$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa File: 432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa (raw, json) Hash identifier: yaKWrGyQzxqkZnaGlDHpWayevz0eD6SPG/eQ4v8exAE= Subject key identifier: 58:F7:A6:A0:79:B6:46:71:E3:4F:25:96:F6:78:97:94:C7:87:82:1E Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Certificate serial: 010D0C9F4328584E7634DA0EEAC4D78594CD7B00 Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 13213 IP address blocks: 216.119.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:da:0e:ea:c4:d7:85:94:cd:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=f8e0e235-3132-44fa-b9a8-c3e0482d2492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:cc:7a:7f:96:28:85:ad:4f:b0:44:97:15: 82:09:b0:ca:ec:fb:db:24:a4:ce:18:20:6a:b0:27: b5:52:a4:bc:8c:9a:b9:8c:7f:c9:cd:79:90:e9:de: 40:3d:9e:a0:fd:6f:9a:6e:52:a3:64:ab:7d:ca:74: 29:3a:2a:d2:5f:61:18:11:bb:2e:83:90:a8:5e:55: c1:d8:4d:f8:fb:41:53:38:e2:cc:bf:2f:98:39:0c: cf:63:72:62:1e:e4:f6:35:70:1b:ce:93:0a:ac:20: 73:cb:53:f8:7d:47:18:b6:7c:16:dd:f1:db:9f:32: 1c:c3:74:6c:71:c9:c1:d8:d5:be:f2:de:8e:65:a3: 47:cf:89:e4:7e:a3:2e:bc:49:43:fd:af:7e:51:ad: 1e:1a:8a:f1:d3:14:41:30:d5:ee:1a:bf:39:52:a3: 89:6e:2f:45:03:ab:37:16:07:e0:45:83:4c:7a:2c: 00:36:8b:39:2f:cc:b5:6a:52:c1:72:cc:54:35:b0: 37:84:9b:13:8f:7f:2c:80:fd:b8:25:38:2c:32:5f: 0b:62:6a:ab:20:10:3d:ae:25:08:21:52:75:9c:8f: 33:3e:b1:ec:f8:50:b2:2a:b3:c9:b3:03:e1:6e:91: c9:57:63:a6:0e:7a:bc:a3:ce:5f:de:32:11:63:dd: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:A6:A0:79:B6:46:71:E3:4F:25:96:F6:78:97:94:C7:87:82:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/432de1aa-0852-3e3b-87a9-c4fe7d7e1228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl X509v3 Authority Key Identifier: keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer sbgp-ipAddrBlock: critical IPv4: 216.119.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ed:79:f7:b9:51:24:27:dc:54:ec:89:d5:a3:d8:9b:f3:59: b8:47:af:f8:1a:68:9b:0a:12:71:0f:86:56:83:c5:56:be:ef: 82:b1:e5:de:a6:18:ec:7a:72:f9:2d:b0:fa:5a:4b:ca:9f:cc: 34:81:14:66:16:0c:8c:38:ee:22:65:5e:12:28:ff:97:4e:1e: 94:8d:48:d9:20:cc:24:88:63:1a:cd:e7:09:2b:ac:16:40:da: 2f:35:7a:c3:d9:4c:28:be:c5:f4:b0:8c:3f:03:28:3b:f8:7e: 16:95:88:56:43:d7:64:e3:14:86:c2:94:28:6e:cd:73:bb:d3: e9:02:39:db:b4:31:70:d9:8e:b4:4d:ea:e1:04:1b:bf:a9:81: 0b:60:01:02:9a:1a:a0:7d:2f:34:99:84:d1:e5:f6:2d:ea:14: 4a:36:33:e7:b0:e2:6b:39:73:d9:33:c1:44:94:71:51:d3:e6: cb:1f:bc:bb:bd:76:85:f7:b7:14:ef:3e:ad:f0:ac:80:96:7e: ac:19:8d:f7:92:d5:5d:44:59:c4:46:52:21:5c:24:a7:97:2e: 35:d6:d2:87:be:c0:d3:f5:f8:b9:b7:ab:86:78:6e:81:b6:1e: 41:b2:c8:c0:69:b2:c4:52:c7:ef:4d:c9:ce:5f:aa:77:bf:14: 04:3a:cd:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNoO6sTXhZTNewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi MDNmMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjhlMGUyMzUtMzEzMi00NGZhLWI5YTgtYzNlMDQ4MmQyNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqrMen+WKIWtT7BElxWCCbDK7PvbJKTOGCBq sCe1UqS8jJq5jH/JzXmQ6d5APZ6g/W+ablKjZKt9ynQpOirSX2EYEbsug5CoXlXB 2E34+0FTOOLMvy+YOQzPY3JiHuT2NXAbzpMKrCBzy1P4fUcYtnwW3fHbnzIcw3Rs ccnB2NW+8t6OZaNHz4nkfqMuvElD/a9+Ua0eGorx0xRBMNXuGr85UqOJbi9FA6s3 FgfgRYNMeiwANos5L8y1alLBcsxUNbA3hJsTj38sgP24JTgsMl8LYmqrIBA9riUI IVJ1nI8zPrHs+FCyKrPJswPhbpHJV2OmDnq8o85f3jIRY91lXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj3pqB5tkZx408llvZ4l5THh4IeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvNDMyZGUxYWEtMDg1Mi0z ZTNiLTg3YTktYzRmZTdkN2UxMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/tefe5USQn3FTsidWj2JvzWbhHr/gaaJsKEnEPhlaDxVa+74Kx5d6m GOx6cvktsPpaS8qfzDSBFGYWDIw47iJlXhIo/5dOHpSNSNkgzCSIYxrN5wkrrBZA 2i81esPZTCi+xfSwjD8DKDv4fhaViFZD12TjFIbClChuzXO70+kCOdu0MXDZjrRN 6uEEG7+pgQtgAQKaGqB9LzSZhNHl9i3qFEo2M+ew4ms5c9kzwUSUcVHT5ssfvLu9 doX3txTvPq3wrICWfqwZjfeS1V1EWcRGUiFcJKeXLjXW0oe+wNP1+Lm3q4Z4boG2 HkGyyMBpssRSx+9Nyc5fqne/FAQ6zUM= -----END CERTIFICATE-----Generated at Fri Jul 24 12:58:49 2026 by rpki-client