$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/323147db-7dd9-3ca3-be2b-6ddf3b0bbc20.roa File: 323147db-7dd9-3ca3-be2b-6ddf3b0bbc20.roa (raw, json) Hash identifier: zzFcx7afoN1Huxy9w8OPQiqkZtrxzvejsm1XuAWahYk= Subject key identifier: B5:0D:12:79:45:F8:5F:C5:A4:68:FA:BE:05:B3:9C:C0:FC:EA:3E:08 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B9478D9CE2FD69D59B838C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/323147db-7dd9-3ca3-be2b-6ddf3b0bbc20.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 209.55.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:78:d9:ce:2f:d6:9d:59:b8:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=407cd4bc-bec3-41e8-afd0-9cdb7c60f1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:75:9e:40:24:00:53:fc:c7:3a:d6:aa:dd: 62:c0:8c:c1:e1:40:e6:29:c7:93:06:6b:c7:44:d1: f4:35:d8:e3:3c:82:5a:40:14:01:7c:eb:97:ea:8f: c8:11:dd:d4:7f:aa:ca:bc:15:37:a5:a2:30:47:03: 8d:41:0a:4c:12:f3:e0:62:9f:25:b6:cd:dd:1a:ab: b1:a7:92:a9:7b:ad:0c:fe:38:85:03:fa:ba:f6:6d: 8c:bd:2f:ec:67:b4:ff:f3:63:a8:f5:41:63:29:d6: 7e:7b:d5:98:ca:fe:c4:a8:56:30:72:6c:c9:1e:b9: 5f:59:d0:54:cf:55:95:90:b7:17:08:aa:a7:f1:95: ed:2b:9f:65:d5:45:8c:20:14:27:18:48:4e:43:33: af:71:ea:a6:6f:20:24:69:44:6e:a0:ef:6b:ea:67: cc:c2:b7:e8:1e:8e:a0:dd:06:4f:ca:dc:34:19:25: 2b:8a:15:f2:5e:f2:06:2e:3d:f7:25:fa:5a:c4:c8: e1:9c:c5:d8:37:3a:cd:50:90:36:93:9f:17:38:d2: 1a:8e:b2:38:26:25:2c:c7:3d:7d:a6:ff:e1:0c:95: 25:55:2d:82:33:f9:c1:54:28:9f:12:79:c5:a3:12: de:3b:35:29:23:40:c3:e1:34:9f:45:d1:8d:cf:98: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0D:12:79:45:F8:5F:C5:A4:68:FA:BE:05:B3:9C:C0:FC:EA:3E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/323147db-7dd9-3ca3-be2b-6ddf3b0bbc20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:1c:aa:59:fd:bb:65:a9:c7:3f:2f:e8:4c:81:68:18:68:03: a0:cb:f9:78:23:0f:68:e1:40:2d:8c:7d:a1:24:67:20:d2:f7: 36:e8:2e:d4:f8:e3:a9:2c:36:e7:a6:cd:2a:65:79:2f:b0:57: 70:0b:83:05:3d:92:fb:84:c1:c2:e7:6b:87:70:63:79:f6:3c: 64:b0:f0:82:74:8c:67:ad:d8:9d:c4:14:e7:2a:fd:57:82:84: e0:a9:f0:4e:89:18:42:68:7c:2a:11:11:d0:a0:71:af:50:83: b2:10:34:48:d9:a4:80:72:f5:6a:bc:03:96:89:2b:a9:a2:2b: c2:a0:55:3f:73:23:eb:c5:b1:b8:9e:a2:cd:83:67:0f:9c:4c: 37:7e:d7:72:17:e7:4f:cd:16:5e:d0:52:1d:d4:be:9b:c7:6d: 7f:74:37:2c:6d:22:47:e4:7a:b0:bc:3b:a2:45:bc:f7:a8:9f: b9:8c:87:68:ec:07:63:e0:1c:54:b9:5c:a4:83:19:e3:ab:fe: 64:c0:44:cf:47:30:d8:69:fa:80:b8:d3:58:ee:52:e2:d1:1c: 65:21:ac:3f:98:19:0b:30:0d:c1:d1:f6:e6:6a:0d:5a:79:1d: 26:b6:06:14:70:ba:e7:8a:b2:20:7a:12:78:94:92:42:d1:87: 30:d3:7c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lHjZzi/WnVm4OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk NDA3Y2Q0YmMtYmVjMy00MWU4LWFmZDAtOWNkYjdjNjBmMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+91nkAkAFP8xzrWqt1iwIzB4UDmKceTBmvH RNH0NdjjPIJaQBQBfOuX6o/IEd3Uf6rKvBU3paIwRwONQQpMEvPgYp8lts3dGqux p5Kpe60M/jiFA/q69m2MvS/sZ7T/82Oo9UFjKdZ+e9WYyv7EqFYwcmzJHrlfWdBU z1WVkLcXCKqn8ZXtK59l1UWMIBQnGEhOQzOvceqmbyAkaURuoO9r6mfMwrfoHo6g 3QZPytw0GSUrihXyXvIGLj33JfpaxMjhnMXYNzrNUJA2k58XONIajrI4JiUsxz19 pv/hDJUlVS2CM/nBVCifEnnFoxLeOzUpI0DD4TSfRdGNz5g+swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUNEnlF+F/FpGj6vgWznMD86j4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzIzMTQ3ZGItN2RkOS0z Y2EzLWJlMmItNmRkZjNiMGJiYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKscqln9u2Wpxz8v6EyBaBhoA6DL+XgjD2jhQC2MfaEkZyDS9zboLtT4 46ksNuemzSpleS+wV3ALgwU9kvuEwcLna4dwY3n2PGSw8IJ0jGet2J3EFOcq/VeC hOCp8E6JGEJofCoREdCgca9Qg7IQNEjZpIBy9Wq8A5aJK6miK8KgVT9zI+vFsbie os2DZw+cTDd+13IX50/NFl7QUh3UvpvHbX90NyxtIkfkerC8O6JFvPeon7mMh2js B2PgHFS5XKSDGeOr/mTARM9HMNhp+oC401juUuLRHGUhrD+YGQswDcHR9uZqDVp5 HSa2BhRwuueKsiB6EniUkkLRhzDTfK4= -----END CERTIFICATE-----Generated at Fri Jul 24 09:32:17 2026 by rpki-client