$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa File: cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json) Hash identifier: 9ffT53pFm613O3yBEP8yVo+50+MNF72zu+nC+gGWTmU= Subject key identifier: E7:25:1F:C4:AC:65:A1:5C:5C:F4:E8:D5:88:BC:74:C9:7F:4F:B7:9C Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584E86F4F15A55282C41FB7C3A00 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 7922 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f1:5a:55:28:2c:41:fb:7c:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=00e5b785-6be2-4ac3-859f-da767ae540c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:10:f8:d2:ab:e3:87:88:e5:81:83:4b:b0: f8:3c:5a:92:a0:03:28:07:5f:2c:66:fe:d0:c9:f7: d6:45:b3:f4:e6:43:06:eb:4f:6f:49:66:50:92:ab: 23:cf:9a:39:bd:4e:6b:b3:86:25:70:60:67:10:a8: 39:27:8a:43:44:d8:b5:6c:7f:11:c5:e2:ed:8a:9c: 0f:2b:a8:33:f9:1b:6e:67:97:01:24:c3:14:ce:54: 79:9e:7f:90:6e:72:b8:fa:c0:88:06:c1:72:da:21: 8f:44:c3:f8:2e:36:cb:80:0d:35:a6:db:40:33:d5: a8:5f:09:14:76:fc:11:63:d7:57:82:df:3b:5c:f8: f4:75:ad:bf:4d:a3:7c:3c:be:7d:5d:12:23:71:88: 2e:3d:43:3e:76:d1:5a:22:ef:73:f7:1c:28:3d:51: d7:0e:6a:95:d3:4f:bb:56:18:82:79:20:59:17:37: 39:d2:5d:8f:91:a1:41:ed:25:9c:14:e3:88:79:5e: bf:22:24:29:d6:33:e8:99:8c:ca:ae:c3:5c:14:17: 0d:5e:07:20:9b:4e:f9:bf:44:28:ac:0f:3e:8a:f1: ad:b8:11:83:e5:51:72:29:1d:65:4d:16:c5:7e:03: d3:1f:b1:a8:6c:32:53:eb:5e:08:68:86:8d:f2:a9: 08:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:1F:C4:AC:65:A1:5C:5C:F4:E8:D5:88:BC:74:C9:7F:4F:B7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f0:7a:89:88:d1:df:c6:34:88:ac:f1:51:70:ce:7c:c7:fc: f6:a6:d0:4c:2f:f3:8f:51:1a:fc:97:70:c5:77:22:87:58:ab: d9:49:3c:c3:33:f6:dd:49:56:59:75:d2:82:67:dc:44:6d:70: bf:8a:c2:55:34:b4:d8:09:fb:d1:8c:f0:be:02:f9:79:e6:28: 0f:e2:0d:4d:b6:96:cf:52:f7:ab:e0:a3:99:fc:d4:7a:2a:f6: 38:27:9c:93:be:8c:13:9d:05:bd:b1:3f:61:53:45:39:a1:90: a8:0f:99:10:56:6a:43:07:d2:d2:bb:16:22:f3:30:31:8d:d5: 7d:4e:6d:37:66:56:78:d2:3a:1f:ca:e4:31:38:85:a6:cf:6e: 5e:c5:45:4e:e3:51:60:80:08:80:9b:c9:d6:06:34:a1:c0:ec: 92:90:3b:22:74:68:7b:43:1a:1b:fe:1d:d7:38:2d:53:82:d0: eb:28:58:65:81:83:bb:f7:e1:7c:41:7d:a2:2b:3e:e7:82:87: 97:0d:25:b1:39:f4:a7:cc:4a:6d:47:e7:de:4d:ec:53:62:bf: 45:48:40:11:48:e5:b3:7e:d5:5a:fe:c0:40:fb:ca:90:51:78: 9b:8a:62:73:7e:31:df:db:71:b0:af:64:81:4c:76:3f:ce:a6: 18:25:22:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PFaVSgsQft8OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MDBlNWI3ODUtNmJlMi00YWMzLTg1OWYtZGE3NjdhZTU0MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRcQ+NKr44eI5YGDS7D4PFqSoAMoB18sZv7Q yffWRbP05kMG609vSWZQkqsjz5o5vU5rs4YlcGBnEKg5J4pDRNi1bH8RxeLtipwP K6gz+RtuZ5cBJMMUzlR5nn+QbnK4+sCIBsFy2iGPRMP4LjbLgA01pttAM9WoXwkU dvwRY9dXgt87XPj0da2/TaN8PL59XRIjcYguPUM+dtFaIu9z9xwoPVHXDmqV00+7 VhiCeSBZFzc50l2PkaFB7SWcFOOIeV6/IiQp1jPomYzKrsNcFBcNXgcgm075v0Qo rA8+ivGtuBGD5VFyKR1lTRbFfgPTH7GobDJT614IaIaN8qkIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOclH8SsZaFcXPTo1Yi8dMl/T7ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvY2ZiZDE5ODQtYjM0Zi0z MzI4LTgwNzItODVlMmUxZWNmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLweomI0d/GNIis8VFwznzH/Pam0Ewv849RGvyXcMV3IodYq9lJPMMz 9t1JVll10oJn3ERtcL+KwlU0tNgJ+9GM8L4C+XnmKA/iDU22ls9S96vgo5n81Hoq 9jgnnJO+jBOdBb2xP2FTRTmhkKgPmRBWakMH0tK7FiLzMDGN1X1ObTdmVnjSOh/K 5DE4habPbl7FRU7jUWCACICbydYGNKHA7JKQOyJ0aHtDGhv+Hdc4LVOC0OsoWGWB g7v34XxBfaIrPueCh5cNJbE59KfMSm1H595N7FNiv0VIQBFI5bN+1Vr+wED7ypBR eJuKYnN+Md/bcbCvZIFMdj/OphglIsk= -----END CERTIFICATE-----Generated at Fri Jul 24 00:18:18 2026 by rpki-client