$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa File: 98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa (raw, json) Hash identifier: Q5Ib0Gc68RE2DaMQWj7bBjA/OmrpDzbpk3YJYH2rX7Q= Subject key identifier: 6C:C6:89:2B:31:67:FE:D8:46:CC:4C:A5:E6:60:8D:BE:4B:60:53:5F Certificate issuer: /CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6 Certificate serial: 010D0C9F4328584E815F981F9FB3040708C37500 Authority key identifier: B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 53684 IP address blocks: 67.209.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:98:1f:9f:b3:04:07:08:c3:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=3e4d8901-d48e-4aea-8f1d-6990a66f6120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e2:0c:51:cf:28:1d:8b:e3:0d:1e:01:4a:c5: 2f:b2:62:58:a3:c7:8a:52:36:0f:cf:ae:d0:b6:03: 97:ac:4c:c3:4c:99:b6:c2:e3:66:c2:64:ec:ed:e6: 62:06:0e:7e:94:15:5e:43:cf:8b:ea:fe:2a:8a:04: fd:cb:02:1c:8d:d5:3a:40:83:30:b4:35:fb:5d:5d: eb:6b:dc:af:fd:e9:ff:b9:cc:bd:55:ef:4e:09:f0: ca:e2:33:c3:fd:de:ad:b4:f6:71:43:50:5f:da:49: 3c:b6:5c:cd:fd:a1:56:e9:e4:fb:9a:b4:9e:1c:7d: 74:28:cf:28:82:a5:9e:f8:f4:36:95:5d:df:30:af: 04:52:d8:5d:89:87:17:46:97:1f:75:63:00:e3:bc: 32:b8:3b:71:e1:4c:51:f9:f1:53:18:67:77:64:72: 02:7b:52:bb:c4:e7:d8:c5:df:b2:4d:b8:71:d7:d0: 7a:3c:8d:52:ac:ee:aa:6b:71:8e:d5:7d:ea:d5:db: d3:0e:e5:2d:1f:33:98:f3:86:59:09:fe:26:91:e4: 82:77:f1:ae:e5:2e:5e:b9:b6:f4:9c:ec:5c:a7:31: 8d:14:9b:0a:db:f8:9b:67:aa:b5:f3:14:00:37:5b: 32:48:15:5b:b3:b8:54:80:5f:1a:51:a7:dc:23:8b: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:89:2B:31:67:FE:D8:46:CC:4C:A5:E6:60:8D:BE:4B:60:53:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl X509v3 Authority Key Identifier: keyid:B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer sbgp-ipAddrBlock: critical IPv4: 67.209.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3b:2d:33:8f:81:c0:9f:ed:f5:5d:84:9e:5e:97:6a:a1:ca: da:36:af:74:f8:81:5d:fb:cc:c1:6e:f1:87:7d:60:17:5d:2b: 2f:df:30:f2:e7:a8:da:9b:55:a5:16:38:d6:09:ef:b7:6f:05: 77:19:8c:1d:d1:ad:f8:80:1b:95:0a:ac:96:1f:42:94:6a:6f: cf:ba:7f:51:de:8a:ea:6c:df:61:3d:87:ac:ac:59:da:66:01: 66:ee:5a:a1:ca:7d:e9:d8:41:83:a0:cd:13:4b:87:1e:35:08: 08:5a:cc:0d:8d:91:08:2c:d8:e9:38:a6:cf:88:89:b0:e4:42: 2d:25:38:43:b8:c8:93:a2:35:81:7c:57:63:dc:94:a3:1e:19: 1e:7d:19:4f:3c:db:71:31:0e:0c:1f:53:c1:e6:21:89:43:56: e0:63:66:92:50:72:38:2b:16:d4:69:da:42:08:61:d9:1b:3c: e9:fd:df:6b:46:b1:50:c7:7d:d6:f3:8c:6a:db:be:6e:74:85: 66:fb:07:48:e0:6a:00:c7:f4:93:e8:88:89:a6:d2:e7:3b:4d: 40:02:fe:1c:87:cb:6c:fa:8f:b9:0c:0d:3a:34:55:87:5e:c3: b7:00:f6:a0:e1:69:80:f5:17:e0:7c:8c:9f:58:9e:cd:03:42: 8d:81:02:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5gfn7MEBwjDdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI3YTg1NTctM2NiOS00Y2U3LTg5M2MtNThkMDQ2MTcz N2I2MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk M2U0ZDg5MDEtZDQ4ZS00YWVhLThmMWQtNjk5MGE2NmY2MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeIMUc8oHYvjDR4BSsUvsmJYo8eKUjYPz67Q tgOXrEzDTJm2wuNmwmTs7eZiBg5+lBVeQ8+L6v4qigT9ywIcjdU6QIMwtDX7XV3r a9yv/en/ucy9Ve9OCfDK4jPD/d6ttPZxQ1Bf2kk8tlzN/aFW6eT7mrSeHH10KM8o gqWe+PQ2lV3fMK8EUthdiYcXRpcfdWMA47wyuDtx4UxR+fFTGGd3ZHICe1K7xOfY xd+yTbhx19B6PI1SrO6qa3GO1X3q1dvTDuUtHzOY84ZZCf4mkeSCd/Gu5S5eubb0 nOxcpzGNFJsK2/ibZ6q18xQAN1sySBVbs7hUgF8aUafcI4vvTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzGiSsxZ/7YRsxMpeZgjb5LYFNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYjdh ODU1Ny0zY2I5LTRjZTctODkzYy01OGQwNDYxNzM3YjYvOTg0OTBlYjUtNmJkNS0z NjJkLTk2ZWMtM2U5ZGU4MTVjZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWI3YTg1NTctM2NiOS00Y2U3LTg5 M2MtNThkMDQ2MTczN2I2LzFiN2E4NTU3LTNjYjktNGNlNy04OTNjLTU4ZDA0NjE3 MzdiNi5jcmwwHwYDVR0jBBgwFoAUtnD1lCq+gt8WwiEb4JFQfWp4zx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYjdhODU1Ny0zY2I5LTRjZTctODkzYy01OGQw NDYxNzM3YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ9HgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk7LTOPgcCf7fVdhJ5el2qhyto2r3T4gV37zMFu8Yd9YBddKy/fMPLn qNqbVaUWONYJ77dvBXcZjB3RrfiAG5UKrJYfQpRqb8+6f1Heiups32E9h6ysWdpm AWbuWqHKfenYQYOgzRNLhx41CAhazA2NkQgs2Ok4ps+IibDkQi0lOEO4yJOiNYF8 V2PclKMeGR59GU8823ExDgwfU8HmIYlDVuBjZpJQcjgrFtRp2kIIYdkbPOn932tG sVDHfdbzjGrbvm50hWb7B0jgagDH9JPoiImm0uc7TUAC/hyHy2z6j7kMDTo0VYde w7cA9qDhaYD1F+B8jJ9Yns0DQo2BAnk= -----END CERTIFICATE-----Generated at Fri Jul 24 00:27:14 2026 by rpki-client