$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa File: db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json) Hash identifier: PMpKgzHC8dbsbgv0QHxzLajU1OAf+xrCm8BnKKtmMHs= Subject key identifier: 19:49:4C:2F:68:6B:E5:A6:E0:CE:64:A0:F1:E9:ED:E5:8B:A9:76:DC Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584E86F4EB1F73D738A07061E700 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 22808 IP address blocks: 66.112.128.8/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:eb:1f:73:d7:38:a0:70:61:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=28afbeba-bd00-4e52-83ea-367e3d10d72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:95:95:e8:66:3f:09:fc:b2:a0:63:dd:74: 50:a0:7b:b4:d2:1d:60:09:b4:49:36:42:70:99:be: 9d:9f:39:ae:43:7b:64:f3:fe:75:6d:28:29:03:d8: e9:39:83:56:9a:cf:2c:c6:bb:40:c1:a3:38:16:9d: 1a:3a:28:6c:a7:ff:31:21:3f:61:21:84:d4:63:7d: 22:45:8c:b5:4e:f0:bc:b6:f6:99:5c:51:cd:c7:9d: d1:16:c8:a6:98:98:be:9d:3c:dd:94:18:e6:1a:3a: f4:49:32:8c:e4:da:82:75:a8:47:c5:1b:10:9c:f1: a9:ec:6c:0e:1c:36:5a:a2:68:d5:93:5c:01:d6:5f: 5b:7b:62:60:16:ef:30:a8:5e:ec:25:c4:0b:a4:dd: 33:6b:a3:08:5e:9b:5e:3f:f3:68:e3:4b:07:67:61: 31:9e:01:b9:a6:b4:61:b1:ed:a6:ae:3d:62:ad:d9: 72:c8:3b:0f:b2:77:b4:f7:3c:c2:21:7a:b9:fa:6a: dd:e6:13:fa:2b:96:70:7e:12:de:6d:2f:a1:f1:2e: df:f5:24:61:d8:a9:37:35:1c:be:7a:7c:05:58:c7: 82:18:c5:01:76:69:af:a9:6f:69:1a:25:92:9f:c4: 23:7d:6c:7e:e0:90:cf:de:26:e6:42:92:9b:09:ce: f4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:49:4C:2F:68:6B:E5:A6:E0:CE:64:A0:F1:E9:ED:E5:8B:A9:76:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.8/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5a:cc:1c:f7:71:29:b4:24:fc:77:87:69:76:67:6c:74:2c: a6:00:06:08:12:a5:17:05:4f:3e:79:18:e9:56:f2:60:24:ec: d7:27:0a:60:ec:c8:e3:cd:97:b9:2c:dd:19:36:ca:ae:a8:4b: 5f:18:f7:9c:4c:89:16:ba:a0:b6:94:3d:b2:78:bf:a5:c9:3d: 67:38:e2:b7:68:86:27:60:4d:9d:07:a7:c4:25:ab:9d:6a:74: 87:3e:d8:6d:5a:c1:f6:71:11:77:7e:b6:f8:10:c3:f9:91:f9: 8e:90:81:1c:fa:3d:bf:46:b1:e9:39:79:c6:19:b9:2e:d9:32: 88:09:01:ce:ff:cd:02:69:5f:42:11:1d:04:e6:e2:f8:b6:f1: e0:46:1a:17:a8:68:96:19:57:af:06:68:7b:eb:01:30:b0:d4: 2d:49:ca:d5:36:ee:4a:43:e7:f5:0a:4b:9c:4e:c4:a5:32:67: 7b:0f:c1:e1:bc:a5:d8:8f:8c:54:22:6e:32:ed:70:dc:54:b1: ec:5c:84:53:24:13:bb:1a:52:f0:cc:76:27:fa:33:88:64:7e: d2:3e:46:a0:46:fe:fe:bd:76:e4:3a:1a:c1:a0:be:ff:a4:57: 9c:fb:a8:ae:db:03:84:2d:29:6b:f4:46:e6:ef:8c:d8:c8:31: 53:3a:b3:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6G9Osfc9c4oHBh5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MjhhZmJlYmEtYmQwMC00ZTUyLTgzZWEtMzY3ZTNkMTBkNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCiVlehmPwn8sqBj3XRQoHu00h1gCbRJNkJw mb6dnzmuQ3tk8/51bSgpA9jpOYNWms8sxrtAwaM4Fp0aOihsp/8xIT9hIYTUY30i RYy1TvC8tvaZXFHNx53RFsimmJi+nTzdlBjmGjr0STKM5NqCdahHxRsQnPGp7GwO HDZaomjVk1wB1l9be2JgFu8wqF7sJcQLpN0za6MIXpteP/No40sHZ2ExngG5prRh se2mrj1irdlyyDsPsne09zzCIXq5+mrd5hP6K5ZwfhLebS+h8S7f9SRh2Kk3NRy+ enwFWMeCGMUBdmmvqW9pGiWSn8QjfWx+4JDP3ibmQpKbCc70lwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBlJTC9oa+Wm4M5koPHp7eWLqXbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZGIwYmUzNmMtZGJiYi0z NWIyLWFhODEtZTg0MjE2M2EyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDQnCACDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhWswc93EptCT8d4dpdmdsdCymAAYIEqUXBU8+eRjpVvJgJOzXJwpg 7MjjzZe5LN0ZNsquqEtfGPecTIkWuqC2lD2yeL+lyT1nOOK3aIYnYE2dB6fEJaud anSHPthtWsH2cRF3frb4EMP5kfmOkIEc+j2/RrHpOXnGGbku2TKICQHO/80CaV9C ER0E5uL4tvHgRhoXqGiWGVevBmh76wEwsNQtScrVNu5KQ+f1CkucTsSlMmd7D8Hh vKXYj4xUIm4y7XDcVLHsXIRTJBO7GlLwzHYn+jOIZH7SPkagRv7+vXbkOhrBoL7/ pFec+6iu2wOELSlr9Ebm74zYyDFTOrNK -----END CERTIFICATE-----Generated at Fri Jul 24 04:34:25 2026 by rpki-client