$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa File: 924d1aed-b12e-3c24-a9a0-b65a8555a333.roa (raw, json) Hash identifier: /YBMN2MT9Caa7E/aai2rxCwVhibhcgmHRh5GqT6STYw= Subject key identifier: 99:F4:9C:24:65:11:3D:08:47:35:B2:E3:CA:13:FE:D2:34:95:AA:39 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F4328584EA78897402C11765DBFEB8200 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32592 IP address blocks: 67.217.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:97:40:2c:11:76:5d:bf:eb:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0d600bca-1896-4db8-b8dd-c1f265dee3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:e7:6c:93:64:30:59:5d:64:d3:40:fd:3d: 74:22:9e:97:86:4e:a4:a7:ab:c1:f1:de:32:0b:51: 67:ea:90:8d:26:46:da:52:ff:2b:f1:33:66:78:eb: 4d:81:a5:fa:63:ef:3f:29:84:fb:43:4e:14:4d:b6: 66:a3:ae:c8:22:9a:af:80:50:02:ae:7f:03:4c:84: 11:6a:21:dd:2e:e4:67:39:8c:15:97:35:91:47:39: fa:23:3d:d4:5c:46:15:8a:72:8b:23:b9:5b:a0:c7: 83:a1:9c:f9:d3:17:df:c3:7e:11:97:e2:da:17:17: df:76:45:41:1e:93:5a:7c:d6:23:0c:6b:19:73:90: 36:c3:47:4d:a3:df:6d:60:01:b2:9c:e9:28:5b:a5: d7:be:b5:55:eb:72:e8:9e:f6:97:f1:8c:46:da:9e: 86:7e:05:a1:11:a1:87:ae:7c:57:16:bc:f0:89:9c: 67:4b:c7:5a:cd:c5:40:1a:89:29:49:6f:1f:12:04: 33:a3:61:12:20:d8:dd:b0:cd:e7:0b:70:19:ef:ca: 5b:c4:a2:f2:dc:42:2e:fb:3a:c6:f7:5c:5d:81:84: 65:74:d1:03:0c:1b:a6:97:d5:25:8e:c5:f0:0c:da: 56:2d:b6:d0:16:2d:02:2b:8f:26:ad:b6:b3:f0:8f: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F4:9C:24:65:11:3D:08:47:35:B2:E3:CA:13:FE:D2:34:95:AA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 67.217.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a6:f2:f0:68:52:6c:92:09:df:ba:2f:d1:8f:8a:1c:f7:22: a9:ed:83:ea:08:68:47:10:13:85:a4:45:46:f2:5d:f0:8a:43: 9c:96:3a:d4:9d:d4:e1:49:2b:81:37:d0:eb:38:3e:cd:11:c6: 7c:59:10:52:30:df:e6:5f:eb:45:75:12:0d:c2:d2:c4:ba:c5: 4e:cc:2f:3d:11:78:71:52:46:f3:96:44:76:89:21:b8:cc:e3: 79:03:bf:1a:87:85:30:d3:f2:d0:45:b2:00:14:9d:cc:75:78: 9f:2e:f4:d9:3a:7f:8a:09:2b:84:f7:a8:01:69:7f:70:b2:5b: 2d:41:c9:15:40:26:54:a1:53:11:4f:d6:54:07:12:a2:4c:71: d1:25:ce:67:ce:89:d2:3e:02:63:f6:21:fb:0e:42:fb:f7:52: 9b:f7:ba:03:a0:a4:3e:c4:67:08:17:e0:34:d7:11:5f:7c:49: a5:94:90:e6:62:6f:19:74:0f:1f:f3:f0:6c:6c:82:6e:80:25: a7:f9:b6:5e:db:c4:e3:47:91:9a:d3:05:c7:35:83:49:af:a2: 57:da:87:79:77:00:ae:aa:84:09:dd:26:4e:c3:fa:60:cf:65: a1:76:61:17:59:0a:da:85:b6:42:6a:c3:55:ef:5f:57:2a:ed: be:20:75:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJdALBF2Xb/rggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGQ2MDBiY2EtMTg5Ni00ZGI4LWI4ZGQtYzFmMjY1ZGVlM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16jnbJNkMFldZNNA/T10Ip6Xhk6kp6vB8d4y C1Fn6pCNJkbaUv8r8TNmeOtNgaX6Y+8/KYT7Q04UTbZmo67IIpqvgFACrn8DTIQR aiHdLuRnOYwVlzWRRzn6Iz3UXEYVinKLI7lboMeDoZz50xffw34Rl+LaFxffdkVB HpNafNYjDGsZc5A2w0dNo99tYAGynOkoW6XXvrVV63LonvaX8YxG2p6GfgWhEaGH rnxXFrzwiZxnS8dazcVAGokpSW8fEgQzo2ESINjdsM3nC3AZ78pbxKLy3EIu+zrG 91xdgYRldNEDDBuml9UljsXwDNpWLbbQFi0CK48mrbaz8I8l8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn0nCRlET0IRzWy48oT/tI0lao5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvOTI0ZDFhZWQtYjEyZS0z YzI0LWE5YTAtYjY1YTg1NTVhMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+m8vBoUmySCd+6L9GPihz3Iqntg+oIaEcQE4WkRUbyXfCKQ5yWOtSd 1OFJK4E30Os4Ps0RxnxZEFIw3+Zf60V1Eg3C0sS6xU7MLz0ReHFSRvOWRHaJIbjM 43kDvxqHhTDT8tBFsgAUncx1eJ8u9Nk6f4oJK4T3qAFpf3CyWy1ByRVAJlShUxFP 1lQHEqJMcdElzmfOidI+AmP2IfsOQvv3Upv3ugOgpD7EZwgX4DTXEV98SaWUkOZi bxl0Dx/z8Gxsgm6AJaf5tl7bxONHkZrTBcc1g0mvolfah3l3AK6qhAndJk7D+mDP ZaF2YRdZCtqFtkJqw1XvX1cq7b4gdVE= -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:23 2026 by rpki-client