$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa File: eae38249-949c-338e-a384-9f61ab8838c3.roa (raw, json) Hash identifier: GFUB6iUhUBqFbOImEiksRGWGiUkd+u7fp8C9RuDM6Uw= Subject key identifier: C6:13:DB:17:3A:DB:D6:88:B3:8E:FB:E6:D2:38:E5:CF:79:BD:53:62 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584E7E94E49432BAA7A2AE560590 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 62856 IP address blocks: 64.207.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e4:94:32:ba:a7:a2:ae:56:05:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=db6d3e4e-b32e-4734-b553-481c9d83cf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:b6:c5:28:fd:52:86:c5:52:c7:ef:c8:c6: 9a:84:18:a8:54:32:0a:85:95:37:86:aa:c8:08:2e: 4e:b8:b5:75:c5:0c:2f:6e:c5:31:68:c5:23:60:fb: ce:27:e4:b1:38:3e:5c:ca:9b:fb:f4:0a:ff:4b:0d: 3f:ea:07:cf:bd:89:65:58:b8:3b:50:41:a2:3d:62: b9:a4:fa:11:62:2f:f6:21:45:d0:df:95:c8:61:1e: 47:8c:88:13:f4:06:44:f6:45:70:a1:23:e6:7a:af: a3:24:be:88:68:f8:07:a3:e6:ff:b4:63:38:10:ac: 6e:1e:09:92:b7:6c:e2:7d:86:85:86:86:76:79:1a: 30:6e:09:5f:fb:3b:f0:d6:31:b9:44:a0:ed:8c:8b: 58:02:e3:97:aa:8c:13:c0:12:22:6b:95:47:79:fd: 20:49:68:a7:9a:fe:22:fb:1d:12:0c:8e:36:d1:09: 76:3d:98:3d:ce:6a:9f:f7:59:43:12:d3:a1:c3:72: 4d:8c:50:f8:1e:48:ad:79:88:8a:54:c6:82:1b:d1: 28:0a:f1:39:d3:57:3d:4d:d4:04:2e:b0:b5:c7:fa: 79:28:4e:1f:2d:87:8f:a7:29:8b:cc:35:b1:b5:bd: 76:06:c7:6b:d0:d8:d0:05:70:23:08:9b:4b:d1:09: 81:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:DB:17:3A:DB:D6:88:B3:8E:FB:E6:D2:38:E5:CF:79:BD:53:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 64.207.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0b:67:66:5c:29:7a:d6:c7:cd:07:86:78:61:2d:ca:79:3a: 77:e2:2d:25:68:22:37:e8:26:72:81:5e:0c:08:36:d6:1d:ee: 18:19:f6:29:bc:82:0b:72:f9:b2:f3:92:2e:c3:1b:7c:70:f3: b6:35:44:94:91:0a:11:dd:61:a3:25:82:f2:97:83:ab:62:18: fe:7f:4a:14:ad:b4:d7:29:be:84:47:65:74:6c:a5:09:99:1e: 38:81:0b:18:90:a6:0d:9c:98:e2:1f:2c:65:79:6d:52:e0:e1: ec:ef:84:0a:7f:8b:99:6d:e8:02:85:3e:1d:1f:e8:da:2e:5b: 4b:d9:73:d8:53:dd:ef:8d:2a:19:d7:91:84:d1:8d:94:f4:08: 64:e5:1d:28:41:64:4d:dc:b3:62:52:0c:c4:0f:4e:22:02:70: ff:49:b7:c9:1a:3c:6d:e8:e8:6b:c3:96:e2:19:63:d9:0f:4f: ee:9f:f6:de:dd:83:19:40:4a:2f:64:93:12:73:ab:d7:72:b8: 48:e3:1e:b6:8d:62:78:f4:d0:e4:25:e9:6f:e7:40:d0:e7:cc: 18:d5:85:0d:19:19:94:ac:38:55:6c:73:de:c3:b0:a1:ef:1a: 08:31:74:d9:2e:e1:e7:03:23:72:75:4c:86:f5:d1:3d:49:a5: 57:af:96:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOSUMrqnoq5WBZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGI2ZDNlNGUtYjMyZS00NzM0LWI1NTMtNDgxYzlkODNjZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x+2xSj9UobFUsfvyMaahBioVDIKhZU3hqrI CC5OuLV1xQwvbsUxaMUjYPvOJ+SxOD5cypv79Ar/Sw0/6gfPvYllWLg7UEGiPWK5 pPoRYi/2IUXQ35XIYR5HjIgT9AZE9kVwoSPmeq+jJL6IaPgHo+b/tGM4EKxuHgmS t2zifYaFhoZ2eRowbglf+zvw1jG5RKDtjItYAuOXqowTwBIia5VHef0gSWinmv4i +x0SDI420Ql2PZg9zmqf91lDEtOhw3JNjFD4HkiteYiKVMaCG9EoCvE501c9TdQE LrC1x/p5KE4fLYePpymLzDWxtb12Bsdr0NjQBXAjCJtL0QmBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYT2xc629aIs4775tI45c95vVNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZWFlMzgyNDktOTQ5Yy0z MzhlLWEzODQtOWY2MWFiODgzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4LZ2ZcKXrWx80HhnhhLcp5OnfiLSVoIjfoJnKBXgwINtYd7hgZ9im8 ggty+bLzki7DG3xw87Y1RJSRChHdYaMlgvKXg6tiGP5/ShSttNcpvoRHZXRspQmZ HjiBCxiQpg2cmOIfLGV5bVLg4ezvhAp/i5lt6AKFPh0f6NouW0vZc9hT3e+NKhnX kYTRjZT0CGTlHShBZE3cs2JSDMQPTiICcP9Jt8kaPG3o6GvDluIZY9kPT+6f9t7d gxlASi9kkxJzq9dyuEjjHraNYnj00OQl6W/nQNDnzBjVhQ0ZGZSsOFVsc97DsKHv GggxdNku4ecDI3J1TIb10T1JpVevlqk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:55:00 2026 by rpki-client