$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa File: ff76f477-9fcf-3f97-a435-7620968e5ec0.roa (raw, json) Hash identifier: HN4FSTWy/Et5xLic2QSljG6ltUkYq7FRr5OqlEcfxuA= Subject key identifier: 32:22:17:E9:8A:17:CE:C0:8F:BB:AE:BB:34:AD:A2:FA:92:80:2E:88 Certificate issuer: /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Certificate serial: 010D0C9F4328584E7FFA53ADAFDD7EBEE1DD7600 Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 996 IP address blocks: 66.207.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:53:ad:af:dd:7e:be:e1:dd:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=c387cb75-7897-4dde-a9a9-9f2ec8dd60b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:73:22:d9:1c:d8:15:23:7f:d7:58:3f:e7: c1:eb:6f:e9:39:99:1b:4e:73:dc:e7:04:8a:87:89: 11:9b:31:d9:e9:98:99:c0:27:1d:45:b2:33:70:40: 8e:54:d6:f1:48:59:57:2c:d7:b1:c9:87:60:c4:38: 34:b0:86:e9:39:57:ed:c5:8b:39:a2:6d:78:30:a4: b3:cc:50:06:40:d0:88:c6:ec:4f:96:63:28:24:8a: eb:22:b3:81:d2:7b:af:d5:d3:97:c4:45:cb:0e:57: 2a:e3:7e:23:d5:7e:22:34:3d:28:6e:a6:22:61:d9: cb:d1:e6:be:e7:18:27:bd:a6:ca:a0:6b:8f:7f:11: 41:a3:93:2b:e6:b5:09:5c:7d:90:ea:c8:f2:14:01: bd:98:cc:b5:eb:7b:69:4d:12:9d:ec:db:ad:ec:bb: 3f:5e:cc:cb:9d:78:cf:1b:c2:ba:69:28:87:75:8a: 45:60:e3:5a:59:e3:f0:5f:5f:82:fe:fc:8d:a2:18: 05:de:09:c0:e4:9b:c1:6c:61:ca:7e:df:07:da:61: 7f:bc:cc:d7:ab:ac:1f:79:9a:f2:54:64:b0:d4:52: af:24:69:53:75:a0:cb:3c:30:b1:d7:17:6b:32:92: 5a:3f:9e:b0:59:fc:30:15:d7:e6:8c:c2:34:c1:50: 61:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:22:17:E9:8A:17:CE:C0:8F:BB:AE:BB:34:AD:A2:FA:92:80:2E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/ff76f477-9fcf-3f97-a435-7620968e5ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl X509v3 Authority Key Identifier: keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer sbgp-ipAddrBlock: critical IPv4: 66.207.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b5:4d:f6:05:50:9c:07:6c:2c:f4:3e:69:46:aa:a5:52:65: 5b:6f:28:b0:b1:94:5f:32:1a:d0:03:44:1b:46:73:42:da:01: 5e:8d:1b:e8:c5:1e:00:1c:38:78:58:c2:6e:e1:8f:cc:e4:90: f5:f0:e2:34:9c:f7:2e:60:73:09:35:04:3a:28:55:ac:d8:89: 7b:b1:7e:a0:34:a7:f3:ca:67:81:1d:a5:4c:f1:60:98:06:df: cd:f6:57:14:a8:5b:e7:8d:14:ce:cd:15:62:bf:84:53:05:bb: 3e:be:ab:11:15:d9:b1:ec:22:b9:f0:48:50:2b:3b:5d:af:bb: 99:08:5a:a9:58:d8:8b:24:6e:de:71:f1:39:55:30:97:d5:c6: a0:92:88:e8:6d:d5:c1:dc:eb:5f:b4:64:c1:23:a5:f8:94:7e: 93:c9:d4:bc:b5:a7:cc:0c:da:00:b0:28:43:07:53:d5:7e:60: 21:c9:7a:4b:79:aa:0a:bc:75:eb:d2:07:97:93:69:46:a5:9f: 46:8d:3f:b1:04:7f:9f:15:e1:82:ae:c4:c6:3e:c7:8f:41:13: 59:a1:36:72:93:c7:44:35:18:e5:9e:da:de:33:58:53:0d:d8: ce:78:7a:b0:1b:a6:26:24:ff:3a:e8:20:15:89:de:20:be:c4: 10:f4:af:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+lOtr91+vuHddgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YTUzYzItYWQzZC00ODI2LThjNDktODQ4NTdkZDRk YjYwMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk YzM4N2NiNzUtNzg5Ny00ZGRlLWE5YTktOWYyZWM4ZGQ2MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyJzItkc2BUjf9dYP+fB62/pOZkbTnPc5wSK h4kRmzHZ6ZiZwCcdRbIzcECOVNbxSFlXLNexyYdgxDg0sIbpOVftxYs5om14MKSz zFAGQNCIxuxPlmMoJIrrIrOB0nuv1dOXxEXLDlcq434j1X4iND0obqYiYdnL0ea+ 5xgnvabKoGuPfxFBo5Mr5rUJXH2Q6sjyFAG9mMy163tpTRKd7Nut7Ls/XszLnXjP G8K6aSiHdYpFYONaWePwX1+C/vyNohgF3gnA5JvBbGHKft8H2mF/vMzXq6wfeZry VGSw1FKvJGlTdaDLPDCx1xdrMpJaP56wWfwwFdfmjMI0wVBhrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIiF+mKF87Aj7uuuzStovqSgC6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh NTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1N2RkNGRiNjAvZmY3NmY0NzctOWZjZi0z Zjk3LWE0MzUtNzYyMDk2OGU1ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YTUzYzItYWQzZC00ODI2LThj NDktODQ4NTdkZDRkYjYwLzVjNWE1M2MyLWFkM2QtNDgyNi04YzQ5LTg0ODU3ZGQ0 ZGI2MC5jcmwwHwYDVR0jBBgwFoAUOpNtDGAmuMECDnX45ZtKtMXiNyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhNTNjMi1hZDNkLTQ4MjYtOGM0OS04NDg1 N2RkNGRiNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQs+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe1TfYFUJwHbCz0PmlGqqVSZVtvKLCxlF8yGtADRBtGc0LaAV6NG+jF HgAcOHhYwm7hj8zkkPXw4jSc9y5gcwk1BDooVazYiXuxfqA0p/PKZ4EdpUzxYJgG 3832VxSoW+eNFM7NFWK/hFMFuz6+qxEV2bHsIrnwSFArO12vu5kIWqlY2Iskbt5x 8TlVMJfVxqCSiOht1cHc61+0ZMEjpfiUfpPJ1Ly1p8wM2gCwKEMHU9V+YCHJekt5 qgq8devSB5eTaUaln0aNP7EEf58V4YKuxMY+x49BE1mhNnKTx0Q1GOWe2t4zWFMN 2M54erAbpiYk/zroIBWJ3iC+xBD0r6I= -----END CERTIFICATE-----Generated at Fri Jul 24 08:03:22 2026 by rpki-client