$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa File: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (raw, json) Hash identifier: MhJGvTK1BNkRAolV0eTINWTgmmOuAudIR68ZzEzcbtA= Subject key identifier: 4A:61:DB:2F:1C:54:C4:2D:4A:9A:79:2D:59:BE:F4:64:BD:B3:03:23 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F4328584E6F3A453537789BF2104E6B80 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 3653 IP address blocks: 209.71.32.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:45:35:37:78:9b:f2:10:4e:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=633be561-2a4d-4848-aa1d-61fe5f40cca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:15:00:16:89:44:2d:b3:bb:13:98:b0:3d:09: fa:e1:5a:79:c5:d3:14:48:cc:12:4b:18:59:c6:77: b0:28:05:df:d1:7b:d9:fe:13:b7:88:64:6b:95:0f: cb:0c:8c:2b:1d:ec:e3:15:ea:44:9e:5d:f3:07:b0: 42:ae:ae:f5:dd:c0:ec:9d:1e:0f:60:bf:be:af:a4: 47:91:4e:7e:6c:90:99:d4:23:d8:b5:28:ac:bb:be: 4b:16:bd:80:a8:a2:ae:d5:78:14:1a:2a:e6:b3:87: 0d:0a:72:f2:b6:19:fe:95:e2:9d:74:4c:df:3e:b0: 57:76:8f:54:98:0a:d1:21:44:b6:66:e4:91:75:76: 3d:8e:36:57:9f:07:48:7e:82:c6:6c:b4:52:87:28: c1:ff:a1:41:d8:54:e8:b7:2b:6e:de:5a:af:da:f8: c2:13:cb:90:34:d9:09:e8:2c:f3:1f:00:57:e7:b4: ee:92:40:45:1b:fc:e6:43:3e:94:80:aa:7d:ab:86: 92:2f:92:d2:a1:39:1d:6c:31:d1:fc:32:e9:91:47: 0a:de:79:ac:e1:6d:ec:79:7e:9b:69:47:e7:f1:cc: dc:4a:e1:ae:cb:5b:5a:cc:10:0d:02:ac:21:20:a5: d5:28:5e:fa:ad:be:05:0b:43:3f:e5:1b:0b:12:79: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:61:DB:2F:1C:54:C4:2D:4A:9A:79:2D:59:BE:F4:64:BD:B3:03:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: 209.71.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b2:f3:c5:2a:71:ba:1e:af:fc:87:11:18:8a:9e:dd:1c:5f: 16:84:d5:56:06:e7:bd:51:7d:ed:b4:7e:e7:b0:dd:34:73:9b: 7b:f4:e3:b2:da:32:db:95:fe:fa:06:be:ff:99:50:44:07:51: 68:3d:c0:2b:c6:22:3e:8f:8d:ad:92:54:ad:ca:b3:43:95:b3: 68:31:3b:5a:0e:0d:8c:dc:6f:7e:be:21:d8:9d:de:47:23:36: 68:d0:93:5c:c4:1c:2d:7c:39:2d:de:ea:67:2f:e0:cc:b4:c8: 6c:1c:29:e0:ee:67:32:62:ed:82:ce:ee:f3:49:53:07:b5:03: 96:45:f8:73:c5:9b:b7:0c:27:50:e4:34:a4:f7:2f:54:40:9a: cd:d5:12:aa:5b:b4:f7:31:cd:89:9b:0d:19:0c:bd:ba:1e:22: 19:18:09:ac:72:10:a9:6d:74:d4:9e:df:1f:f4:99:60:63:d3: f5:96:a3:db:80:a3:3a:9d:dd:b2:8d:37:2d:b1:e3:9a:be:e2: d1:f8:1d:4e:63:2a:54:e1:be:44:b2:77:a7:72:ea:6f:2d:cc: 64:32:c0:3b:b4:d2:8f:a0:4c:ad:d5:77:1d:a8:bf:ba:ab:9c: 8b:14:e8:9c:17:f9:1b:06:0a:7a:21:18:0b:51:ae:d7:be:cc: 75:00:c1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOkU1N3ib8hBOa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NjMzYmU1NjEtMmE0ZC00ODQ4LWFhMWQtNjFmZTVmNDBjY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghUAFolELbO7E5iwPQn64Vp5xdMUSMwSSxhZ xnewKAXf0XvZ/hO3iGRrlQ/LDIwrHezjFepEnl3zB7BCrq713cDsnR4PYL++r6RH kU5+bJCZ1CPYtSisu75LFr2AqKKu1XgUGirms4cNCnLythn+leKddEzfPrBXdo9U mArRIUS2ZuSRdXY9jjZXnwdIfoLGbLRShyjB/6FB2FTotytu3lqv2vjCE8uQNNkJ 6CzzHwBX57TukkBFG/zmQz6UgKp9q4aSL5LSoTkdbDHR/DLpkUcK3nms4W3seX6b aUfn8czcSuGuy1tazBANAqwhIKXVKF76rb4FC0M/5RsLEnm79wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEph2y8cVMQtSpp5LVm+9GS9swMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvZTg0Y2I5YWYtYjcwNi0z Y2Y0LThkZDktN2UyMzMwMTRlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0UcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiy88Uqcboer/yHERiKnt0cXxaE1VYG571Rfe20fuew3TRzm3v047La MtuV/voGvv+ZUEQHUWg9wCvGIj6Pja2SVK3Ks0OVs2gxO1oODYzcb36+Idid3kcj NmjQk1zEHC18OS3e6mcv4My0yGwcKeDuZzJi7YLO7vNJUwe1A5ZF+HPFm7cMJ1Dk NKT3L1RAms3VEqpbtPcxzYmbDRkMvboeIhkYCaxyEKltdNSe3x/0mWBj0/WWo9uA ozqd3bKNNy2x45q+4tH4HU5jKlThvkSyd6dy6m8tzGQywDu00o+gTK3Vdx2ov7qr nIsU6JwX+RsGCnohGAtRrte+zHUAwQA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:20:40 2026 by rpki-client