$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json) Hash identifier: cqReZ0rCKnKCUQQbLATGNbZhlXAnAuNCISU0/d4X5j4= Subject key identifier: 0E:12:32:EA:30:7E:D2:16:DD:04:6D:E1:46:68:76:22:48:5B:8D:5B Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E94EA52450229EABA31528080 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 22781 IP address blocks: 216.131.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:52:45:02:29:ea:ba:31:52:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=657595bc-c60b-4a3a-93eb-483834a8a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:94:9d:1d:d2:65:e1:10:28:41:a5:18:28: d6:41:75:40:26:a1:3a:f9:68:47:d7:a3:16:27:29: 84:63:2a:98:fb:5c:56:74:f8:4e:fc:a3:62:32:34: 21:3d:46:16:a5:3a:14:5f:e6:55:e1:1e:2b:5c:1e: 57:8f:0e:78:75:db:6e:df:81:a1:76:bc:47:14:14: c3:5c:94:11:f3:d1:a0:52:8b:a4:66:9e:5e:21:3d: db:78:f7:c2:38:e2:38:16:60:3a:7b:13:fa:92:3e: 3c:5a:6f:3e:ca:4d:7e:82:1f:3b:24:c8:ac:0e:90: a7:5c:c2:3f:e3:63:db:c0:82:af:02:8e:37:39:3f: dc:7f:4d:2d:8b:1c:d6:a7:91:49:11:0f:62:86:1d: 20:b5:81:1c:16:9b:b7:75:b2:a3:96:86:96:c3:99: 10:f3:a2:48:ee:24:a2:05:9d:07:34:d8:d1:19:22: 8e:8f:3c:bd:37:e8:2c:f7:a0:85:dc:94:23:60:e1: 3d:61:e7:8e:2e:72:8f:84:bd:3b:cf:66:b6:48:b4: b1:0c:af:cc:9b:34:f2:30:06:50:96:a8:d8:be:6f: dc:ff:ce:b0:26:a5:9d:77:3c:30:07:17:d3:c6:05: e0:f3:96:0a:fc:f4:e0:47:f8:4a:da:2a:28:82:6e: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:12:32:EA:30:7E:D2:16:DD:04:6D:E1:46:68:76:22:48:5B:8D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:27:39:80:7b:14:b0:5d:1f:ab:b4:7a:ef:94:f2:db:ef:70: b1:ae:d6:c6:37:05:b5:bf:b5:2d:33:d5:1a:b2:a4:d5:6c:f7: f5:e2:4c:78:a0:d7:6f:ab:2a:83:34:a9:74:e9:23:05:e5:74: d9:30:d4:3e:fa:51:b8:c1:96:1c:ca:73:e7:40:80:d6:7c:59: 70:da:ca:c8:44:0d:ef:e7:ff:66:4f:64:53:f3:74:5e:c8:4a: f8:75:8c:e7:7c:31:69:de:cb:ae:18:07:87:16:8a:2b:30:0d: a9:fe:f5:d9:4f:d0:d2:b8:d1:7f:2b:80:01:0c:29:91:bd:14: 33:75:89:c0:2a:aa:c5:9f:6e:cd:ac:7a:c1:d8:4d:b2:06:41: aa:d3:7e:21:cd:67:d7:ef:10:b9:9d:c2:80:22:d8:4f:b6:a1: f3:51:16:9e:7b:13:e3:2f:ad:78:14:18:8b:0e:ad:79:26:d2: 9e:11:29:5c:c4:cd:18:24:52:cb:dc:41:7f:b8:25:5b:e1:df: 2c:55:c9:49:de:f7:83:a3:bc:64:3d:c0:ea:98:5b:3e:b5:b3: c6:af:ad:0b:d0:d1:fa:5f:16:30:30:21:12:4c:a9:a7:36:b9: a3:24:2d:99:c9:3f:8b:7f:9e:34:2d:5d:ec:09:c6:73:71:97: 15:80:63:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lJFAinqujFSgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk NjU3NTk1YmMtYzYwYi00YTNhLTkzZWItNDgzODM0YThhNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHKUnR3SZeEQKEGlGCjWQXVAJqE6+WhH16MW JymEYyqY+1xWdPhO/KNiMjQhPUYWpToUX+ZV4R4rXB5Xjw54ddtu34GhdrxHFBTD XJQR89GgUoukZp5eIT3bePfCOOI4FmA6exP6kj48Wm8+yk1+gh87JMisDpCnXMI/ 42PbwIKvAo43OT/cf00tixzWp5FJEQ9ihh0gtYEcFpu3dbKjloaWw5kQ86JI7iSi BZ0HNNjRGSKOjzy9N+gs96CF3JQjYOE9YeeOLnKPhL07z2a2SLSxDK/MmzTyMAZQ lqjYvm/c/86wJqWddzwwBxfTxgXg85YK/PTgR/hK2ioogm4E2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4SMuowftIW3QRt4UZodiJIW41bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzVlZWEtZGI3Zi0z YTMxLTg0YWMtMTQ0YTFmN2MyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMnOYB7FLBdH6u0eu+U8tvvcLGu1sY3BbW/tS0z1RqypNVs9/XiTHig 12+rKoM0qXTpIwXldNkw1D76UbjBlhzKc+dAgNZ8WXDayshEDe/n/2ZPZFPzdF7I Svh1jOd8MWney64YB4cWiiswDan+9dlP0NK40X8rgAEMKZG9FDN1icAqqsWfbs2s esHYTbIGQarTfiHNZ9fvELmdwoAi2E+2ofNRFp57E+MvrXgUGIsOrXkm0p4RKVzE zRgkUsvcQX+4JVvh3yxVyUne94OjvGQ9wOqYWz61s8avrQvQ0fpfFjAwIRJMqac2 uaMkLZnJP4t/njQtXewJxnNxlxWAY9E= -----END CERTIFICATE-----Generated at Fri Jul 24 19:35:34 2026 by rpki-client