$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa File: 88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa (raw, json) Hash identifier: DdSyig7Qs3V5DQ6S+y5ZceRzD1FVzv0Uy3f1CvF5et8= Subject key identifier: 41:79:0D:29:EC:55:9F:66:7A:F2:BB:CB:51:34:BD:A8:7B:D3:C1:B7 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584E35FF14807D20135019DCA1F0 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 17017 IP address blocks: 168.245.136.0/24 maxlen: 24 208.70.144.0/21 maxlen: 21 2604:7fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:14:80:7d:20:13:50:19:dc:a1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=b20246ae-3044-40d8-bba8-d042c25f748e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:e8:80:d8:a5:d6:e7:33:19:96:02:99:9c: 7a:03:39:53:0b:ba:93:b0:a1:f0:d7:68:53:55:cf: b9:52:e1:35:cf:84:82:28:18:11:0e:1d:88:a7:f2: ac:e1:a5:8b:eb:fb:70:3b:bc:7f:81:33:a2:6f:49: eb:f2:62:a8:97:73:e0:1c:8b:fd:1a:90:d2:df:fb: ad:07:0f:4c:c0:3f:f7:f2:4a:a4:85:1e:d5:27:9d: a5:6e:a1:80:9c:88:fa:0d:3c:39:10:75:62:fb:56: 1f:e7:36:67:7c:33:f3:15:c5:a8:c0:1e:57:93:20: 67:ff:dc:65:c2:15:de:87:68:42:0d:8b:fb:d3:9f: de:7b:5f:27:34:8c:c3:e0:ee:76:99:87:e3:15:0f: 36:7e:fa:e6:ee:fe:3f:2f:b9:43:18:88:6f:92:6a: 6b:a5:75:a3:2d:18:69:38:42:c8:6d:a3:d1:5d:af: 42:9c:81:76:00:f8:57:71:5e:7f:98:3d:e8:97:87: a4:57:db:82:40:f3:8e:61:41:73:bd:be:39:ff:78: 34:90:9a:37:27:4d:c6:51:39:75:2f:43:72:a1:0e: b9:ef:69:03:e1:91:9d:83:4e:c4:b5:4f:bf:f7:83: d9:45:7b:7c:55:0f:46:9e:7b:94:8e:68:11:2a:3e: 11:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:0D:29:EC:55:9F:66:7A:F2:BB:CB:51:34:BD:A8:7B:D3:C1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 168.245.136.0/24 208.70.144.0/21 IPv6: 2604:7fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:68:00:98:fc:49:85:d1:b3:7d:b4:da:50:96:21:d9:5c:dd: 6c:66:f6:13:2d:a0:a4:86:b7:f2:fe:fb:b6:0c:28:9c:c1:6f: ee:8f:dd:65:47:8e:e4:df:67:23:40:e0:b5:98:e6:f0:58:40: ae:4d:5d:ea:60:bc:1e:cf:da:0b:47:a8:be:5f:45:f3:a2:7f: 46:92:44:67:9e:5f:78:56:e9:f2:94:0b:e6:e6:31:d3:57:12: 74:73:d5:b5:8e:c8:cd:79:0d:62:28:9e:2b:ac:78:3b:e0:eb: 16:c3:ea:f7:33:e0:5c:14:1d:85:1e:93:b4:14:54:e7:9e:67: 75:b0:c1:55:d0:a5:19:90:74:ff:ce:25:c8:6a:d0:e5:5c:d6: 5d:1c:27:7f:d3:65:7b:55:23:54:d4:a6:6b:9e:e6:89:38:73: 17:fa:40:20:5c:c8:bd:03:16:2e:b0:2e:22:6f:d1:fd:b2:a8: 88:1c:b4:2f:7e:00:cb:88:be:74:fe:b5:8c:e9:5f:66:1c:ce: c7:3a:06:1c:10:60:2a:e1:fc:5a:8f:8c:af:08:b6:d1:d5:b9: f7:18:74:dc:13:f9:2e:97:b2:20:d9:35:36:3b:74:c3:20:dc: 1d:4a:6b:46:e2:08:83:10:a6:cc:01:95:0f:79:03:c0:6d:39: 89:41:f9:f0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE41/xSAfSATUBncofAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk YjIwMjQ2YWUtMzA0NC00MGQ4LWJiYTgtZDA0MmMyNWY3NDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcjogNil1uczGZYCmZx6AzlTC7qTsKHw12hT Vc+5UuE1z4SCKBgRDh2Ip/Ks4aWL6/twO7x/gTOib0nr8mKol3PgHIv9GpDS3/ut Bw9MwD/38kqkhR7VJ52lbqGAnIj6DTw5EHVi+1Yf5zZnfDPzFcWowB5XkyBn/9xl whXeh2hCDYv705/ee18nNIzD4O52mYfjFQ82fvrm7v4/L7lDGIhvkmprpXWjLRhp OELIbaPRXa9CnIF2APhXcV5/mD3ol4ekV9uCQPOOYUFzvb45/3g0kJo3J03GUTl1 L0NyoQ6572kD4ZGdg07EtU+/94PZRXt8VQ9GnnuUjmgRKj4RnQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFEF5DSnsVZ9mevK7y1E0vah708G3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvODhlYzEyZjYtN2EwNS0z MGUxLWJhNjQtZjA3M2UyYTkwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAqPWIAwQD 0EaQMA0EAgACMAcDBQAmBH/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACVoAJj8SYXRs3202lCWIdlc3Wxm 9hMtoKSGt/L++7YMKJzBb+6P3WVHjuTfZyNA4LWY5vBYQK5NXepgvB7P2gtHqL5f RfOif0aSRGeeX3hW6fKUC+bmMdNXEnRz1bWOyM15DWIoniuseDvg6xbD6vcz4FwU HYUek7QUVOeeZ3WwwVXQpRmQdP/OJchq0OVc1l0cJ3/TZXtVI1TUpmue5ok4cxf6 QCBcyL0DFi6wLiJv0f2yqIgctC9+AMuIvnT+tYzpX2Yczsc6BhwQYCrh/FqPjK8I ttHVufcYdNwT+S6XsiDZNTY7dMMg3B1Ka0biCIMQpswBlQ95A8BtOYlB+fA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:27:10 2026 by rpki-client