$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa File: d3a2508e-0220-3c1b-9180-e11c07412c6c.roa (raw, json) Hash identifier: pt/TT2pQASEUfxNF6UQIxE59ypcFn+dsQVXzD/H37OA= Subject key identifier: 3C:60:CE:9D:B2:08:6C:02:CA:62:60:86:47:E7:6E:FC:D8:56:BF:67 Certificate issuer: /CN=7c74b511-7d11-4209-84c2-f7b800242a7b Certificate serial: 010D0C9F4328584E736A1E567C176E171DC29F00 Authority key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 21976 IP address blocks: 192.231.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1e:56:7c:17:6e:17:1d:c2:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=3f813f62-172c-4bec-90b2-f6fe85289f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9b:2b:72:60:c2:8f:7d:01:ba:59:fb:ab:ee: 71:c8:99:34:8a:90:6e:69:52:50:09:fa:de:64:b1: bb:0c:cc:e6:1f:cd:fe:df:fb:e0:e7:b1:80:2b:12: 28:9e:ec:1e:58:46:f5:a9:b4:a1:b4:dc:de:3c:93: 05:c8:10:aa:85:9d:8e:34:d6:0e:29:ac:2c:d0:7f: e7:a4:22:6b:f4:f5:9c:b2:6b:f1:2c:ed:2f:10:50: 8f:b9:c7:f3:7a:11:70:40:0e:3c:68:2b:31:c2:58: 14:3c:60:59:35:6a:c0:94:8d:6a:da:f3:6f:66:56: 5f:03:d9:99:08:eb:c6:77:a8:54:c3:4e:e6:5d:58: fe:15:fb:b2:0c:33:af:df:6b:5c:dc:b2:fe:d7:08: 57:e6:01:8e:65:dc:66:64:1f:a5:61:6b:8c:0d:bf: 1b:85:c3:7d:42:8c:8a:a8:0b:6c:7f:72:ab:1c:e5: ab:52:a2:dd:4f:19:7b:40:79:26:76:ea:0c:e0:1c: 94:d3:3a:14:90:d8:57:ab:bf:92:98:d8:c8:23:2d: 31:ae:ad:69:27:04:c5:02:6c:e4:26:0b:90:23:de: c0:48:6e:e3:1e:e0:32:ea:a6:02:df:da:8e:4f:85: b1:51:bd:71:ad:70:4c:79:d2:13:70:0e:d2:0f:06: ad:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:60:CE:9D:B2:08:6C:02:CA:62:60:86:47:E7:6E:FC:D8:56:BF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/d3a2508e-0220-3c1b-9180-e11c07412c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl X509v3 Authority Key Identifier: keyid:76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer sbgp-ipAddrBlock: critical IPv4: 192.231.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b5:d8:b4:4d:30:9f:7e:bb:2b:20:b6:45:b6:b7:94:20:d1: 0e:6e:ba:df:66:ed:07:43:e0:df:79:35:ba:5a:6c:52:fc:5d: a3:80:c4:36:71:9b:19:6e:3d:aa:0b:81:22:f8:b0:04:a5:df: ad:8d:30:ab:b0:99:d9:48:e6:19:0f:ba:19:e7:57:bc:b5:8a: 82:8e:e9:1c:0c:7b:ed:ab:79:aa:4e:06:f2:f3:bb:b4:5f:c9: 25:8e:5c:dc:bf:76:8c:07:66:64:52:69:f5:a8:81:c4:5f:44: 1f:12:52:b0:a9:4a:b3:2d:eb:3c:09:7f:11:df:b5:52:9f:24: 2d:e5:c8:bc:ef:2d:64:95:11:56:37:bd:21:1c:ff:cb:fd:ba: 1b:61:09:59:6a:e9:fa:cf:b7:41:3a:95:66:74:52:b6:35:cd: b9:d6:28:51:eb:45:62:e7:0d:19:b3:a5:a8:46:63:27:9a:9c: cc:65:60:e2:c4:90:57:f4:35:21:0d:64:94:fc:a6:48:e3:c5: ae:f3:ca:a6:48:fd:3d:1b:37:09:48:47:10:86:9f:58:e5:3d: fd:45:3f:10:71:06:86:49:20:c5:c6:4f:1d:bf:f5:3b:6b:91: dc:11:86:4c:9f:55:2f:97:8e:e0:64:22:75:a5:d5:d2:c5:d7: 69:2a:32:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zah5WfBduFx3CnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQy YTdiMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk M2Y4MTNmNjItMTcyYy00YmVjLTkwYjItZjZmZTg1Mjg5ZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpsrcmDCj30Buln7q+5xyJk0ipBuaVJQCfre ZLG7DMzmH83+3/vg57GAKxIonuweWEb1qbShtNzePJMFyBCqhZ2ONNYOKaws0H/n pCJr9PWcsmvxLO0vEFCPucfzehFwQA48aCsxwlgUPGBZNWrAlI1q2vNvZlZfA9mZ COvGd6hUw07mXVj+FfuyDDOv32tc3LL+1whX5gGOZdxmZB+lYWuMDb8bhcN9QoyK qAtsf3KrHOWrUqLdTxl7QHkmduoM4ByU0zoUkNhXq7+SmNjIIy0xrq1pJwTFAmzk JguQI97ASG7jHuAy6qYC39qOT4WxUb1xrXBMedITcA7SDwat2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxgzp2yCGwCymJghkfnbvzYVr9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0 YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvZDNhMjUwOGUtMDIyMC0z YzFiLTkxODAtZTExYzA3NDEyYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M3NGI1MTEtN2QxMS00MjA5LTg0 YzItZjdiODAwMjQyYTdiLzdjNzRiNTExLTdkMTEtNDIwOS04NGMyLWY3YjgwMDI0 MmE3Yi5jcmwwHwYDVR0jBBgwFoAUdrk2h7hOo9mzUTQCIdYSL4LkLOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4 MDAyNDJhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa12LRNMJ9+uysgtkW2t5Qg0Q5uut9m7QdD4N95NbpabFL8XaOAxDZx mxluPaoLgSL4sASl362NMKuwmdlI5hkPuhnnV7y1ioKO6RwMe+2reapOBvLzu7Rf ySWOXNy/dowHZmRSafWogcRfRB8SUrCpSrMt6zwJfxHftVKfJC3lyLzvLWSVEVY3 vSEc/8v9uhthCVlq6frPt0E6lWZ0UrY1zbnWKFHrRWLnDRmzpahGYyeanMxlYOLE kFf0NSENZJT8pkjjxa7zyqZI/T0bNwlIRxCGn1jlPf1FPxBxBoZJIMXGTx2/9Ttr kdwRhkyfVS+XjuBkInWl1dLF12kqMiA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:57 2026 by rpki-client