$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa File: a49b889f-76a4-3203-9129-fe4a745eeb7c.roa (raw, json) Hash identifier: Y5ofkrzYxKhTmWFJ424hZRMeCR8TU9GEXC3kwj+9JFg= Subject key identifier: BC:34:C0:42:75:18:0D:7C:26:5F:C2:34:50:48:8F:00:DC:0C:65:79 Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F4328584E7E94F446D58D23F50D2E4180 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 19905 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f4:46:d5:8d:23:f5:0d:2e:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=ddbf3756-f201-469f-904d-16c41d5c0607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b2:6b:a1:94:a4:e5:e9:b4:31:af:d8:92:51: f8:16:5f:2e:77:50:97:d7:e8:81:03:e7:9a:d0:fc: c3:0c:17:0a:ea:94:22:fd:5d:7c:cc:a5:91:44:9f: 2c:f9:82:61:b2:9d:25:e0:86:d4:1b:9e:2f:53:32: 48:2d:7f:ab:b0:9f:62:6d:df:e5:3a:b6:40:b1:52: b9:45:e2:f1:ee:61:80:f7:eb:ba:5d:16:36:97:1d: f4:e4:99:ff:5c:5e:66:25:43:56:5d:ee:37:e5:87: 10:e5:6c:89:ee:66:c1:54:bc:41:6b:8e:5e:12:05: ad:9a:d9:c5:98:18:85:a6:2b:4a:c5:3f:94:25:d6: ca:4e:66:14:08:a1:c8:5c:2e:dc:49:9c:32:b3:23: a1:bb:9d:e8:15:39:ca:56:b9:f1:b3:04:56:bb:dd: b5:e7:c3:ae:97:32:e6:1d:f2:be:c0:38:4c:d1:a7: 9e:1b:5d:2f:fb:cf:93:dc:fb:dd:b8:47:d4:c2:02: 28:86:f6:bd:a5:82:01:1a:f9:58:c1:28:4d:e9:aa: 07:b8:a0:72:d0:72:ea:cd:c8:60:96:1a:89:ee:ca: 28:0f:b6:c6:c9:fc:ea:54:67:32:11:85:9b:d6:1c: f7:89:36:28:7a:89:40:00:73:81:9c:30:fb:c6:74: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:34:C0:42:75:18:0D:7C:26:5F:C2:34:50:48:8F:00:DC:0C:65:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:89:5c:f6:af:ce:2e:91:ec:38:d3:72:48:02:e8:4b:ec:9c: 3e:3b:6c:f6:ec:a9:4c:34:70:d0:cf:59:cd:b8:3f:30:89:9d: 61:3a:d9:ef:fb:37:36:31:79:62:b0:c7:4d:2b:50:78:cf:72: 9c:8e:fb:6d:e9:c1:eb:ea:9f:c1:66:f6:59:91:17:69:94:37: 37:43:e8:72:c0:25:30:8e:29:80:07:7f:88:2e:ae:9d:9a:39: 10:8a:92:2b:02:c2:12:7a:70:26:d0:0a:d5:1c:fc:00:23:d6: c1:5d:ac:3f:e7:5d:94:f1:79:76:bb:39:ca:12:ee:32:19:11: 2f:b2:9f:00:cb:27:a4:3b:5a:e2:a5:dc:87:03:ec:e4:2f:eb: 9b:9f:c9:48:78:36:73:73:a0:39:09:16:db:a0:d1:66:30:6b: 33:1e:45:b7:74:34:79:75:a7:5f:a6:52:fa:de:76:35:ed:32: a6:85:c4:8d:67:11:4f:d5:ce:9a:29:43:b5:9b:eb:8d:58:15: 45:90:a6:e3:65:67:86:ee:62:ea:54:64:20:76:77:60:a4:83: 3c:1f:ec:38:e0:cb:30:15:ff:0e:8e:9f:6b:91:6d:ca:dd:d4: 25:a2:df:ca:4c:84:45:69:4d:61:65:86:07:4a:26:a3:06:1a: 89:ea:ad:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPRG1Y0j9Q0uQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGRiZjM3NTYtZjIwMS00NjlmLTkwNGQtMTZjNDFkNWMwNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrJroZSk5em0Ma/YklH4Fl8ud1CX1+iBA+ea 0PzDDBcK6pQi/V18zKWRRJ8s+YJhsp0l4IbUG54vUzJILX+rsJ9ibd/lOrZAsVK5 ReLx7mGA9+u6XRY2lx305Jn/XF5mJUNWXe435YcQ5WyJ7mbBVLxBa45eEgWtmtnF mBiFpitKxT+UJdbKTmYUCKHIXC7cSZwysyOhu53oFTnKVrnxswRWu92158OulzLm HfK+wDhM0aeeG10v+8+T3PvduEfUwgIohva9pYIBGvlYwShN6aoHuKBy0HLqzchg lhqJ7sooD7bGyfzqVGcyEYWb1hz3iTYoeolAAHOBnDD7xnQe+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw0wEJ1GA18Jl/CNFBIjwDcDGV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvYTQ5Yjg4OWYtNzZhNC0z MjAzLTkxMjktZmU0YTc0NWVlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOJXPavzi6R7DjTckgC6EvsnD47bPbsqUw0cNDPWc24PzCJnWE62e/7 NzYxeWKwx00rUHjPcpyO+23pwevqn8Fm9lmRF2mUNzdD6HLAJTCOKYAHf4gurp2a ORCKkisCwhJ6cCbQCtUc/AAj1sFdrD/nXZTxeXa7OcoS7jIZES+ynwDLJ6Q7WuKl 3IcD7OQv65ufyUh4NnNzoDkJFtug0WYwazMeRbd0NHl1p1+mUvredjXtMqaFxI1n EU/VzpopQ7Wb641YFUWQpuNlZ4buYupUZCB2d2Ckgzwf7DjgyzAV/w6On2uRbcrd 1CWi38pMhEVpTWFlhgdKJqMGGonqrdM= -----END CERTIFICATE-----Generated at Thu Jul 23 23:25:39 2026 by rpki-client