$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa File: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (raw, json) Hash identifier: X3CjtUmF6fZczWNOcIM+MUUGhyNCz0hqABS+7XoEQ18= Subject key identifier: 68:EC:02:94:58:AB:31:5E:BD:D5:91:D7:01:CB:6C:86:6D:51:D7:A0 Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584E7634C96FF4C5639E77DC9D40 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 22224 IP address blocks: 23.187.128.0/24 maxlen: 24 207.174.168.0/22 maxlen: 24 2602:fed6::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:c9:6f:f4:c5:63:9e:77:dc:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=081ed40b-2f50-4f58-afe8-8376067f3a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:e6:ed:d6:14:1a:4d:6e:93:0d:c6:b7:9e: 85:82:bd:9f:3d:7b:4b:0d:7a:3d:0a:f2:53:6a:d4: 60:5b:ee:ba:2d:de:00:3c:4e:f4:44:84:8d:d7:65: 1f:84:14:59:c9:1d:55:e3:f4:a2:66:c2:38:58:8a: 95:88:f1:dc:65:75:48:84:6e:08:79:da:89:b8:d6: 76:84:a4:d3:e0:bf:8a:6e:37:58:a8:25:fe:8f:1f: 44:2e:6e:68:c6:5f:fb:b5:58:61:a5:83:af:82:e0: 69:ba:70:07:88:be:2a:57:0b:63:6f:05:38:ef:82: 99:8b:d9:d7:0a:89:e1:a6:e9:c0:f6:bb:53:df:e5: f7:67:f0:42:60:ca:82:21:65:7b:75:d5:b1:5e:12: 99:ea:fa:d6:e1:8e:7e:51:e8:a5:7a:4b:c4:ba:a0: 9a:ba:82:bc:04:bc:59:8d:f6:43:6c:c8:d5:11:23: d1:09:ca:04:c7:2b:70:78:ed:e1:04:60:7d:32:c3: 0f:6c:33:58:c4:7a:09:da:35:db:61:5c:9c:ab:10: 1a:0f:d1:3b:37:74:87:d8:b5:2a:4b:73:cc:48:a6: ab:0f:fe:8e:01:04:22:e7:7f:b1:6e:6a:17:bf:d1: ed:a0:4e:f5:07:3f:3c:57:0c:3c:db:cf:e1:c0:e9: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:02:94:58:AB:31:5E:BD:D5:91:D7:01:CB:6C:86:6D:51:D7:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: 23.187.128.0/24 207.174.168.0/22 IPv6: 2602:fed6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:49:e5:93:5a:63:2d:2d:4a:5c:b6:f6:cf:d3:72:a9:76:a4: c6:2f:e5:4b:07:8e:2b:3e:bf:56:5c:0e:62:f9:f6:1c:b3:5c: fb:18:e4:a4:99:ac:b7:39:2e:37:76:4d:70:3d:e9:ca:42:c9: 93:dc:75:1c:6e:b4:0a:de:69:05:09:85:60:1e:fa:0a:ac:4f: 6d:a7:1b:1f:d3:84:84:4e:4c:37:2f:98:db:de:d4:25:93:2a: 5e:17:a6:ae:c7:57:6b:f6:f6:2c:59:ca:85:bc:e9:e3:03:c4: 42:64:c0:65:3a:90:dc:f7:aa:bc:54:a8:00:26:54:36:d7:19: b6:26:cf:00:4a:db:c8:d0:9e:91:aa:32:3a:d1:6c:d8:05:71: f0:07:18:67:60:72:b2:f5:b2:c7:69:90:88:69:78:6a:98:e6: 56:c5:02:6f:06:3f:05:b6:7b:73:ee:97:17:a4:b8:36:bd:b1: af:78:f3:cd:69:2c:0d:93:ba:7f:4d:14:fd:8c:fd:1d:15:7e: cb:9c:47:4b:da:b8:46:7c:26:5a:36:44:14:08:86:2c:46:0e: 4e:cf:5d:d4:b6:9f:97:97:3b:42:c2:13:2f:a5:2e:ac:9a:7e: 6d:31:73:35:dd:99:95:f3:01:1f:3a:ce:ea:c6:ab:75:a4:8c: 3b:fc:a2:68 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE52NMlv9MVjnnfcnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MDgxZWQ0MGItMmY1MC00ZjU4LWFmZTgtODM3NjA2N2YzYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC3m7dYUGk1ukw3Gt56Fgr2fPXtLDXo9CvJT atRgW+66Ld4APE70RISN12UfhBRZyR1V4/SiZsI4WIqViPHcZXVIhG4IedqJuNZ2 hKTT4L+KbjdYqCX+jx9ELm5oxl/7tVhhpYOvguBpunAHiL4qVwtjbwU474KZi9nX ConhpunA9rtT3+X3Z/BCYMqCIWV7ddWxXhKZ6vrW4Y5+UeilekvEuqCauoK8BLxZ jfZDbMjVESPRCcoExytweO3hBGB9MsMPbDNYxHoJ2jXbYVycqxAaD9E7N3SH2LUq S3PMSKarD/6OAQQi53+xbmoXv9HtoE71Bz88Vww828/hwOlXnQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFGjsApRYqzFevdWR1wHLbIZtUdegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvMDZiODdhMTctZGE3Mi0z NWNkLTk5YzUtNDQ3ZWM2NWUwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7uAAwQC z66oMA4EAgACMAgDBgQmAv7WADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2SeWTWmMtLUpctvbP03KpdqTG L+VLB44rPr9WXA5i+fYcs1z7GOSkmay3OS43dk1wPenKQsmT3HUcbrQK3mkFCYVg HvoKrE9tpxsf04SETkw3L5jb3tQlkypeF6aux1dr9vYsWcqFvOnjA8RCZMBlOpDc 96q8VKgAJlQ21xm2Js8AStvI0J6RqjI60WzYBXHwBxhnYHKy9bLHaZCIaXhqmOZW xQJvBj8Ftntz7pcXpLg2vbGvePPNaSwNk7p/TRT9jP0dFX7LnEdL2rhGfCZaNkQU CIYsRg5Oz13Utp+XlztCwhMvpS6smn5tMXM13ZmV8wEfOs7qxqt1pIw7/KJo -----END CERTIFICATE-----Generated at Fri Jul 24 15:46:38 2026 by rpki-client