$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa File: f912ae62-732c-3124-96ce-77eea87e00a5.roa (raw, json) Hash identifier: XnmtCaczEdVUn9J1EixOXhk6fE48D6+vWntpACivHxM= Subject key identifier: C0:AA:29:FE:F2:8C:8E:4B:DE:30:5B:F9:07:F3:BD:A0:0A:CF:07:9C Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F4328584E6F3A299950F4E9D1E0A7A400 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 398125 IP address blocks: 208.71.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:29:99:50:f4:e9:d1:e0:a7:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=3e4d6f55-4ba5-45f2-9af3-bff0b47da4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:14:7c:df:0a:94:e1:dc:2d:f1:83:2d:04: 38:d0:5f:c6:d8:ca:54:e1:66:87:21:48:25:df:dd: 30:1c:41:a8:f7:b6:81:3d:99:36:9a:50:04:cb:67: e4:06:f6:5a:56:1a:5b:c9:c0:19:92:55:80:32:ff: 89:2b:ad:bf:73:5f:0d:dd:91:14:cc:e0:81:6b:11: 8f:cc:09:fb:77:75:86:fd:ea:23:f9:01:c2:59:61: 45:aa:b4:ef:a8:ba:ed:84:0d:57:41:b3:2d:c1:19: 6e:4f:32:4f:1b:ad:60:cf:e5:4f:5a:a8:55:cd:b6: b6:4e:cc:76:96:6b:8b:a8:24:cf:27:f4:2c:21:17: 6a:93:07:bf:cc:df:80:69:0e:48:ce:77:62:87:6b: 2e:2d:6a:87:14:11:7b:f4:8f:bc:38:bf:93:18:35: cf:ac:f7:70:33:17:a9:5c:3b:b3:51:c2:3b:d1:2b: 8e:23:91:32:ac:1d:f9:a7:c9:44:8a:a5:d7:6b:8d: 1c:89:aa:93:c4:b7:3c:bd:99:7e:5d:77:d5:59:67: e8:5d:a0:86:5d:0c:02:d1:9f:49:51:11:87:15:8c: 04:66:20:65:d2:8a:ed:86:e5:d6:0f:d9:f8:4c:20: 13:e2:8d:25:8f:17:34:02:15:c1:12:5f:85:35:6c: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AA:29:FE:F2:8C:8E:4B:DE:30:5B:F9:07:F3:BD:A0:0A:CF:07:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:85:ce:50:ef:c3:73:23:81:16:cc:f4:ad:bd:e4:dd:f3:50: 37:0d:2c:b8:95:08:08:16:03:fa:62:38:58:df:b0:80:f3:33: e0:20:97:06:3c:3e:64:26:1d:3b:37:d7:fa:f8:7a:82:18:b5: 1f:c7:a8:9a:f7:b9:d1:56:8d:64:6e:8e:42:18:32:2a:62:a9: 2a:03:f7:ba:04:0e:47:58:5e:3c:78:1b:22:a2:a0:20:32:70: b5:c9:02:58:b8:a5:aa:26:88:82:ac:06:7c:0c:b7:03:69:8f: 6b:8d:1d:f2:3c:86:17:f9:32:8a:e8:8f:0a:69:19:cd:31:55: c3:20:ad:3b:40:34:0c:88:9e:f3:42:df:74:10:f8:fd:11:70: a6:0b:e4:5e:e3:42:1a:f8:e5:b0:ab:ec:de:f0:a4:8d:08:e0: 8d:97:ea:cd:d9:6d:4c:88:71:0d:7e:b7:fe:70:28:4d:e6:4b: 64:0b:94:25:0c:d7:3a:4a:78:e4:ce:e1:e5:52:c9:f4:01:06: 90:2d:df:f1:7d:82:93:ca:01:35:05:fc:e1:eb:0d:cb:ea:23: c6:1b:e9:9a:9b:7b:ca:6b:e2:6c:65:ec:0c:b4:e7:84:53:bf: 6b:3f:47:e9:83:71:ff:55:7c:46:c2:db:2a:0d:47:d6:05:54: 99:9e:52:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOimZUPTp0eCnpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk M2U0ZDZmNTUtNGJhNS00NWYyLTlhZjMtYmZmMGI0N2RhNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlUUfN8KlOHcLfGDLQQ40F/G2MpU4WaHIUgl 390wHEGo97aBPZk2mlAEy2fkBvZaVhpbycAZklWAMv+JK62/c18N3ZEUzOCBaxGP zAn7d3WG/eoj+QHCWWFFqrTvqLrthA1XQbMtwRluTzJPG61gz+VPWqhVzba2Tsx2 lmuLqCTPJ/QsIRdqkwe/zN+AaQ5Izndih2suLWqHFBF79I+8OL+TGDXPrPdwMxep XDuzUcI70SuOI5EyrB35p8lEiqXXa40ciaqTxLc8vZl+XXfVWWfoXaCGXQwC0Z9J URGHFYwEZiBl0orthuXWD9n4TCAT4o0ljxc0AhXBEl+FNWzPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCqKf7yjI5L3jBb+QfzvaAKzwecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvZjkxMmFlNjItNzMyYy0z MTI0LTk2Y2UtNzdlZWE4N2UwMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGFzlDvw3MjgRbM9K295N3zUDcNLLiVCAgWA/piOFjfsIDzM+AglwY8 PmQmHTs31/r4eoIYtR/HqJr3udFWjWRujkIYMipiqSoD97oEDkdYXjx4GyKioCAy cLXJAli4paomiIKsBnwMtwNpj2uNHfI8hhf5MorojwppGc0xVcMgrTtANAyInvNC 33QQ+P0RcKYL5F7jQhr45bCr7N7wpI0I4I2X6s3ZbUyIcQ1+t/5wKE3mS2QLlCUM 1zpKeOTO4eVSyfQBBpAt3/F9gpPKATUF/OHrDcvqI8Yb6Zqbe8pr4mxl7Ay054RT v2s/R+mDcf9VfEbC2yoNR9YFVJmeUto= -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:19 2026 by rpki-client