$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json) Hash identifier: NaQE5jFRV/j2l4jUV0d6nfd7KcWjRVsyIUyYR/VMCV0= Subject key identifier: 40:26:AF:9C:66:A5:74:6C:F1:E3:23:94:DB:A5:E8:09:53:80:40:0E Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584E66DA0DE786C5353B52E80810 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 397287 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0d:e7:86:c5:35:3b:52:e8:08:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=76145bfd-c2d5-42de-85b1-4a55d2971475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:f1:0c:58:39:7c:f4:83:4c:de:cd:e6:b7: f9:50:d4:3a:fe:f1:f7:7a:1f:e5:06:c6:bf:a6:aa: fa:06:97:eb:6e:f2:fe:f2:7b:fb:0a:ce:1e:92:67: bc:7e:0a:2d:6a:33:68:e5:70:2f:3a:f2:ec:a9:02: 64:9a:0e:a0:34:6b:43:ce:0e:6a:29:2c:52:98:32: bb:cf:c9:77:34:74:2d:5b:62:d8:6f:3d:06:92:b0: 9a:06:d0:0c:4a:26:2f:f4:3f:35:c3:45:d8:0a:3e: 6c:15:17:28:14:2f:df:41:3c:14:26:9b:a9:ba:f1: 3e:57:5e:8e:cc:f3:cf:f0:74:43:2c:4b:0a:11:e3: f2:82:9b:c8:59:60:a4:91:9e:ea:90:8f:cb:3e:5c: 7c:49:c4:1e:46:f0:3d:0b:1a:f9:e6:f6:db:1a:d0: bd:0d:cd:b1:8b:73:de:e2:8b:d8:24:3c:0f:6b:26: 01:5f:5e:68:0e:7b:11:55:21:bf:b5:f0:d5:28:9e: 91:17:b6:55:81:2e:72:1d:63:88:65:29:ba:d1:04: de:45:a7:c5:ec:cf:ee:71:09:94:b8:c0:cf:6d:66: c6:7c:17:b9:73:5c:39:f9:11:2d:d0:46:48:d2:4f: bb:9c:94:a2:70:48:4a:35:90:7c:7c:e7:c3:2b:44: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:26:AF:9C:66:A5:74:6C:F1:E3:23:94:DB:A5:E8:09:53:80:40:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:02:67:a7:dd:7d:57:e5:3d:56:7c:af:64:e1:43:91:84:f1: a2:59:24:51:11:f6:6a:3b:41:90:1d:98:24:4d:9c:00:9e:00: d1:5c:a4:67:d8:1f:39:4a:f7:7d:6c:36:cd:1d:08:5c:48:43: f5:92:35:16:6e:c9:6a:d9:8b:68:76:d4:a4:70:78:45:7f:59: 48:53:f1:aa:f1:16:37:a1:63:3d:d8:9a:da:bd:1a:1b:82:41: 08:70:97:19:86:11:38:cb:7e:11:90:2e:e2:11:68:c3:23:7b: bc:90:49:ec:f7:99:ee:12:41:c4:70:d0:96:a4:3c:3d:8f:6b: f0:4d:9b:45:5d:1c:7a:f8:7d:23:93:5e:5e:3b:ef:10:fc:83: b1:52:23:fd:b2:2e:71:15:ca:1b:a7:99:4e:b1:0d:20:c0:14: 93:45:99:6f:8c:a6:db:ab:a1:95:27:9e:8e:b3:ae:f4:43:84: fd:40:a9:5d:6d:e6:c6:e5:5b:86:c1:85:05:c0:8d:ad:13:ab: db:f9:65:1d:30:e0:2c:93:39:30:6f:1a:9c:27:9b:ca:af:b6: 74:95:52:00:9b:da:62:a6:ed:f4:bb:8a:35:99:92:3e:dd:6e: 6d:46:f1:6b:6e:23:71:72:64:2d:dd:39:f3:2d:0c:bd:a3:96: 39:73:66:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2g3nhsU1O1LoCBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NzYxNDViZmQtYzJkNS00MmRlLTg1YjEtNGE1NWQyOTcxNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqHxDFg5fPSDTN7N5rf5UNQ6/vH3eh/lBsa/ pqr6BpfrbvL+8nv7Cs4ekme8fgotajNo5XAvOvLsqQJkmg6gNGtDzg5qKSxSmDK7 z8l3NHQtW2LYbz0GkrCaBtAMSiYv9D81w0XYCj5sFRcoFC/fQTwUJpupuvE+V16O zPPP8HRDLEsKEePygpvIWWCkkZ7qkI/LPlx8ScQeRvA9Cxr55vbbGtC9Dc2xi3Pe 4ovYJDwPayYBX15oDnsRVSG/tfDVKJ6RF7ZVgS5yHWOIZSm60QTeRafF7M/ucQmU uMDPbWbGfBe5c1w5+REt0EZI0k+7nJSicEhKNZB8fOfDK0S6xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAmr5xmpXRs8eMjlNul6AlTgEAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUCZ6fdfVflPVZ8r2ThQ5GE8aJZJFER9mo7QZAdmCRNnACeANFcpGfY HzlK931sNs0dCFxIQ/WSNRZuyWrZi2h21KRweEV/WUhT8arxFjehYz3Ymtq9GhuC QQhwlxmGETjLfhGQLuIRaMMje7yQSez3me4SQcRw0JakPD2Pa/BNm0VdHHr4fSOT Xl477xD8g7FSI/2yLnEVyhunmU6xDSDAFJNFmW+MpturoZUnno6zrvRDhP1AqV1t 5sblW4bBhQXAja0Tq9v5ZR0w4CyTOTBvGpwnm8qvtnSVUgCb2mKm7fS7ijWZkj7d bm1G8WtuI3FyZC3dOfMtDL2jljlzZiM= -----END CERTIFICATE-----Generated at Fri Jul 24 14:00:55 2026 by rpki-client