$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa File: c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa (raw, json) Hash identifier: xRg9BM52PU7TMsjE/wg0yHaX7J2DjR31NZ+QrDdMAtU= Subject key identifier: BB:82:D0:65:3A:04:24:DF:92:4B:FB:E9:09:64:08:5D:4E:67:AC:05 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5A4A02ED0CC75F3BCB65D480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 1225 IP address blocks: 198.64.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:02:ed:0c:c7:5f:3b:cb:65:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=345ba516-22a6-4f2e-87c8-40657e27455d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:76:52:c2:3c:59:38:23:62:3c:fd:9e:4a:bd: 2f:8c:39:62:33:e8:e0:1c:3c:1f:0e:a6:60:7b:c5: f5:fc:2b:9f:ac:ef:d4:35:09:f7:1e:18:79:28:6f: a9:3b:9d:8a:3b:2a:a7:92:4d:49:c3:4c:4e:4c:db: 0f:75:8f:df:6e:b4:5b:5d:b2:92:41:e6:a7:68:be: 0f:e5:d5:89:fb:1d:b0:41:75:f5:53:68:9f:70:e8: 78:66:85:fa:81:bb:2d:dd:13:b0:67:02:14:48:fc: 32:b1:8d:27:5d:81:53:cd:53:30:64:a9:66:56:ec: d5:46:28:e6:be:22:78:ea:8a:3b:0c:5c:c6:e5:08: 3f:ac:0c:a4:8b:1a:f5:d3:0f:2b:10:ce:c9:79:5e: a8:f7:a2:81:50:23:ec:1a:af:96:0b:96:ca:51:71: e7:b1:4b:6c:38:8a:22:05:48:ee:94:37:41:ac:94: 6d:52:de:99:99:b8:50:82:7e:2e:0e:1a:1d:b3:2c: 02:cc:5b:39:a3:3e:51:9c:74:e1:6a:6b:52:31:f5: 07:05:34:71:4c:3c:35:10:41:fc:9d:60:5a:1d:cb: 9c:49:8e:b9:88:bf:4e:66:9a:9f:56:2a:f1:76:80: de:6e:38:7b:c9:be:15:90:ec:1a:d7:48:74:16:e1: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:82:D0:65:3A:04:24:DF:92:4B:FB:E9:09:64:08:5D:4E:67:AC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:15:ab:09:4f:87:b4:5b:7a:ac:62:5c:26:07:09:8e:c7:9e: d8:91:50:3a:7a:73:ef:2c:56:02:e9:f7:2f:10:af:f5:07:7c: 58:66:39:4b:2c:b6:81:30:74:be:ff:b3:ae:79:9b:96:27:79: c4:63:66:9a:2e:43:ce:d7:39:a9:e5:5b:0f:c7:13:40:2d:2a: c6:d6:1a:43:2b:ff:80:bd:9a:55:6d:9f:33:18:0c:bf:26:32: 4a:bb:e2:31:36:49:af:d5:c5:f8:7c:cf:81:d6:de:94:c7:7a: 55:a6:6f:3d:9d:5c:e1:83:76:ee:c2:b6:8e:b0:3f:ef:8b:36: 20:9d:e6:af:25:21:60:58:7e:29:54:95:24:fc:67:de:c9:89: a7:c6:2f:70:4c:50:ad:e4:95:30:60:61:3f:29:10:f5:a6:c1: ba:fc:9e:82:d3:af:34:65:b8:de:08:58:e7:db:c3:05:1f:45: 6a:fd:7f:5e:87:d6:21:8e:56:07:da:df:e6:d6:07:4a:6a:1b: 7f:a2:88:b3:87:b5:33:21:e1:f2:bd:1b:6e:ec:5a:c0:77:69: 8e:bd:50:e2:5c:ed:a2:cc:f6:85:87:48:21:9c:f0:44:53:de: d4:22:22:be:3c:63:3c:f3:3d:a8:27:df:d4:41:b5:a6:db:62: 7c:82:26:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgLtDMdfO8tl1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk MzQ1YmE1MTYtMjJhNi00ZjJlLTg3YzgtNDA2NTdlMjc0NTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXZSwjxZOCNiPP2eSr0vjDliM+jgHDwfDqZg e8X1/CufrO/UNQn3Hhh5KG+pO52KOyqnkk1Jw0xOTNsPdY/fbrRbXbKSQeanaL4P 5dWJ+x2wQXX1U2ifcOh4ZoX6gbst3ROwZwIUSPwysY0nXYFTzVMwZKlmVuzVRijm viJ46oo7DFzG5Qg/rAykixr10w8rEM7JeV6o96KBUCPsGq+WC5bKUXHnsUtsOIoi BUjulDdBrJRtUt6ZmbhQgn4uDhodsywCzFs5oz5RnHThamtSMfUHBTRxTDw1EEH8 nWBaHcucSY65iL9OZpqfVirxdoDebjh7yb4VkOwa10h0FuGUIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuC0GU6BCTfkkv76QlkCF1OZ6wFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzIzNjBkZDItNThkZS0z OTZkLWE1YmYtNWZkZjVhN2ZmZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQVqwlPh7RbeqxiXCYHCY7HntiRUDp6c+8sVgLp9y8Qr/UHfFhmOUss toEwdL7/s655m5YnecRjZpouQ87XOanlWw/HE0AtKsbWGkMr/4C9mlVtnzMYDL8m Mkq74jE2Sa/Vxfh8z4HW3pTHelWmbz2dXOGDdu7Cto6wP++LNiCd5q8lIWBYfilU lST8Z97JiafGL3BMUK3klTBgYT8pEPWmwbr8noLTrzRluN4IWOfbwwUfRWr9f16H 1iGOVgfa3+bWB0pqG3+iiLOHtTMh4fK9G27sWsB3aY69UOJc7aLM9oWHSCGc8ERT 3tQiIr48YzzzPagn39RBtabbYnyCJic= -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:26 2026 by rpki-client