$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa File: e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa (raw, json) Hash identifier: oQOghRjwABrydVyef1q06tyLyh8rjaRsxjQTKWQEg48= Subject key identifier: 23:B5:5A:66:6C:71:85:27:95:15:20:D4:E0:BB:5A:4C:05:90:6B:00 Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28 Certificate serial: 010D0C9F4328584E6144B3A4D04CD4D0812E70C0 Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 376 IP address blocks: 206.167.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:b3:a4:d0:4c:d4:d0:81:2e:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=71b9f90c-68e9-4e83-8507-dc94b4637c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:df:28:81:75:56:e7:6b:ab:41:8f:42:a4:b1: 8e:2c:0c:b2:35:d4:70:7b:00:11:a7:f7:cc:00:fd: 66:b7:b3:29:06:47:9c:1b:73:5c:64:9c:d9:97:ab: 66:3f:af:24:22:07:a1:ec:bb:4d:c0:60:bf:a5:f1: 96:be:fa:0e:83:96:db:58:2b:09:10:d4:d8:31:e2: 64:a8:5d:ad:c3:f6:f5:1d:d4:6f:63:ea:71:20:3a: de:f4:4b:b2:3c:d5:ae:bc:52:02:a0:54:73:c1:dd: fd:65:61:30:73:40:95:37:41:9f:74:9b:f5:0e:03: 7c:3e:58:4e:3a:b7:a7:c9:29:22:51:35:0d:9a:2b: dd:e2:44:e5:db:4f:b6:e8:35:8e:52:78:de:dd:73: 86:f6:40:00:77:37:65:02:f4:2e:3b:f8:14:ca:de: dc:2d:b2:79:33:83:ee:e5:df:9e:24:f4:fa:8e:87: f6:16:98:e4:e3:12:f2:55:cf:a1:40:cd:f0:8c:aa: 1b:a5:91:7e:72:63:cd:d7:0a:f6:6d:ae:1a:d9:2d: 93:01:f8:42:a8:fe:32:01:42:47:a1:6d:e3:21:6b: d8:24:62:db:55:b2:f4:2c:3a:3d:d3:7e:5d:32:9c: 17:5d:dc:0c:db:66:ea:65:39:9f:fd:09:f1:7e:2b: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B5:5A:66:6C:71:85:27:95:15:20:D4:E0:BB:5A:4C:05:90:6B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl X509v3 Authority Key Identifier: keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer sbgp-ipAddrBlock: critical IPv4: 206.167.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e3:eb:90:0c:2f:ed:8e:50:d7:3f:2c:4d:f8:ff:a3:27:e1: ea:bc:f0:22:bb:16:c3:71:6f:2d:14:db:4f:07:22:b4:ec:70: bd:b9:2a:c5:17:66:92:e5:19:85:c8:43:ca:dc:ce:ca:04:ef: 7a:c5:53:10:e5:de:5d:da:a2:51:6f:84:cf:82:d2:84:89:22: 99:6b:0c:7c:69:ae:be:4b:8b:2f:72:e6:1c:06:ab:c2:16:85: 2e:0e:44:68:ea:3a:9d:0b:6a:42:4b:e5:d1:9a:a7:b7:67:a4: 66:c6:1b:ff:fe:8d:54:ee:93:74:0b:be:6d:7d:e4:d6:73:47: 5d:51:f3:28:66:ce:cd:72:bb:57:c3:3f:64:9e:36:d6:c9:34: ab:ba:c6:c1:d7:70:21:d9:da:a2:09:6d:14:2c:05:7e:2d:96: 86:b9:ba:bf:80:a3:7a:5a:59:54:98:94:1b:5b:7e:cb:76:29: d0:ff:75:78:2e:7e:b0:17:96:b5:cd:41:18:4f:1f:83:a9:ee: 28:da:ac:b0:10:4e:e4:2d:98:50:65:88:76:52:3b:f5:00:33: f7:16:ac:56:8a:21:ad:c5:ce:d1:4b:ea:55:af:ef:48:22:4e: da:3c:22:72:00:43:d4:bc:29:ad:52:ef:45:b2:58:fe:3e:03: 5b:cc:4e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRLOk0EzU0IEucMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViMmFhMDMtZGU1YS00N2E5LWEzODEtY2MyYjI3NDUx YzI4MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NzFiOWY5MGMtNjhlOS00ZTgzLTg1MDctZGM5NGI0NjM3YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd8ogXVW52urQY9CpLGOLAyyNdRwewARp/fM AP1mt7MpBkecG3NcZJzZl6tmP68kIgeh7LtNwGC/pfGWvvoOg5bbWCsJENTYMeJk qF2tw/b1HdRvY+pxIDre9EuyPNWuvFICoFRzwd39ZWEwc0CVN0GfdJv1DgN8PlhO OrenySkiUTUNmivd4kTl20+26DWOUnje3XOG9kAAdzdlAvQuO/gUyt7cLbJ5M4Pu 5d+eJPT6jof2Fpjk4xLyVc+hQM3wjKobpZF+cmPN1wr2ba4a2S2TAfhCqP4yAUJH oW3jIWvYJGLbVbL0LDo9035dMpwXXdwM22bqZTmf/Qnxfit5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO1WmZscYUnlRUg1OC7WkwFkGsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIy YWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0NTFjMjgvZTBhOWM1MWMtYTBlZC0z OGZjLTg2MzUtNGY3ODM0NWI5ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjViMmFhMDMtZGU1YS00N2E5LWEz ODEtY2MyYjI3NDUxYzI4LzI1YjJhYTAzLWRlNWEtNDdhOS1hMzgxLWNjMmIyNzQ1 MWMyOC5jcmwwHwYDVR0jBBgwFoAUWwvbffpjXBHQ2Dq7nfM1nr6lKw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJi Mjc0NTFjMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDj65AML+2OUNc/LE34/6Mn4eq88CK7FsNxby0U208HIrTscL25KsUX ZpLlGYXIQ8rczsoE73rFUxDl3l3aolFvhM+C0oSJIplrDHxprr5Liy9y5hwGq8IW hS4ORGjqOp0LakJL5dGap7dnpGbGG//+jVTuk3QLvm195NZzR11R8yhmzs1yu1fD P2SeNtbJNKu6xsHXcCHZ2qIJbRQsBX4tloa5ur+Ao3paWVSYlBtbfst2KdD/dXgu frAXlrXNQRhPH4Op7ijarLAQTuQtmFBliHZSO/UAM/cWrFaKIa3FztFL6lWv70gi Tto8InIAQ9S8Ka1S70WyWP4+A1vMTrY= -----END CERTIFICATE-----Generated at Fri Jul 24 14:32:31 2026 by rpki-client