$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/7af24c5d-4554-3127-865f-9a14700458ea.roa File: 7af24c5d-4554-3127-865f-9a14700458ea.roa (raw, json) Hash identifier: QDHLvUwLM7TgzwNyOe+/KmCR8MZdyjCgKiFgFZcqbZQ= Subject key identifier: FE:BB:F2:69:C0:D3:93:01:3A:FE:2B:4C:54:81:11:0C:A4:CF:D2:E0 Certificate issuer: /CN=19eb256a-4db0-45f5-95c3-26a618298e21 Certificate serial: 010D0C9F4328584E8C8A43A4039CCBC3DA92FE20 Authority key identifier: D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/7af24c5d-4554-3127-865f-9a14700458ea.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 396998 IP address blocks: 63.143.16.0/20 maxlen: 24 68.66.16.0/20 maxlen: 24 97.107.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:43:a4:03:9c:cb:c3:da:92:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19eb256a-4db0-45f5-95c3-26a618298e21 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=2971c039-e9c1-4ba2-8a1b-d3b8c8dcfd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:54:6f:de:1e:4f:40:15:4f:fc:a6:62:d4: 33:a1:fe:b3:79:b4:27:ea:c3:d6:5a:c7:50:18:ba: 94:8c:ab:96:ec:cd:9e:47:2d:60:fa:10:09:48:df: 2e:37:79:8c:28:b5:ce:0c:5b:29:92:00:8a:6d:a3: b0:84:40:cb:44:91:43:40:82:4b:05:43:76:02:1d: d8:2c:86:58:25:1e:02:31:f5:69:61:7b:44:38:96: e8:2c:1a:26:fb:ad:4c:18:d5:6c:a9:c4:8a:aa:4c: 29:a6:41:61:48:26:f1:c6:4e:89:ac:18:89:ae:48: fa:95:03:2f:ac:08:7d:0f:0a:49:44:2f:ec:0c:86: c9:62:45:3c:76:51:61:03:29:f8:91:89:56:cf:36: fc:b4:48:79:d5:e0:0e:6b:1c:36:f9:2d:cb:18:55: 11:7a:ad:61:e8:5d:51:31:58:82:49:12:0c:0f:b8: 59:47:53:08:ed:65:ab:80:dd:39:d5:c5:18:c8:18: 63:78:23:9e:c4:e1:4b:8b:88:e2:d9:02:85:ef:01: b7:df:89:3d:b5:6f:ef:41:ed:6f:6f:3e:d0:ea:da: 5b:7b:cb:b0:2f:69:0b:12:b3:c4:da:c9:63:9c:03: 60:5e:9a:a1:39:f0:48:0e:43:33:ca:32:6b:30:8e: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BB:F2:69:C0:D3:93:01:3A:FE:2B:4C:54:81:11:0C:A4:CF:D2:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/7af24c5d-4554-3127-865f-9a14700458ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl X509v3 Authority Key Identifier: keyid:D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer sbgp-ipAddrBlock: critical IPv4: 63.143.16.0/20 68.66.16.0/20 97.107.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c5:de:40:fa:34:74:b7:c1:b3:64:c1:9b:b3:02:f5:44:5b: 9c:97:d8:70:8b:e8:13:0a:c6:66:29:b1:af:4f:3b:5d:90:b6: 7f:b7:b1:ff:6c:8d:11:da:0a:5b:95:a8:8c:b4:fe:4e:ac:26: a0:8f:bb:76:c7:bd:38:53:59:8c:52:76:ad:cf:fe:aa:14:6c: e2:6d:09:f9:04:e0:01:11:48:62:d2:33:65:01:ca:6e:5a:da: a2:76:53:8e:1d:c4:6a:58:c6:ba:2d:20:fd:ea:46:ea:91:b5: bf:0d:8c:e7:22:f1:94:41:91:3c:0e:f2:25:b4:d0:2c:79:37: 31:33:30:e1:31:8e:29:f4:ee:f2:c9:2b:ff:d9:2a:e5:4c:bb: 69:12:20:2a:3f:b3:4b:bb:75:c8:6d:5a:a3:f3:9b:59:ef:bb: 8d:f3:b1:72:fb:13:83:dc:22:06:82:07:d0:ea:49:b7:17:f7: 1b:43:de:9b:e1:46:08:08:6f:84:55:71:f6:8c:65:2f:33:84: a1:66:09:f6:d4:eb:85:dc:fc:f4:2f:ad:2a:ec:a9:71:09:e4: 44:e5:0b:62:35:82:00:fc:4a:b2:15:f0:a3:b8:d4:10:8d:c3: 5e:dd:d9:cd:43:a7:6c:1c:53:12:25:4a:69:4e:a8:2c:ee:ca: 82:4d:da:72 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6MikOkA5zLw9qS/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTllYjI1NmEtNGRiMC00NWY1LTk1YzMtMjZhNjE4Mjk4 ZTIxMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk Mjk3MWMwMzktZTljMS00YmEyLThhMWItZDNiOGM4ZGNmZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr1Ub94eT0AVT/ymYtQzof6zebQn6sPWWsdQ GLqUjKuW7M2eRy1g+hAJSN8uN3mMKLXODFspkgCKbaOwhEDLRJFDQIJLBUN2Ah3Y LIZYJR4CMfVpYXtEOJboLBom+61MGNVsqcSKqkwppkFhSCbxxk6JrBiJrkj6lQMv rAh9DwpJRC/sDIbJYkU8dlFhAyn4kYlWzzb8tEh51eAOaxw2+S3LGFUReq1h6F1R MViCSRIMD7hZR1MI7WWrgN051cUYyBhjeCOexOFLi4ji2QKF7wG334k9tW/vQe1v bz7Q6tpbe8uwL2kLErPE2sljnANgXpqhOfBIDkMzyjJrMI4f9wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFP678mnA05MBOv4rTFSBEQykz9LgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWVi MjU2YS00ZGIwLTQ1ZjUtOTVjMy0yNmE2MTgyOThlMjEvN2FmMjRjNWQtNDU1NC0z MTI3LTg2NWYtOWExNDcwMDQ1OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTllYjI1NmEtNGRiMC00NWY1LTk1 YzMtMjZhNjE4Mjk4ZTIxLzE5ZWIyNTZhLTRkYjAtNDVmNS05NWMzLTI2YTYxODI5 OGUyMS5jcmwwHwYDVR0jBBgwFoAU02u3tJC7BRMPau4HDBeFaI7xPuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWViMjU2YS00ZGIwLTQ1ZjUtOTVjMy0yNmE2 MTgyOThlMjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEP48QAwQE REIQAwQEYWtQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG/F3kD6NHS3wbNkwZuzAvVEW5yX2HCL6BMKxmYp sa9PO12Qtn+3sf9sjRHaCluVqIy0/k6sJqCPu3bHvThTWYxSdq3P/qoUbOJtCfkE 4AERSGLSM2UBym5a2qJ2U44dxGpYxrotIP3qRuqRtb8NjOci8ZRBkTwO8iW00Cx5 NzEzMOExjin07vLJK//ZKuVMu2kSICo/s0u7dchtWqPzm1nvu43zsXL7E4PcIgaC B9DqSbcX9xtD3pvhRggIb4RVcfaMZS8zhKFmCfbU64Xc/PQvrSrsqXEJ5ETlC2I1 ggD8SrIV8KO41BCNw17d2c1Dp2wcUxIlSmlOqCzuyoJN2nI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:36:07 2026 by rpki-client