$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/467d1b5b-11e8-341d-8876-2e4dc0bb64f9.roa File: 467d1b5b-11e8-341d-8876-2e4dc0bb64f9.roa (raw, json) Hash identifier: qlbTcNxEg8j0riFWUgSYTvPZ5sb/tJtuVl1uNsve3+Y= Subject key identifier: 91:87:03:9F:6F:D5:7C:41:51:3A:4B:1E:78:7C:AE:DF:4C:5A:B4:4F Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584EA78833A4D2ECE40EDB24EF80 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/467d1b5b-11e8-341d-8876-2e4dc0bb64f9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399632 IP address blocks: 192.228.66.0/23 maxlen: 23 192.228.66.0/24 maxlen: 24 192.228.67.0/24 maxlen: 24 192.228.68.0/23 maxlen: 23 192.228.68.0/24 maxlen: 24 192.228.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:33:a4:d2:ec:e4:0e:db:24:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=20c63911-c8ab-4e8a-9926-b8a16cb4cd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:45:bf:8e:1a:7b:90:40:21:29:9f:60:9a: 96:b0:6c:e6:6d:50:2c:c3:0a:86:15:27:bc:43:f8: 18:4e:4d:c1:dd:13:be:70:f1:c8:97:09:3c:45:77: 65:64:36:34:8b:d5:9d:75:de:c3:bb:c7:e4:1d:ec: 29:dc:71:2d:5b:ee:dc:c9:d7:a5:c7:83:fe:37:db: aa:16:eb:3d:ae:02:72:d8:49:24:85:b3:ce:7e:58: 73:48:0f:ba:22:b5:79:2b:b5:9c:03:48:dc:27:67: 63:54:1f:1b:da:94:63:50:8d:6c:4f:76:8b:b1:fd: f7:da:65:56:49:59:81:b7:82:96:1e:60:ef:f1:e1: 94:9c:32:fa:e4:30:01:fc:6b:00:d7:e6:db:66:03: 36:43:e1:89:c7:82:5e:55:44:77:75:ae:f3:8f:dd: a7:68:99:49:ae:47:5b:0e:87:77:26:73:fe:60:0e: d5:49:09:da:16:e3:14:df:6f:a4:f4:f6:a6:9d:05: 92:98:a1:36:bf:3f:0a:b4:97:86:7d:5b:25:50:25: 13:56:85:79:53:35:86:ba:9e:24:1f:bc:73:0b:ae: 2c:bf:76:49:2a:f0:68:d0:ba:e4:1b:87:94:a0:9e: 50:29:03:8c:03:f0:39:70:1d:ae:ca:a5:61:db:22: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:87:03:9F:6F:D5:7C:41:51:3A:4B:1E:78:7C:AE:DF:4C:5A:B4:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/467d1b5b-11e8-341d-8876-2e4dc0bb64f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.228.66.0-192.228.69.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fb:b4:94:bb:52:23:55:46:10:42:c7:ab:d8:c2:52:b5:26: c3:0d:90:43:ad:f0:0e:82:e7:7a:d0:72:a9:81:b5:90:77:97: b4:68:bb:07:f1:6e:30:99:25:1c:bd:54:cd:2e:6b:91:5e:e1: d3:ba:e8:de:3a:29:70:09:f3:6d:57:43:d8:85:a4:22:40:2f: ee:5f:fd:67:ce:da:87:40:6c:48:80:d0:a4:a1:15:19:a3:8d: 2b:6e:12:52:46:58:85:5b:98:55:83:0f:d2:97:af:5b:09:8e: 6b:d1:00:84:9e:fb:d8:1f:46:d7:20:4d:e6:5a:be:37:0f:13: 42:7a:c0:0d:c6:68:fc:9d:9c:b2:58:11:3b:59:7f:ec:b7:f2: b8:dd:d1:28:67:9c:8b:ac:31:fd:27:0d:5f:1b:c8:29:dc:19: f2:60:ad:43:46:29:ab:45:d6:cd:c8:48:f0:c0:41:d2:62:5c: e2:11:f9:00:d7:be:6e:6c:13:ea:af:fe:c1:16:f1:0e:50:47: c7:c3:2e:8a:cd:53:59:7f:4f:94:3a:53:45:73:7e:10:6a:c3: c6:4e:ec:ae:37:85:31:79:67:81:95:bb:46:ac:1f:ba:06:e4: 6f:e8:97:09:17:9d:87:b2:86:32:89:d0:89:70:21:e3:26:82: d8:5d:e0:81 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6niDOk0uzkDtsk74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjBjNjM5MTEtYzhhYi00ZThhLTk5MjYtYjhhMTZjYjRjZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjNFv44ae5BAISmfYJqWsGzmbVAswwqGFSe8 Q/gYTk3B3RO+cPHIlwk8RXdlZDY0i9Wddd7Du8fkHewp3HEtW+7cydelx4P+N9uq Fus9rgJy2EkkhbPOflhzSA+6IrV5K7WcA0jcJ2djVB8b2pRjUI1sT3aLsf332mVW SVmBt4KWHmDv8eGUnDL65DAB/GsA1+bbZgM2Q+GJx4JeVUR3da7zj92naJlJrkdb Dod3JnP+YA7VSQnaFuMU32+k9PamnQWSmKE2vz8KtJeGfVslUCUTVoV5UzWGup4k H7xzC64sv3ZJKvBo0LrkG4eUoJ5QKQOMA/A5cB2uyqVh2yJZ2QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJGHA59v1XxBUTpLHnh8rt9MWrRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvNDY3ZDFiNWItMTFlOC0z NDFkLTg4NzYtMmU0ZGMwYmI2NGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHA5EID BAHA5EQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhPu0lLtSI1VGEELHq9jCUrUmww2QQ63wDoLnetByqYG1 kHeXtGi7B/FuMJklHL1UzS5rkV7h07ro3jopcAnzbVdD2IWkIkAv7l/9Z87ah0Bs SIDQpKEVGaONK24SUkZYhVuYVYMP0pevWwmOa9EAhJ772B9G1yBN5lq+Nw8TQnrA DcZo/J2cslgRO1l/7LfyuN3RKGeci6wx/ScNXxvIKdwZ8mCtQ0Ypq0XWzchI8MBB 0mJc4hH5ANe+bmwT6q/+wRbxDlBHx8Muis1TWX9PlDpTRXN+EGrDxk7srjeFMXln gZW7Rqwfugbkb+iXCRedh7KGMonQiXAh4yaC2F3ggQ== -----END CERTIFICATE-----Generated at Wed Jul 29 10:09:49 2026 by rpki-client