$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa File: e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa (raw, json) Hash identifier: pCSqyI0fNHqgfhnGdMJM0V60uDgX6VseTLK3hfxoAeU= Subject key identifier: 3C:27:3D:1A:45:23:02:A1:15:C3:BD:B4:DF:E6:D4:49:C9:8D:7E:A3 Certificate issuer: /CN=02858587-45de-40d7-9b70-faa916db9aa3 Certificate serial: 010D0C9F4328584E86F5108EB9299542DFDEA780 Authority key identifier: 9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 31898 IP address blocks: 65.20.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:10:8e:b9:29:95:42:df:de:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02858587-45de-40d7-9b70-faa916db9aa3 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=79e15b16-2321-47dc-b53e-bef10c3320ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:0c:52:81:06:68:44:62:c3:3b:be:a6:f0: a8:15:e6:41:e2:04:12:d0:52:d0:e8:fa:a8:21:74: d1:e8:19:ec:8e:01:7b:21:d6:0a:af:ca:07:2e:d2: 15:b1:52:b0:dd:f5:9e:8b:26:89:de:fb:a2:ad:1a: ee:bd:a5:32:e9:30:98:b2:be:67:b4:bb:26:9d:80: 5a:09:57:de:5c:b3:34:2a:af:69:3b:01:c4:73:00: 4d:dd:2e:ba:c0:72:27:13:6f:58:20:d4:27:36:75: a2:41:ff:5b:22:d1:09:ed:35:76:aa:c4:e0:6e:c0: bb:cf:5e:78:0c:a6:5d:3c:5b:26:d2:24:a6:56:7d: 38:37:8e:2b:b9:a9:4a:ea:f8:b0:6d:6d:f3:59:27: a1:5c:4a:8b:35:1f:89:70:30:25:2e:34:da:e6:bf: 58:2c:13:9d:ac:91:ab:dd:74:59:81:0e:81:84:87: 04:7a:a1:89:e5:0a:b3:c6:68:45:b9:05:22:a2:3a: cd:e4:ca:44:bc:f8:97:e5:84:e9:82:81:ef:4d:c3: b9:d6:f7:3b:d7:4e:80:e2:f5:94:32:90:1a:52:45: a6:6b:26:d0:36:9a:04:1d:63:a2:ac:50:d1:0c:3a: 9f:7a:98:4b:c5:ba:6b:f0:50:bf:76:7d:06:53:fb: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:27:3D:1A:45:23:02:A1:15:C3:BD:B4:DF:E6:D4:49:C9:8D:7E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/e919f5d7-15f4-3d9a-aad1-94f19ddb2962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3/02858587-45de-40d7-9b70-faa916db9aa3.crl X509v3 Authority Key Identifier: keyid:9A:41:4F:AC:FA:D0:57:64:41:03:CC:99:A8:DC:AA:AE:ED:30:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02858587-45de-40d7-9b70-faa916db9aa3.cer sbgp-ipAddrBlock: critical IPv4: 65.20.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:56:68:bc:e7:25:d3:05:e6:1b:b3:83:f0:78:91:e2:a7:3e: e4:4d:32:60:8d:04:57:41:a8:44:f6:7e:4a:95:d2:40:64:8b: 2f:6a:16:19:73:ce:dd:5f:2a:85:01:6a:bf:cc:a4:e9:86:32: a5:22:e9:fc:07:1d:55:ea:6d:e6:06:08:0b:89:ca:83:43:54: 4c:ff:f1:66:9c:ce:56:b5:92:3c:9e:bc:f8:47:f9:bb:f8:ff: ed:dd:5e:1d:e7:29:59:d3:cd:33:4e:0e:12:69:23:0d:fd:2e: 67:00:b2:84:07:e9:da:37:0a:bc:2a:91:56:b6:3b:82:62:27: 7b:c2:69:13:44:01:3d:32:36:35:1c:d1:9b:4a:02:91:05:1a: 82:ad:32:f1:70:ac:81:68:fb:82:27:b0:94:2c:ea:63:80:af: b8:c5:13:67:84:58:c0:ac:89:ca:ca:2d:6b:ee:8b:37:4b:a1: 3a:44:4a:26:0b:c1:f3:11:b2:3a:bc:52:14:a2:f3:46:9e:8c: e6:96:5b:50:59:ab:68:6f:e0:6a:0e:bd:f7:a0:90:84:d8:60: ad:a5:e0:e5:0e:98:38:6e:d1:a4:e3:f3:90:f5:1e:de:2d:a1: 7e:0d:a1:da:f3:7b:74:9a:6a:e8:54:e2:c1:70:04:f7:46:04: 69:1c:95:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9RCOuSmVQt/ep4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4NTg1ODctNDVkZS00MGQ3LTliNzAtZmFhOTE2ZGI5 YWEzMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NzllMTViMTYtMjMyMS00N2RjLWI1M2UtYmVmMTBjMzMyMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtUMUoEGaERiwzu+pvCoFeZB4gQS0FLQ6Pqo IXTR6BnsjgF7IdYKr8oHLtIVsVKw3fWeiyaJ3vuirRruvaUy6TCYsr5ntLsmnYBa CVfeXLM0Kq9pOwHEcwBN3S66wHInE29YINQnNnWiQf9bItEJ7TV2qsTgbsC7z154 DKZdPFsm0iSmVn04N44rualK6viwbW3zWSehXEqLNR+JcDAlLjTa5r9YLBOdrJGr 3XRZgQ6BhIcEeqGJ5QqzxmhFuQUiojrN5MpEvPiX5YTpgoHvTcO51vc7106A4vWU MpAaUkWmaybQNpoEHWOirFDRDDqfephLxbpr8FC/dn0GU/tiWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwnPRpFIwKhFcO9tN/m1EnJjX6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjg1 ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5MTZkYjlhYTMvZTkxOWY1ZDctMTVmNC0z ZDlhLWFhZDEtOTRmMTlkZGIyOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDI4NTg1ODctNDVkZS00MGQ3LTli NzAtZmFhOTE2ZGI5YWEzLzAyODU4NTg3LTQ1ZGUtNDBkNy05YjcwLWZhYTkxNmRi OWFhMy5jcmwwHwYDVR0jBBgwFoAUmkFPrPrQV2RBA8yZqNyqru0wBzAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjg1ODU4Ny00NWRlLTQwZDctOWI3MC1mYWE5 MTZkYjlhYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRQ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpWaLznJdMF5huzg/B4keKnPuRNMmCNBFdBqET2fkqV0kBkiy9qFhlz zt1fKoUBar/MpOmGMqUi6fwHHVXqbeYGCAuJyoNDVEz/8Waczla1kjyevPhH+bv4 /+3dXh3nKVnTzTNODhJpIw39LmcAsoQH6do3CrwqkVa2O4JiJ3vCaRNEAT0yNjUc 0ZtKApEFGoKtMvFwrIFo+4InsJQs6mOAr7jFE2eEWMCsicrKLWvuizdLoTpESiYL wfMRsjq8UhSi80aejOaWW1BZq2hv4GoOvfegkITYYK2l4OUOmDhu0aTj85D1Ht4t oX4Nodrze3SaauhU4sFwBPdGBGkclfI= -----END CERTIFICATE-----Generated at Fri Jul 24 14:30:53 2026 by rpki-client