$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa File: b5378acf-7548-3e56-8626-ae1f7d6c1241.roa (raw, json) Hash identifier: rWxb7UR3b2O8FpXWeBZbOvUfl51y4tmk7CkVrfZeb/8= Subject key identifier: 6C:E5:33:60:27:B6:63:AF:A8:37:3C:BF:5E:4C:C3:C4:9C:7A:94:B0 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584E8F54F70CBA227ACFF6A5B980 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 2559 IP address blocks: 66.185.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:f7:0c:ba:22:7a:cf:f6:a5:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=ddf00e79-76ed-4bf5-9497-0b896b852a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a6:89:66:5d:c7:eb:21:71:9d:a3:58:6e:4e: 13:a6:5a:be:31:a3:b0:f8:d2:de:2b:7c:14:2c:c4: 9b:ea:9e:0a:90:33:a6:3f:6a:02:b4:ec:88:e7:82: 6c:e8:66:ac:6a:a6:3d:ac:dc:63:44:2b:de:e0:e6: a1:92:ca:76:c8:07:f3:00:c3:c5:d2:1b:42:7e:57: 0c:ae:d6:5e:20:7f:c2:1a:0c:70:11:71:60:73:e5: 36:0e:0d:01:ff:c2:aa:ce:b3:b3:32:bf:29:be:c5: 61:04:0a:5f:35:2d:07:b3:01:04:e9:3a:f4:db:c6: 49:71:bc:8a:1d:ab:fc:19:54:34:1b:1b:53:df:8b: ce:5b:60:d1:9e:ee:a2:c7:b5:dc:a6:89:dc:3a:3f: 7c:be:34:8b:e8:64:a9:3d:df:38:51:44:80:26:93: 37:36:45:80:ac:8c:01:ca:b6:d1:01:7f:3d:3f:9d: 5b:92:c9:af:42:e8:71:4f:a6:aa:15:15:32:2d:16: ff:f1:69:8a:4c:78:34:ae:d1:6d:67:53:07:2e:0e: 98:53:96:cc:bd:af:b9:6c:05:c7:e7:0f:7d:f0:c2: ff:8e:a1:b2:17:4d:ea:8d:94:3f:40:d0:04:0f:9b: 02:95:1c:87:8c:c8:d0:23:da:c5:58:d2:1e:d1:9c: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E5:33:60:27:B6:63:AF:A8:37:3C:BF:5E:4C:C3:C4:9C:7A:94:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b5378acf-7548-3e56-8626-ae1f7d6c1241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 66.185.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:35:03:f5:5e:79:e0:98:d1:ea:23:db:2b:e2:16:50:d3:70: 92:5f:0e:4f:59:23:07:86:07:55:75:f9:77:b6:82:90:16:76: bc:00:d7:a9:7a:c6:c9:12:de:39:d9:af:42:93:34:72:d9:51: c6:73:22:75:99:9b:57:79:ac:fd:c8:db:a1:61:2a:05:11:fb: b0:a5:c1:47:9e:51:32:84:2c:02:cb:23:80:fa:d5:03:5e:a6: 09:ac:6f:25:b7:b9:5e:22:56:ec:1a:14:90:3d:f2:c9:94:ba: 87:b5:46:b7:30:1e:37:06:53:d0:6c:33:d8:e3:e8:66:00:02: 2a:28:c8:55:0e:de:3f:de:dc:a8:80:16:0f:4b:be:4a:96:74: b8:51:de:2c:49:13:95:10:04:21:e9:d7:31:58:a3:c8:6d:ff: 66:e8:49:d9:33:a6:69:bb:de:10:6a:2e:bf:71:fb:d1:ce:40: f4:aa:f1:ec:89:9a:6b:91:33:4e:9c:ee:8c:68:76:2a:3b:f8: 16:91:39:07:48:83:64:34:d0:a4:15:05:4d:a5:02:d4:d2:2f: 4a:2f:fd:8a:95:9b:a1:da:6e:4a:21:00:4c:a5:fc:cb:35:0d: 7c:14:bc:c7:68:a1:dc:5d:a0:4d:48:ad:e3:be:fe:76:a9:17: bd:36:c5:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPcMuiJ6z/aluYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZGRmMDBlNzktNzZlZC00YmY1LTk0OTctMGI4OTZiODUyYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqaJZl3H6yFxnaNYbk4Tplq+MaOw+NLeK3wU LMSb6p4KkDOmP2oCtOyI54Js6GasaqY9rNxjRCve4Oahksp2yAfzAMPF0htCflcM rtZeIH/CGgxwEXFgc+U2Dg0B/8KqzrOzMr8pvsVhBApfNS0HswEE6Tr028ZJcbyK Hav8GVQ0GxtT34vOW2DRnu6ix7XcponcOj98vjSL6GSpPd84UUSAJpM3NkWArIwB yrbRAX89P51bksmvQuhxT6aqFRUyLRb/8WmKTHg0rtFtZ1MHLg6YU5bMva+5bAXH 5w998ML/jqGyF03qjZQ/QNAED5sClRyHjMjQI9rFWNIe0Zy2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzlM2AntmOvqDc8v15Mw8ScepSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvYjUzNzhhY2YtNzU0OC0z ZTU2LTg2MjYtYWUxZjdkNmMxMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA41A/VeeeCY0eoj2yviFlDTcJJfDk9ZIweGB1V1+Xe2gpAWdrwA16l6 xskS3jnZr0KTNHLZUcZzInWZm1d5rP3I26FhKgUR+7ClwUeeUTKELALLI4D61QNe pgmsbyW3uV4iVuwaFJA98smUuoe1RrcwHjcGU9BsM9jj6GYAAiooyFUO3j/e3KiA Fg9LvkqWdLhR3ixJE5UQBCHp1zFYo8ht/2boSdkzpmm73hBqLr9x+9HOQPSq8eyJ mmuRM06c7oxodio7+BaROQdIg2Q00KQVBU2lAtTSL0ov/YqVm6HabkohAEyl/Ms1 DXwUvMdoodxdoE1IreO+/napF702xfw= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:42 2026 by rpki-client