$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa File: 6c9fb431-548f-3a10-9569-bcae411ab529.roa (raw, json) Hash identifier: XWO87VK+gAx2/+doXvQx4ShgQeUgmcHxVkn18ZX4p1w= Subject key identifier: AE:83:5A:EA:03:75:BD:02:E6:25:99:D1:5B:3D:51:EC:3D:23:A3:16 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584E7E94E8B54D2EE15919984B40 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 62856 IP address blocks: 192.103.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e8:b5:4d:2e:e1:59:19:98:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=8d88dcf0-fe0d-4538-b273-c6e7a4738df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:41:11:07:5a:bb:cb:b7:20:5d:16:06:38:e4: 24:20:b6:52:a9:af:20:2d:3d:98:ac:b2:59:46:47: b3:07:ff:b7:c7:f8:c2:d4:9d:20:33:74:ed:bb:f8: 37:f1:6d:3f:61:cb:38:0b:74:fc:a8:c3:a4:7e:0d: 9b:63:55:df:28:81:9c:3e:38:06:2c:d7:e1:b0:68: a0:7b:97:80:b1:b7:fc:c1:2d:26:41:34:83:ee:94: 82:bd:ca:55:88:fc:5b:3b:54:97:73:6b:1b:49:6a: f1:b5:b3:18:87:c5:c5:7e:d0:d4:6f:9d:00:84:9f: 58:e8:34:13:2d:fb:cb:62:99:09:be:45:b9:99:36: 7c:f5:3e:04:80:70:f8:5c:78:55:0e:0a:b2:85:a1: c7:87:aa:88:81:0a:74:3c:6b:77:72:38:f6:a0:0e: 3f:ac:78:33:19:44:b6:67:64:41:27:6c:18:72:c0: 88:77:bb:3a:65:5e:0e:e3:18:f9:a8:c9:25:30:77: 15:f7:82:10:35:58:96:d4:f5:63:d7:93:a4:c2:4b: 90:6e:0d:54:17:ca:32:5f:61:13:71:d4:b4:22:04: 74:9d:bb:b6:1a:da:1c:3f:c3:0b:10:f7:d8:e1:aa: dc:d5:7b:18:e2:b3:e5:00:05:69:ad:e0:06:46:d0: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:5A:EA:03:75:BD:02:E6:25:99:D1:5B:3D:51:EC:3D:23:A3:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/6c9fb431-548f-3a10-9569-bcae411ab529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 192.103.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:69:1c:ae:0f:6f:63:a4:d3:65:51:fa:28:c5:81:d1:be:5e: 21:64:d8:4e:1b:79:ea:c0:42:9c:61:a4:e9:8b:ce:e6:56:70: af:9f:fb:0d:77:18:4b:03:b3:6a:29:3f:c6:71:65:f4:a2:08: 87:46:88:eb:5e:f2:dd:c5:0c:31:8d:df:17:e3:7a:e5:fd:39: 95:2d:65:c9:30:e8:66:1e:8a:02:72:47:b8:5b:be:17:13:10: 4b:57:17:d1:40:a2:4a:bb:f0:46:03:47:3a:a9:3d:a4:79:b5: de:3b:3f:9c:38:6e:69:74:d5:52:f8:84:a3:bb:d9:17:07:09: 84:5d:ef:40:8f:ed:8b:c0:e2:7f:f1:df:3d:df:08:78:6d:01: 66:42:09:f1:18:5b:e9:8d:ba:86:8b:75:07:26:41:f1:7c:bb: 0a:51:93:b9:a8:3b:85:13:b7:79:bb:c5:05:86:8d:9d:84:ad: 27:1a:78:14:65:27:f5:fe:ec:6f:81:32:71:ea:b3:7a:97:d8: d0:6a:d0:6a:35:1d:6f:61:b8:24:c7:07:4f:fe:32:89:ca:74: fb:54:8d:91:f4:57:a7:74:a3:5f:f4:19:5b:89:bc:d1:6c:b1: 34:12:6b:7e:df:f2:37:ef:3f:c3:b6:91:0c:13:eb:f1:1d:b4: 3f:0e:a8:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOi1TS7hWRmYS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OGQ4OGRjZjAtZmUwZC00NTM4LWIyNzMtYzZlN2E0NzM4ZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0ERB1q7y7cgXRYGOOQkILZSqa8gLT2YrLJZ RkezB/+3x/jC1J0gM3Ttu/g38W0/Ycs4C3T8qMOkfg2bY1XfKIGcPjgGLNfhsGig e5eAsbf8wS0mQTSD7pSCvcpViPxbO1SXc2sbSWrxtbMYh8XFftDUb50AhJ9Y6DQT LfvLYpkJvkW5mTZ89T4EgHD4XHhVDgqyhaHHh6qIgQp0PGt3cjj2oA4/rHgzGUS2 Z2RBJ2wYcsCId7s6ZV4O4xj5qMklMHcV94IQNViW1PVj15OkwkuQbg1UF8oyX2ET cdS0IgR0nbu2GtocP8MLEPfY4arc1XsY4rPlAAVpreAGRtD85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6DWuoDdb0C5iWZ0Vs9Uew9I6MWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNmM5ZmI0MzEtNTQ4Zi0z YTEwLTk1NjktYmNhZTQxMWFiNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwGd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlpHK4Pb2Ok02VR+ijFgdG+XiFk2E4beerAQpxhpOmLzuZWcK+f+w13 GEsDs2opP8ZxZfSiCIdGiOte8t3FDDGN3xfjeuX9OZUtZckw6GYeigJyR7hbvhcT EEtXF9FAokq78EYDRzqpPaR5td47P5w4bml01VL4hKO72RcHCYRd70CP7YvA4n/x 3z3fCHhtAWZCCfEYW+mNuoaLdQcmQfF8uwpRk7moO4UTt3m7xQWGjZ2ErScaeBRl J/X+7G+BMnHqs3qX2NBq0Go1HW9huCTHB0/+MonKdPtUjZH0V6d0o1/0GVuJvNFs sTQSa37f8jfvP8O2kQwT6/EdtD8OqP8= -----END CERTIFICATE-----Generated at Fri Jul 24 09:34:43 2026 by rpki-client