$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa File: 959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa (raw, json) Hash identifier: l2li3qVi1OJLyoQWVeCpZr91pYL6/M0Hslz+c+V6P2I= Subject key identifier: 10:14:D7:9A:AA:03:C7:A4:1F:13:14:7A:E7:A3:EF:2F:75:24:74:87 Certificate issuer: /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Certificate serial: 010D0C9F4328584E779A24ED8E0647ED11CDD580 Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 22351 IP address blocks: 66.36.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:24:ed:8e:06:47:ed:11:cd:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=e4a4d53e-39f1-4b2b-8666-26e83f77751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:63:09:43:73:5a:ed:aa:1f:77:ea:ec:86: 7f:b1:59:0c:54:0d:b9:f0:94:9d:6c:90:d3:e6:ad: 98:cb:55:c3:80:c0:d1:48:22:49:07:93:ef:9c:b1: 4c:79:8f:52:a5:21:34:a3:92:04:04:44:34:25:ba: 20:54:96:9c:b3:0f:e1:87:60:1e:ad:7d:84:7d:41: 5e:2a:6b:87:67:21:49:fb:c0:89:5b:8e:ce:d9:de: 09:1c:1d:d1:5c:8b:74:a2:bc:46:6f:30:91:ec:e8: 5e:bc:24:e8:52:57:2f:b6:98:fe:3f:8f:12:9b:48: b3:54:c4:28:d5:21:02:ff:c0:83:b4:76:ba:4d:1c: cc:d1:d9:99:ed:bb:e8:54:d5:1e:1b:de:eb:67:7a: db:fa:76:23:bc:c3:b4:0a:3f:f0:8e:7c:5c:c6:40: ef:8a:be:6b:58:c1:4b:26:46:fd:f4:07:17:dc:c4: 85:31:06:db:35:66:8f:01:16:c5:74:8b:6c:63:96: 38:a4:ff:a1:34:14:70:1e:5a:95:0f:4d:5a:d2:a7: e5:35:4d:3c:21:6d:ac:0c:93:d8:ec:1c:ec:90:42: e8:c6:31:7f:66:c3:55:30:03:69:d0:30:b6:65:1b: 90:b5:57:b9:ed:77:27:f0:17:28:2d:4b:3a:2d:38: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:D7:9A:AA:03:C7:A4:1F:13:14:7A:E7:A3:EF:2F:75:24:74:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/959877d0-e1a7-3d85-814d-8bfef58d1e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl X509v3 Authority Key Identifier: keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer sbgp-ipAddrBlock: critical IPv4: 66.36.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ea:b1:2f:e9:91:bc:95:5f:21:dd:39:16:85:22:10:e6:ae: 93:9c:5e:10:17:6c:b3:b2:1a:0e:d6:d5:91:0b:58:3f:67:16: 34:e3:3b:b2:8e:ae:54:39:91:67:1c:98:e6:41:2c:dc:a7:57: 8e:f9:72:8d:a0:cb:d7:fd:16:08:c4:24:65:9e:91:3c:19:c2: 68:f1:dd:18:01:c1:e5:3d:2b:ec:84:5d:fd:6c:fa:85:3a:f3: d1:87:63:d1:1d:fa:f6:6f:5b:bb:e5:e4:6b:6f:81:47:fa:c6: 2c:5c:8b:a9:b1:33:f9:14:d6:79:73:af:06:db:08:a9:26:5c: 72:d8:2a:f9:25:bb:14:30:f4:d0:b4:22:23:89:68:08:d1:2d: 42:0d:18:43:d1:84:84:19:d0:fe:a5:75:04:99:be:8e:5a:f5: 2d:cb:b7:4a:6b:b5:c9:5b:ca:c6:95:d6:56:27:5f:bd:39:b5: d1:e6:a1:86:10:31:8a:41:85:51:ba:15:8d:56:18:d0:00:54: a6:ad:a8:7e:9a:28:23:db:5c:c5:ae:08:76:88:41:38:1d:cb: a3:f2:50:40:66:1b:2a:5b:b4:f3:80:08:e2:22:64:31:68:4d: 81:5a:68:46:2e:16:c7:34:43:fd:5c:f3:40:1e:98:c6:c7:00: 15:f3:89:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53miTtjgZH7RHN1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm YTUzMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ZTRhNGQ1M2UtMzlmMS00YjJiLTg2NjYtMjZlODNmNzc3NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjudjCUNzWu2qH3fq7IZ/sVkMVA258JSdbJDT 5q2Yy1XDgMDRSCJJB5PvnLFMeY9SpSE0o5IEBEQ0JbogVJacsw/hh2AerX2EfUFe KmuHZyFJ+8CJW47O2d4JHB3RXIt0orxGbzCR7OhevCToUlcvtpj+P48Sm0izVMQo 1SEC/8CDtHa6TRzM0dmZ7bvoVNUeG97rZ3rb+nYjvMO0Cj/wjnxcxkDvir5rWMFL Jkb99AcX3MSFMQbbNWaPARbFdItsY5Y4pP+hNBRwHlqVD01a0qflNU08IW2sDJPY 7BzskELoxjF/ZsNVMANp0DC2ZRuQtVe57Xcn8BcoLUs6LTgh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAU15qqA8ekHxMUeuej7y91JHSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0 YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvOTU5ODc3ZDAtZTFhNy0z ZDg1LTgxNGQtOGJmZWY1OGQxZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3 NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5 ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/qsS/pkbyVXyHdORaFIhDmrpOcXhAXbLOyGg7W1ZELWD9nFjTjO7KO rlQ5kWccmOZBLNynV475co2gy9f9FgjEJGWekTwZwmjx3RgBweU9K+yEXf1s+oU6 89GHY9Ed+vZvW7vl5GtvgUf6xixci6mxM/kU1nlzrwbbCKkmXHLYKvkluxQw9NC0 IiOJaAjRLUINGEPRhIQZ0P6ldQSZvo5a9S3Lt0prtclbysaV1lYnX705tdHmoYYQ MYpBhVG6FY1WGNAAVKatqH6aKCPbXMWuCHaIQTgdy6PyUEBmGypbtPOACOIiZDFo TYFaaEYuFsc0Q/1c80AemMbHABXziTE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:07:35 2026 by rpki-client