$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa File: 479384b1-d41c-3e4d-83f2-176a5be6410a.roa (raw, json) Hash identifier: 65mVC/EAf/IhA1MQ77bjATSwMCeoLElkl74gOJ0CwP8= Subject key identifier: 40:EA:DC:1F:03:34:04:05:09:4E:54:FC:C5:41:87:36:7D:7B:EC:89 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584E6F3A353D3603BB2DBA2FD300 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 8987 IP address blocks: 68.71.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:35:3d:36:03:bb:2d:ba:2f:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=74bd7a9e-3f4a-4ef9-94d6-b04f30842e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:99:48:d9:4f:9c:99:89:fa:4e:6e:19:31: aa:30:77:e2:68:51:d0:71:67:81:84:83:38:9c:b7: 92:f5:37:61:16:59:f1:4d:02:b9:a1:98:f1:92:66: 34:d8:d5:9c:d1:7d:1f:7c:a5:c3:6f:a2:06:6c:c7: f5:06:97:91:ad:bf:d1:62:81:38:ba:95:3f:f8:6c: 39:25:56:10:a4:c7:e2:3c:23:e5:be:2a:eb:86:0f: ed:3d:03:ac:a6:f1:e0:4b:11:60:5e:78:7e:d3:b3: 65:e2:45:08:37:0b:96:1d:ec:2f:d0:db:56:92:17: 13:b0:f6:6f:66:7b:07:6b:26:bd:32:30:9f:3f:3d: 29:ba:0f:64:f3:4e:11:20:35:a6:4f:dd:3e:81:f1: ef:21:10:bc:69:36:8b:d4:df:40:c0:3b:3b:a4:cf: 56:a4:d9:50:b1:ea:d4:f7:84:a9:8b:00:2d:ce:9e: 25:07:a6:18:a9:f1:fa:60:76:7e:f9:eb:9a:3f:29: 97:e4:61:43:b4:6e:ba:d5:81:5d:f6:f6:08:cc:9f: 26:5d:7a:48:68:e3:b1:7a:30:40:52:a4:56:c4:b3: 5a:96:f0:70:c0:8d:a9:04:c7:db:ed:0d:14:c4:41: f3:0a:1d:dc:15:d9:c3:54:09:a7:22:8e:8a:21:3a: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EA:DC:1F:03:34:04:05:09:4E:54:FC:C5:41:87:36:7D:7B:EC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a4:d8:d5:98:55:18:9e:7c:98:a1:91:e6:73:06:f5:5b:40: 82:8e:ac:96:fa:6b:fe:ae:f7:a8:19:9f:ee:dd:52:76:5b:46: 0d:21:d7:d8:70:87:0e:86:d3:02:37:b8:3d:73:a0:cd:c9:fd: 3e:b0:20:af:a2:3e:88:ca:bb:f8:86:e6:f9:95:c6:ec:49:ee: e4:06:27:fb:b2:a2:e2:88:e8:57:e1:12:a0:bf:0e:84:33:e9: ee:8a:c1:81:14:7b:e7:b2:46:f5:f4:11:3d:b5:d9:e7:e8:71: c2:ca:c5:d0:90:c4:2f:b6:d6:30:cc:c7:0e:24:bb:23:9a:8e: bb:39:9a:da:51:96:44:d4:46:e3:0d:cb:75:f7:c7:27:f0:9e: 7f:cb:6d:86:20:fb:79:1d:1b:a6:1a:0f:be:b0:03:c3:43:66: e8:48:a7:0f:0f:3b:7a:1b:72:53:ff:68:7c:ef:06:70:ea:6e: b9:eb:5d:52:06:51:38:4b:fe:50:55:7a:1a:f6:2a:7f:4d:54: 10:11:16:3d:91:55:4d:12:c7:24:eb:a8:76:73:fc:ff:06:fb: 30:93:52:3b:18:70:7a:cd:ed:42:50:b3:1a:cf:8d:29:49:a8: 34:f0:3b:cc:39:66:28:7f:24:41:52:ae:6a:8c:36:11:72:04: cf:4c:7a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjU9NgO7Lbov0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NzRiZDdhOWUtM2Y0YS00ZWY5LTk0ZDYtYjA0ZjMwODQyZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSeZSNlPnJmJ+k5uGTGqMHfiaFHQcWeBhIM4 nLeS9TdhFlnxTQK5oZjxkmY02NWc0X0ffKXDb6IGbMf1BpeRrb/RYoE4upU/+Gw5 JVYQpMfiPCPlvirrhg/tPQOspvHgSxFgXnh+07Nl4kUINwuWHewv0NtWkhcTsPZv ZnsHaya9MjCfPz0pug9k804RIDWmT90+gfHvIRC8aTaL1N9AwDs7pM9WpNlQserU 94SpiwAtzp4lB6YYqfH6YHZ++euaPymX5GFDtG661YFd9vYIzJ8mXXpIaOOxejBA UqRWxLNalvBwwI2pBMfb7Q0UxEHzCh3cFdnDVAmnIo6KITqfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDq3B8DNAQFCU5U/MVBhzZ9e+yJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNDc5Mzg0YjEtZDQxYy0z ZTRkLTgzZjItMTc2YTViZTY0MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEak2NWYVRiefJihkeZzBvVbQIKOrJb6a/6u96gZn+7dUnZbRg0h19hw hw6G0wI3uD1zoM3J/T6wIK+iPojKu/iG5vmVxuxJ7uQGJ/uyouKI6FfhEqC/DoQz 6e6KwYEUe+eyRvX0ET212efoccLKxdCQxC+21jDMxw4kuyOajrs5mtpRlkTURuMN y3X3xyfwnn/LbYYg+3kdG6YaD76wA8NDZuhIpw8PO3obclP/aHzvBnDqbrnrXVIG UThL/lBVehr2Kn9NVBARFj2RVU0SxyTrqHZz/P8G+zCTUjsYcHrN7UJQsxrPjSlJ qDTwO8w5Zih/JEFSrmqMNhFyBM9Mepo= -----END CERTIFICATE-----Generated at Fri Jul 24 09:28:01 2026 by rpki-client