$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa File: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (raw, json) Hash identifier: EZs9xZMAzczIusi+ecVSVLLA6hzcKj4B+spTKJwsdoo= Subject key identifier: FB:86:51:EB:F3:C4:5E:C3:4E:88:AC:D6:7F:41:6D:40:7E:F2:35:ED Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584E6F3A23AB68EC3ADE6709C080 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 40091 IP address blocks: 76.9.224.0/20 maxlen: 24 216.115.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:23:ab:68:ec:3a:de:67:09:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=41c10d0b-9b06-4c91-9466-d54f14a01bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b3:65:1d:1d:e7:ac:ff:1e:38:a9:a8:ad:e3: b6:bf:33:72:95:c3:a6:25:85:70:b8:06:08:7f:56: 00:6b:ee:e8:16:f6:6c:56:c2:a9:8e:cd:cc:b6:e6: 8f:a5:10:c5:fd:93:b2:4e:a2:95:c3:bf:cf:47:af: 59:7d:e7:78:f0:ba:4f:c2:f7:bb:86:64:fa:03:d1: e1:2b:be:10:89:34:ec:7d:dd:31:42:ce:9e:51:1f: 56:37:d6:73:9a:81:b1:8b:89:1e:8f:89:93:77:b1: 77:4a:11:0a:72:75:cd:7a:31:30:a3:ff:2a:0d:c0: 9c:45:d8:01:7d:97:81:2b:76:c2:24:b2:9b:d5:17: ed:83:ac:35:92:a6:99:67:50:a6:e5:b0:78:30:7f: a4:06:29:05:2e:d1:a8:00:7b:23:61:15:42:fe:c4: 1c:38:1d:e0:da:54:72:59:ac:0f:0c:26:05:62:0b: e2:8a:00:27:63:03:00:ca:1f:10:e2:4a:ab:41:43: 75:ee:d9:d3:2e:0e:b4:28:ec:ee:b9:a2:dd:71:eb: 00:ad:7a:0e:a1:40:5e:9d:bb:2c:96:95:55:2f:7d: a4:1b:b5:89:ea:a4:9d:9e:0a:00:03:77:32:3a:13: 18:e1:4d:eb:14:d8:a2:99:75:f5:c4:5a:e5:7b:9b: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:86:51:EB:F3:C4:5E:C3:4E:88:AC:D6:7F:41:6D:40:7E:F2:35:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:06:e2:3e:df:1d:40:b8:15:c6:1d:60:e3:9d:43:e8:1d:6a: 27:ae:f2:49:79:14:a8:7a:21:fe:f1:db:8c:7f:07:38:2b:53: a2:ac:a0:78:97:a4:ee:b2:ec:3a:c2:25:14:16:ee:88:ca:7e: 1c:97:c8:bb:27:6f:b8:40:de:99:85:42:2d:ea:f5:3b:d7:7e: 71:a1:aa:07:93:4e:e6:18:cd:05:b3:9a:f4:0a:92:6d:4a:17: 86:e7:46:35:67:cf:46:bf:52:25:63:fd:73:31:74:cf:4a:90: 2a:aa:81:63:0b:ee:20:a2:9c:25:fe:a7:eb:be:ad:c6:31:35: d6:cd:1a:70:57:ac:2b:1e:77:e2:d0:9f:e8:af:22:ba:e1:4e: cd:30:3c:b7:19:38:f1:1b:ec:5f:02:7e:f9:ea:6f:70:be:3e: b9:33:ee:a4:21:8a:a5:60:7d:45:98:03:d9:cc:0d:c6:96:c7: ef:d9:06:99:89:3b:f0:82:12:ec:09:5c:a4:60:88:e1:40:a2: 9e:60:92:a0:6f:25:83:53:12:ce:1f:ac:c6:9a:a4:76:35:d7: 88:3e:51:15:49:7f:b9:b4:51:10:78:3b:14:fa:fe:76:b5:7f: 02:01:89:57:3c:e3:ec:97:52:6e:61:e4:bd:30:af:41:a1:b8: 8e:1c:04:c8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5vOiOraOw63mcJwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NDFjMTBkMGItOWIwNi00YzkxLTk0NjYtZDU0ZjE0YTAxYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLNlHR3nrP8eOKmoreO2vzNylcOmJYVwuAYI f1YAa+7oFvZsVsKpjs3MtuaPpRDF/ZOyTqKVw7/PR69Zfed48LpPwve7hmT6A9Hh K74QiTTsfd0xQs6eUR9WN9ZzmoGxi4kej4mTd7F3ShEKcnXNejEwo/8qDcCcRdgB fZeBK3bCJLKb1Rftg6w1kqaZZ1Cm5bB4MH+kBikFLtGoAHsjYRVC/sQcOB3g2lRy WawPDCYFYgviigAnYwMAyh8Q4kqrQUN17tnTLg60KOzuuaLdcesArXoOoUBenbss lpVVL32kG7WJ6qSdngoAA3cyOhMY4U3rFNiimXX1xFrle5uVPwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPuGUevzxF7DTois1n9BbUB+8jXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvM2M1ZjRlMWEtNGJlNy0z N2Y3LWI4NjEtOTkxZGE1MGY1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETAngAwQE 2HPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABMG4j7fHUC4FcYdYOOdQ+gdaieu8kl5FKh6If7x24x/Bzgr U6KsoHiXpO6y7DrCJRQW7ojKfhyXyLsnb7hA3pmFQi3q9TvXfnGhqgeTTuYYzQWz mvQKkm1KF4bnRjVnz0a/UiVj/XMxdM9KkCqqgWML7iCinCX+p+u+rcYxNdbNGnBX rCsed+LQn+ivIrrhTs0wPLcZOPEb7F8Cfvnqb3C+Prkz7qQhiqVgfUWYA9nMDcaW x+/ZBpmJO/CCEuwJXKRgiOFAop5gkqBvJYNTEs4frMaapHY114g+URVJf7m0URB4 OxT6/na1fwIBiVc84+yXUm5h5L0wr0GhuI4cBMg= -----END CERTIFICATE-----Generated at Fri Jul 24 21:05:48 2026 by rpki-client