$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa File: a8d50708-183d-32fa-8e34-b0e93ebefc17.roa (raw, json) Hash identifier: VOw02Rnf4h32LGqmuKOj+gvEP5n7184gy1aiiMeCWYc= Subject key identifier: 9C:E0:C8:A4:11:7E:50:CD:64:59:45:AF:BB:F2:0A:A5:2F:20:FB:F8 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584E4AEF4B87678C4B3924CC8D00 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 394111 IP address blocks: 64.147.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:4b:87:67:8c:4b:39:24:cc:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=075d48cc-0973-4593-b82e-eabf07be0d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:52:85:24:1b:53:42:ce:b7:6b:f0:ab:5e:49: f8:f2:79:d8:6c:c7:34:28:e6:f9:b1:a7:aa:aa:90: b9:c6:c4:71:e0:bc:e4:be:5b:de:fd:76:9d:54:17: 3f:5f:e9:09:9b:2a:33:2d:45:8f:e0:89:0f:53:36: b9:98:96:6e:a5:58:0c:0f:b7:74:40:d5:77:bd:35: 1d:af:98:95:c4:c9:70:d9:a8:da:55:c2:af:45:f8: ec:b6:0a:72:65:d8:87:63:23:b2:b3:31:1c:4b:c9: 98:8d:18:ad:91:2b:7d:a0:c0:88:b6:89:bb:dd:cc: 47:b4:96:f1:a3:5f:64:9e:0d:6e:63:53:51:2b:6b: 3b:e3:36:dd:1d:8a:4c:83:b9:9a:5e:71:e4:11:68: b7:ca:6f:4c:9d:d9:a4:11:75:7f:dd:14:07:56:c0: d3:b2:4c:56:4d:2c:bb:12:63:31:21:85:67:45:4c: 52:2c:a1:18:4a:30:93:61:71:c4:fe:26:50:79:00: 40:ef:c4:0d:d9:a3:25:b6:d3:de:92:69:73:1e:e0: 32:ec:22:31:c3:45:47:9a:56:55:16:c4:b4:e8:6e: 34:c0:aa:d2:67:1b:62:20:9c:c6:09:26:5f:74:9d: 2f:a0:89:88:33:ea:24:37:4d:2f:df:a0:f3:53:0d: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:C8:A4:11:7E:50:CD:64:59:45:AF:BB:F2:0A:A5:2F:20:FB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b3:8c:46:d1:39:dc:84:d1:f0:bf:6b:f3:c7:43:03:10:97: d6:c2:0e:ea:7c:da:68:e3:2e:4d:31:7a:bb:a9:03:5a:f3:1c: 39:b9:16:be:68:ab:85:6e:8d:80:4f:7d:31:88:5e:31:94:78: 56:ff:6d:e4:92:94:a8:7e:78:ab:0e:da:44:12:5e:30:81:98: f9:c9:42:61:2f:ea:54:65:65:17:be:fc:b9:22:0b:af:05:d1: 21:04:98:60:28:a2:29:ad:93:d5:a3:b2:28:59:60:a7:19:58: 6c:79:bf:47:39:05:60:20:bc:d6:24:a9:79:f0:53:ba:cf:ef: e5:89:06:ce:16:f5:27:71:d4:64:3e:b3:7d:64:4f:3e:ec:0e: f3:f5:ca:f7:34:c3:80:b6:1c:d1:fc:23:bf:d1:0f:12:9e:3e: 0f:82:2a:05:7f:7b:51:3f:8d:8f:8a:be:7d:5a:4c:d9:64:14: 36:65:5d:88:ce:36:7c:f3:bf:45:db:d4:9a:50:3f:a4:f4:55: 74:2e:80:d1:6e:7e:55:03:90:81:71:e4:44:4c:ce:f4:7c:f1: 1c:65:89:12:f7:bd:1b:24:53:fe:74:0f:bf:0d:26:a8:b5:be: 03:32:65:4d:48:86:d6:31:9b:7b:37:be:6b:ad:c7:88:9c:64: cc:c3:7c:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70uHZ4xLOSTMjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MDc1ZDQ4Y2MtMDk3My00NTkzLWI4MmUtZWFiZjA3YmUwZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1KFJBtTQs63a/CrXkn48nnYbMc0KOb5saeq qpC5xsRx4Lzkvlve/XadVBc/X+kJmyozLUWP4IkPUza5mJZupVgMD7d0QNV3vTUd r5iVxMlw2ajaVcKvRfjstgpyZdiHYyOyszEcS8mYjRitkSt9oMCItom73cxHtJbx o19kng1uY1NRK2s74zbdHYpMg7maXnHkEWi3ym9MndmkEXV/3RQHVsDTskxWTSy7 EmMxIYVnRUxSLKEYSjCTYXHE/iZQeQBA78QN2aMlttPekmlzHuAy7CIxw0VHmlZV FsS06G40wKrSZxtiIJzGCSZfdJ0voImIM+okN00v36DzUw3TKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzgyKQRflDNZFlFr7vyCqUvIPv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYThkNTA3MDgtMTgzZC0z MmZhLThlMzQtYjBlOTNlYmVmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKzjEbROdyE0fC/a/PHQwMQl9bCDup82mjjLk0xerupA1rzHDm5Fr5o q4VujYBPfTGIXjGUeFb/beSSlKh+eKsO2kQSXjCBmPnJQmEv6lRlZRe+/LkiC68F 0SEEmGAooimtk9WjsihZYKcZWGx5v0c5BWAgvNYkqXnwU7rP7+WJBs4W9Sdx1GQ+ s31kTz7sDvP1yvc0w4C2HNH8I7/RDxKePg+CKgV/e1E/jY+Kvn1aTNlkFDZlXYjO Nnzzv0Xb1JpQP6T0VXQugNFuflUDkIFx5ERMzvR88RxliRL3vRskU/50D78NJqi1 vgMyZU1IhtYxm3s3vmutx4icZMzDfPU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:10:14 2026 by rpki-client