$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa File: a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa (raw, json) Hash identifier: /PV5/3lN+/uMjFT/+mgU1v3TYuyRM5CS6R34+S3orls= Subject key identifier: 5C:EF:E1:22:9C:6A:DB:F1:03:D1:95:E7:FF:30:39:07:82:12:A9:E8 Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584E7204C9EE3640C8ACC31BA800 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 33189 IP address blocks: 206.71.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c9:ee:36:40:c8:ac:c3:1b:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=b0fbbccc-ca79-486d-bae1-052b0a4d213a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:2b:44:59:6e:0b:3f:b5:38:8a:43:6c:2b: b2:87:35:73:a8:ae:bd:3c:a0:b1:71:11:c5:cc:0a: a7:ad:c0:b1:cd:c2:e5:e9:78:b0:e9:9f:3a:72:6a: 1b:23:01:06:37:c1:c7:2d:e7:b4:7a:b8:33:f1:6b: ee:ae:96:1b:bf:39:b5:98:71:ec:3f:a6:26:a7:a6: cb:7f:84:a8:01:be:0e:29:dc:2c:90:87:97:d6:11: c6:a2:8c:91:8d:43:e2:12:df:b3:6d:32:59:cc:27: fd:05:d8:c9:0f:96:e5:a2:ae:07:76:5a:1b:8d:17: f8:ec:16:0d:40:d5:92:4a:ff:c4:79:d8:10:67:79: c3:b0:58:2a:d0:0a:65:2a:cd:d0:62:d4:d9:e2:b3: 5b:78:64:74:b6:3a:3f:83:28:10:f1:69:bf:10:bd: 96:c4:80:43:a8:e1:d2:3a:61:dc:82:f4:9f:df:34: 30:a4:16:d3:b4:54:55:21:41:97:8c:81:44:18:13: 01:18:1b:00:a9:fc:fb:29:fc:d3:0a:f0:b3:cd:65: be:47:df:63:b8:f0:89:d9:ba:34:77:a4:95:32:8e: 3b:56:7e:2a:ad:1e:96:f8:4f:fa:dd:30:29:31:27: b7:71:58:96:d3:2d:3e:15:e1:19:24:f5:23:3e:d3: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EF:E1:22:9C:6A:DB:F1:03:D1:95:E7:FF:30:39:07:82:12:A9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv4: 206.71.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0a:92:2f:46:a7:d3:f6:e1:50:a8:3a:f1:0f:43:d1:c0:64: cf:49:9b:51:d2:64:df:1e:22:73:6e:a2:13:0c:46:15:43:dd: a0:59:f2:86:b7:88:0f:47:e2:af:f4:71:77:6d:48:2a:35:14: 97:dc:ee:cd:7c:ba:2b:ac:d5:9f:cc:97:6a:37:12:42:b6:f6: 75:a0:7a:1f:8f:43:f2:81:c5:00:ee:69:4f:3e:56:b7:ef:64: 55:d1:f1:ff:41:f8:4a:2a:89:fb:a6:6b:87:9d:74:91:a2:34: fc:02:05:5a:3b:6e:eb:47:3a:a1:3f:ab:03:5c:1b:d3:e8:7c: 3d:e3:9c:42:5b:0a:97:d1:40:e7:60:a0:fc:21:b0:33:4e:e2: 7c:42:9c:fd:23:bb:9f:a8:d0:0d:db:89:5f:6e:dd:75:82:83: 98:ce:62:49:f0:65:63:3c:46:90:c5:6e:6e:58:ba:14:71:ee: 02:ec:91:33:4d:13:fb:dc:a0:a1:c5:8c:d9:7e:8c:85:e6:87: cc:95:ff:3a:1c:fc:db:38:7e:f1:09:6f:eb:14:0d:07:c2:2e: af:49:33:9d:61:f1:37:08:c6:98:b1:d2:9c:88:83:54:e5:47: 03:0d:05:c5:a0:c4:fe:90:c2:75:c9:ae:a7:2a:05:6a:c4:61: 50:9f:af:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMnuNkDIrMMbqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YjBmYmJjY2MtY2E3OS00ODZkLWJhZTEtMDUyYjBhNGQyMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHArRFluCz+1OIpDbCuyhzVzqK69PKCxcRHF zAqnrcCxzcLl6Xiw6Z86cmobIwEGN8HHLee0ergz8WvurpYbvzm1mHHsP6Ymp6bL f4SoAb4OKdwskIeX1hHGooyRjUPiEt+zbTJZzCf9BdjJD5bloq4HdlobjRf47BYN QNWSSv/EedgQZ3nDsFgq0AplKs3QYtTZ4rNbeGR0tjo/gygQ8Wm/EL2WxIBDqOHS OmHcgvSf3zQwpBbTtFRVIUGXjIFEGBMBGBsAqfz7KfzTCvCzzWW+R99juPCJ2bo0 d6SVMo47Vn4qrR6W+E/63TApMSe3cViW0y0+FeEZJPUjPtNUFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzv4SKcatvxA9GV5/8wOQeCEqnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvYTk1YWI0OGEtOWZmOS0z ZDkxLTg3ZTktMGVmZTgyY2RmYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Kki9Gp9P24VCoOvEPQ9HAZM9Jm1HSZN8eInNuohMMRhVD3aBZ8oa3 iA9H4q/0cXdtSCo1FJfc7s18uius1Z/Ml2o3EkK29nWgeh+PQ/KBxQDuaU8+Vrfv ZFXR8f9B+Eoqifuma4eddJGiNPwCBVo7butHOqE/qwNcG9PofD3jnEJbCpfRQOdg oPwhsDNO4nxCnP0ju5+o0A3biV9u3XWCg5jOYknwZWM8RpDFbm5YuhRx7gLskTNN E/vcoKHFjNl+jIXmh8yV/zoc/Ns4fvEJb+sUDQfCLq9JM51h8TcIxpix0pyIg1Tl RwMNBcWgxP6QwnXJrqcqBWrEYVCfr34= -----END CERTIFICATE-----Generated at Fri Jul 24 10:14:17 2026 by rpki-client