$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/923e61cc-df16-3897-a731-3f8adcb8327f.roa File: 923e61cc-df16-3897-a731-3f8adcb8327f.roa (raw, json) Hash identifier: h1VHjxcnJOSGkp+eToUkhpRImbgQrcsIJf2wcAR2UTo= Subject key identifier: F4:40:4E:ED:F9:98:EF:6F:DB:EB:7B:02:CD:52:02:64:84:DF:1D:9C Certificate issuer: /CN=21732a88-a633-4eb1-af32-60e5e0e1082e Certificate serial: 010D0C9F4328584E7B95088A2D295C3F9A1E4180 Authority key identifier: 4D:F1:90:12:40:73:2C:5D:DC:39:67:AD:C1:9B:29:46:E7:C6:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/923e61cc-df16-3897-a731-3f8adcb8327f.roa Signing time: Mon 13 Jul 2026 07:13:13 +0000 ROA not before: Mon 13 Jul 2026 07:13:13 +0000 ROA not after: Sun 11 Oct 2026 07:13:13 +0000 asID: 402737 IP address blocks: 169.128.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:95:08:8a:2d:29:5c:3f:9a:1e:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21732a88-a633-4eb1-af32-60e5e0e1082e Validity Not Before: Jul 13 07:13:13 2026 GMT Not After : Oct 11 07:13:13 2026 GMT Subject: CN=6b1699f2-4678-439c-a1a2-609224486abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:0c:ee:69:51:eb:b7:40:12:f1:99:18:b1: cb:85:4a:f5:24:30:ad:47:68:ab:c9:a4:e8:d9:3e: 4f:56:7e:91:29:57:99:6c:fb:44:25:94:cc:2d:25: 3c:f1:39:d7:e3:d2:a6:f3:cf:ef:bf:e4:d0:8e:40: 5c:15:fe:bd:cf:40:16:f2:92:40:8d:a2:b2:a3:67: 6f:a8:af:1e:26:6c:bb:6a:5d:e2:ff:c4:55:d6:ba: 0c:0f:56:df:9e:63:fa:a6:da:bd:b7:3d:cc:eb:95: 99:4a:03:44:06:da:f6:7f:30:18:a7:d9:59:1f:d2: 3b:d5:52:ab:7b:2b:c0:eb:ea:85:bb:74:82:b8:68: 2b:ad:00:9c:9c:e4:17:fa:6c:fb:eb:48:b5:15:a0: 82:ad:9d:e8:ad:08:30:a1:8d:73:31:88:b0:f0:a4: 92:da:21:fa:d8:fa:cc:87:bb:5c:12:a7:1e:3b:69: 3d:b9:63:0b:e6:04:c9:2d:d2:29:97:58:c2:5a:6e: 55:9f:12:8c:04:a3:21:31:bc:cc:56:8a:fb:c0:84: ae:9f:93:59:f9:e9:30:14:09:7f:cd:25:57:e3:b0: 15:4d:89:b3:e3:74:0c:8e:bc:5d:f8:e2:13:56:03: 72:37:a4:ec:24:c3:ad:0b:11:4c:c6:e4:6d:33:73: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:40:4E:ED:F9:98:EF:6F:DB:EB:7B:02:CD:52:02:64:84:DF:1D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/923e61cc-df16-3897-a731-3f8adcb8327f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e/21732a88-a633-4eb1-af32-60e5e0e1082e.crl X509v3 Authority Key Identifier: keyid:4D:F1:90:12:40:73:2C:5D:DC:39:67:AD:C1:9B:29:46:E7:C6:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21732a88-a633-4eb1-af32-60e5e0e1082e.cer sbgp-ipAddrBlock: critical IPv4: 169.128.