$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: qar1PPowebhFgC5wQGOhlfRPZNQ2zYKvRTFMzRvMFDI= Subject key identifier: 98:67:F7:FB:1C:39:0A:A4:55:53:DB:E6:0F:78:3C:F3:96:9B:75:24 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E9A7FBB8AB2C5D7E5520EBB00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:bb:8a:b2:c5:d7:e5:52:0e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=f999aa86-ed82-4ec1-a7e7-787d84c8b7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:32:cd:53:dd:70:50:1b:b5:cd:53:01:d3: 8e:98:61:af:aa:b9:19:55:fb:2b:f3:27:7b:45:74: a7:14:84:df:d6:0a:28:25:2c:be:5f:2f:23:96:17: 3a:71:2e:54:d3:d7:8a:20:54:a4:e9:de:bb:b9:c1: 3c:56:87:3f:28:de:de:30:c2:8c:41:74:8c:96:58: 7f:d3:c8:ea:d8:83:b7:98:66:9f:f1:d8:13:de:6f: 96:fc:bc:ac:3c:f3:96:6f:79:5f:e6:3c:45:55:32: 45:5e:13:cd:84:35:0c:21:63:c8:93:97:c4:eb:80: 46:b3:22:a8:21:bc:c9:10:f2:ab:82:c2:ef:f4:d9: 7c:64:22:16:4e:26:48:c2:0d:d1:ee:ed:94:52:f6: c6:9a:9d:a7:64:11:7e:5f:8b:1e:8e:5f:3e:95:dc: ce:07:41:bb:bf:a9:e1:0a:6b:68:dc:6f:e7:82:b3: 0a:e8:a7:76:b1:c8:9b:63:19:f9:cb:e7:47:7f:bb: f2:8a:f4:c2:92:c2:9d:74:c8:6d:86:9a:80:bd:7b: 9f:99:c5:c3:57:ec:4f:a4:a0:bd:9f:04:8f:a1:d5: 58:76:39:c0:23:2d:7f:89:a5:3c:0c:a0:a0:8b:8c: 91:3b:c3:a2:ed:c7:6b:48:c0:6c:5b:f3:48:5d:aa: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:67:F7:FB:1C:39:0A:A4:55:53:DB:E6:0F:78:3C:F3:96:9B:75:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:81:ef:0b:dd:4e:64:e5:b8:94:67:02:6c:00:4a:c2:2a:3d: 4f:8f:0f:8d:cb:e4:b5:7e:60:ed:2d:dc:dc:cd:0d:6d:c2:d0: e5:45:d5:bf:46:3f:97:4c:a4:92:f7:7b:ab:de:1b:c9:d6:71: 6e:8f:5a:52:15:8b:2f:0b:96:35:c4:29:66:7a:eb:53:51:f1: 73:5c:c1:e7:4c:52:e7:e2:c6:b3:75:32:04:c1:47:70:e3:a5: de:56:c0:b0:d3:46:3b:5e:9d:1f:d8:a5:25:d1:a1:46:eb:a8: e3:87:54:48:55:c2:c3:cf:f7:6c:fc:5b:96:09:e6:96:6e:cd: aa:3c:1b:a4:1d:31:bd:f5:fd:e5:66:af:2d:3f:d6:3a:5d:96: a5:b3:16:2e:1b:5e:b1:17:6d:27:87:c9:b3:45:49:91:f7:d7: c0:6a:11:a8:c2:ba:b1:5b:85:86:39:40:b9:cd:31:72:49:d4: 3f:ca:d0:7c:78:e3:f7:6d:6e:d3:e5:a2:75:03:88:ac:f6:3b: 5b:0a:fd:00:29:08:1e:f0:ca:c3:c9:85:9a:98:15:64:d6:89: f6:76:95:32:07:5d:9c:3f:71:7c:c7:db:a9:d6:ab:29:f8:f1: cb:8e:80:ea:ec:3c:9a:ec:f5:4c:19:3c:c2:8b:51:90:e8:e2: b4:cf:ae:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7uKssXX5VIOuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk Zjk5OWFhODYtZWQ4Mi00ZWMxLWE3ZTctNzg3ZDg0YzhiN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQgyzVPdcFAbtc1TAdOOmGGvqrkZVfsr8yd7 RXSnFITf1gooJSy+Xy8jlhc6cS5U09eKIFSk6d67ucE8Voc/KN7eMMKMQXSMllh/ 08jq2IO3mGaf8dgT3m+W/LysPPOWb3lf5jxFVTJFXhPNhDUMIWPIk5fE64BGsyKo IbzJEPKrgsLv9Nl8ZCIWTiZIwg3R7u2UUvbGmp2nZBF+X4sejl8+ldzOB0G7v6nh Cmto3G/ngrMK6Kd2scibYxn5y+dHf7vyivTCksKddMhthpqAvXufmcXDV+xPpKC9 nwSPodVYdjnAIy1/iaU8DKCgi4yRO8Oi7cdrSMBsW/NIXaqt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhn9/scOQqkVVPb5g94PPOWm3UkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKB7wvdTmTluJRnAmwASsIqPU+PD43L5LV+YO0t3NzNDW3C0OVF1b9G P5dMpJL3e6veG8nWcW6PWlIViy8LljXEKWZ661NR8XNcwedMUufixrN1MgTBR3Dj pd5WwLDTRjtenR/YpSXRoUbrqOOHVEhVwsPP92z8W5YJ5pZuzao8G6QdMb31/eVm ry0/1jpdlqWzFi4bXrEXbSeHybNFSZH318BqEajCurFbhYY5QLnNMXJJ1D/K0Hx4 4/dtbtPlonUDiKz2O1sK/QApCB7wysPJhZqYFWTWifZ2lTIHXZw/cXzH26nWqyn4 8cuOgOrsPJrs9UwZPMKLUZDo4rTPrrg= -----END CERTIFICATE-----Generated at Fri Jul 24 19:36:46 2026 by rpki-client