0:0a:e8:36: 7c:5c:58:d6:fe:ec:5d:5f:52:58:e7:d5:0e:4b:05: d0:f5:44:85:bd:cd:69:89:6e:cc:13:18:e2:24:5e: da:53:e6:e2:79:33:8a:dd:1e:c1:a5:65:d9:1e:60: 8c:3b:fd:ab:df:ba:c9:4a:6c:f0:3b:14:4f:71:27: 3c:2a:a5:15:6a:1c:f4:0e:3c:b7:2f:c3:e4:5b:71: ee:7a:c9:9a:c2:6b:92:38:8d:1b:45:8e:e7:06:6b: db:d9:63:b8:df:f8:36:fb:78:23:17:1a:88:ac:c4: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D8:EF:CC:63:9B:53:04:F7:78:CE:74:BB:82:1F:22:91:4D:81:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 172.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:33:5c:43:e4:09:6d:79:9c:7c:9e:07:0b:02:49:5c:34:f4: 27:8e:a6:d9:5a:54:f2:59:fb:18:3f:a7:6c:cc:cd:86:e2:ad: 8e:c9:ee:bc:4a:c4:df:c2:14:22:8f:58:9f:90:7c:84:ad:c1: 34:25:3d:93:aa:d8:a8:f1:ee:0f:9f:97:6b:53:ac:6d:09:d6: cb:be:57:97:4a:0d:cf:0e:39:07:ec:1d:d0:0e:df:55:d6:f2: 35:aa:eb:e8:c9:76:bc:6e:88:32:d0:bd:1a:c2:f5:57:d1:e7: 2a:f1:1d:83:ec:93:52:3b:80:53:38:6b:01:dc:66:ee:d3:e2: ef:c6:ae:42:26:95:79:f7:0e:da:32:e1:10:e6:fd:5d:0d:f0: cd:75:27:f2:25:f2:ff:21:cd:b6:52:29:41:a5:dc:81:17:30: 0e:6b:9d:6f:78:4d:84:c0:dd:6d:18:52:40:5f:2c:21:2f:2b: 43:28:41:01:12:93:2d:c9:f1:e8:c3:ef:34:37:9f:68:e4:b6: 9f:ff:c2:7c:ee:5f:ed:9c:fe:6e:ad:09:ca:41:24:5b:45:f3: b6:6b:8e:f6:f9:fa:65:7c:ae:88:09:3a:73:57:87:6a:24:5d: 9f:a2:5a:f5:0d:28:d3:e2:ba:46:06:f4:fa:79:27:57:e8:d7: 91:28:70:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njvpXiEekCHrZGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTYwOWE2MjMtYjU0Yy00NjA1LWI1NTMtZjQ4NGQ0N2UyMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80UwbfL5CdPwDNWOjQ6UvlG8XQXf2/qMAO+q xapqz/M9Doehm0fFRqHY40Hh791ehJ3kf4uYlAiX2p2/JcCGY0c/nnEOnK8RTzxD S3syMn3oleMj8xDPCA0AX2rQ9abFaV2/qKJHiqkEcOMVf6n7ANv621BEKfpTj2Xu gWzqAtEsaGsT+lc8N9QHKTlYjAyqfaAK6DZ8XFjW/uxdX1JY59UOSwXQ9USFvc1p iW7MExjiJF7aU+bieTOK3R7BpWXZHmCMO/2r37rJSmzwOxRPcSc8KqUVahz0Djy3 L8PkW3HuesmawmuSOI0bRY7nBmvb2WO43/g2+3gjFxqIrMTMGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3Y78xjm1ME93jOdLuCHyKRTYG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvY2E2N2M2ZWQtNTFkNS0z NTY4LTgwMWQtN2ZkOWM5MTNmOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIzXEPkCW15nHyeBwsCSVw09CeOptlaVPJZ+xg/p2zMzYbirY7J7rxK xN/CFCKPWJ+QfIStwTQlPZOq2Kjx7g+fl2tTrG0J1su+V5dKDc8OOQfsHdAO31XW 8jWq6+jJdrxuiDLQvRrC9VfR5yrxHYPsk1I7gFM4awHcZu7T4u/GrkImlXn3Dtoy 4RDm/V0N8M11J/Il8v8hzbZSKUGl3IEXMA5rnW94TYTA3W0YUkBfLCEvK0MoQQES ky3J8ejD7zQ3n2jktp//wnzuX+2c/m6tCcpBJFtF87Zrjvb5+mV8rogJOnNXh2ok XZ+iWvUNKNPiukYG9Pp5J1fo15EocDk= -----END CERTIFICATE-----Generated at Wed Jul 29 08:56:35 2026 by rpki-client