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0a:49:f4:2e:f2:89:48:0c:81:0f:7d:1d:e9:a3:eb:3d:e1: d9:50:47:f5:8e:52:88:79:b3:c9:b6:17:1d:d7:d2:40:ad:5c: 54:06:84:be:64:0b:ee:6d:d4:0d:f6:a5:00:eb:3d:a2:2b:87: 62:92:db:6c:fd:b4:08:3c:56:11:4d:e0:24:db:c7:72:05:8e: 72:71:9a:66:c7:eb:fe:3d:19:82:15:f5:00:4b:b8:99:c0:99: 9b:2b:f3:85:df:4f:0c:a0:74:0b:f5:5b:be:00:50:3b:4d:be: 84:11:d7:e7:85:2d:28:4e:d3:97:81:9f:ef:f2:7e:62:9a:f0: f0:21:fd:80:3b:0b:3b:74:fb:97:5b:47:3c:a8:4c:7b:34:32: 60:f4:2b:2a:02:b9:d8:7f:e6:5b:6c:59:5a:0c:75:73:a6:6e: 00:1b:f7:57:73:a2:74:06:71:46:c0:68:7b:73:24:bf:ec:d5: 23:5c:e8:a6:68:81:5b:f5:55:63:c2:27:eb:df:df:0f:37:23: 55:ce:51:da:53:35:e5:4a:b1:c2:e7:36:b6:56:1e:85:2b:ec: c6:48:ad:8b:3f:cf:f7:b4:99:a6:36:5e:e0:49:03:55:eb:e2: ed:9e:a5:7e:6b:d8:92:3a:b0:4f:60:e0:3c:5c:19:0d:28:ff: 9a:be:53:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57lQiKLSlcP5oeQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE3MzJhODgtYTYzMy00ZWIxLWFmMzItNjBlNWUwZTEw ODJlMB4XDTI2MDcxMzA3MTMxM1oXDTI2MTAxMTA3MTMxM1owLzEtMCsGA1UEAxMk NmIxNjk5ZjItNDY3OC00MzljLWExYTItNjA5MjI0NDg2YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTAM7mlR67dAEvGZGLHLhUr1JDCtR2iryaTo 2T5PVn6RKVeZbPtEJZTMLSU88TnX49Km88/vv+TQjkBcFf69z0AW8pJAjaKyo2dv qK8eJmy7al3i/8RV1roMD1bfnmP6ptq9tz3M65WZSgNEBtr2fzAYp9lZH9I71VKr eyvA6+qFu3SCuGgrrQCcnOQX+mz760i1FaCCrZ3orQgwoY1zMYiw8KSS2iH62PrM h7tcEqceO2k9uWML5gTJLdIpl1jCWm5VnxKMBKMhMbzMVor7wISun5NZ+ekwFAl/ zSVX47AVTYmz43QMjrxd+OITVgNyN6TsJMOtCxFMxuRtM3PXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRATu35mO9v2+t7As1SAmSE3x2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yMTcz MmE4OC1hNjMzLTRlYjEtYWYzMi02MGU1ZTBlMTA4MmUvOTIzZTYxY2MtZGYxNi0z ODk3LWE3MzEtM2Y4YWRjYjgzMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjE3MzJhODgtYTYzMy00ZWIxLWFm MzItNjBlNWUwZTEwODJlLzIxNzMyYTg4LWE2MzMtNGViMS1hZjMyLTYwZTVlMGUx MDgyZS5jcmwwHwYDVR0jBBgwFoAUTfGQEkBzLF3cOWetwZspRufGVrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yMTczMmE4OC1hNjMzLTRlYjEtYWYzMi02MGU1 ZTBlMTA4MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMKSfQu8olIDIEPfR3po+s94dlQR/WOUoh5s8m2Fx3X0kCtXFQGhL5k C+5t1A32pQDrPaIrh2KS22z9tAg8VhFN4CTbx3IFjnJxmmbH6/49GYIV9QBLuJnA mZsr84XfTwygdAv1W74AUDtNvoQR1+eFLShO05eBn+/yfmKa8PAh/YA7Czt0+5db RzyoTHs0MmD0KyoCudh/5ltsWVoMdXOmbgAb91dzonQGcUbAaHtzJL/s1SNc6KZo gVv1VWPCJ+vf3w83I1XOUdpTNeVKscLnNrZWHoUr7MZIrYs/z/e0maY2XuBJA1Xr 4u2epX5r2JI6sE9g4DxcGQ0o/5q+U5Y= -----END CERTIFICATE-----Generated at Thu Jul 23 19:59:59 2026 by rpki-client