$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa File: f5e48722-9789-3f44-8a5a-cba796b934fd.roa (raw, json) Hash identifier: yHLzcLgJlzmAnU53QpTICZbVXDG0SjLSwpAzhXB4Brc= Subject key identifier: C6:57:60:76:44:20:A4:46:F9:FB:B5:79:FE:10:46:47:1E:30:75:6F Certificate issuer: /CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7 Certificate serial: 010D0C9F4328584E8DEFA629663F6CEB43EDAAA0 Authority key identifier: 07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 11105 IP address blocks: 192.75.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:a6:29:66:3f:6c:eb:43:ed:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=22b720ce-077f-432b-b941-f6bd15cd121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:65:98:8c:c6:d8:df:b4:d9:f7:13:59:52: 02:e6:ba:32:2c:49:d4:aa:29:12:78:9a:ed:fe:af: 59:78:b5:1f:49:98:bc:f8:17:58:8e:27:57:f6:9b: 7e:8b:be:d0:a6:52:ad:6d:db:9d:48:8a:38:9a:c4: 63:96:e4:fc:ea:fa:92:30:a6:e6:33:45:ed:89:04: 50:d5:14:53:36:1b:b1:40:65:c5:1e:6c:2e:da:36: ff:c4:2a:0f:1c:5a:58:83:a0:5b:07:70:51:0e:5e: 89:1e:bd:3f:8e:64:02:5c:b7:e3:e2:2b:98:99:5f: 4e:5b:98:0b:b8:d7:f7:05:f3:01:c4:43:a8:ca:32: 1e:20:78:c8:48:13:54:f4:72:ff:a6:9c:81:c5:69: 6b:2c:93:d3:4d:fd:80:b7:9c:f7:90:ce:ed:be:86: 50:67:06:d9:d3:9c:ec:ce:da:0b:25:74:e6:d1:7a: 8e:12:cc:eb:d3:4b:4b:86:2b:cd:58:76:e2:3d:d0: b0:b8:79:81:9d:13:a5:fb:de:8b:e5:83:94:55:f9: 95:9b:5b:0b:61:a0:0d:ee:bf:ca:45:37:ab:94:60: 02:e5:2d:c2:b3:1a:07:cb:fe:53:f6:77:88:f5:00: dc:54:54:71:81:ed:20:a8:a4:b5:a3:7b:0f:cb:a8: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:57:60:76:44:20:A4:46:F9:FB:B5:79:FE:10:46:47:1E:30:75:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl X509v3 Authority Key Identifier: keyid:07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer sbgp-ipAddrBlock: critical IPv4: 192.75.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c0:2d:30:40:a9:d2:c8:1c:1c:30:7f:f7:56:0b:eb:2c:89: d6:39:e8:cd:00:16:b6:c5:e1:0b:fb:bd:d0:f1:34:24:3d:52: 37:ad:b1:6d:e3:04:b7:c3:ce:39:bc:4b:47:45:81:e3:05:07: 42:6b:ab:08:b4:ad:81:da:fb:6d:91:df:32:db:2f:fc:6f:37: 81:08:e6:40:d9:0c:c7:b3:8a:d5:82:5d:a0:74:72:34:dc:56: ad:09:db:06:80:84:c9:5d:e2:ab:53:2c:de:0b:a1:49:e4:a1: 79:cf:6a:64:67:8c:d2:b0:16:b5:c9:1e:74:5e:6c:53:55:50: 7f:ea:34:4c:f0:af:54:ba:df:0e:a2:29:d0:d1:eb:16:a7:0b: f0:dc:84:cf:c5:55:b1:7f:4f:24:81:85:1a:b5:14:77:7d:e8: 20:4f:25:9c:c9:bf:62:58:d8:93:36:d5:08:16:68:f7:b0:91: 82:7e:55:4a:e2:28:27:b4:b3:06:b6:5e:f6:13:db:70:7f:34: 5b:3e:46:06:43:1a:96:77:29:15:31:bf:86:14:e1:bc:ad:3d: bf:87:ca:8a:99:86:09:ab:b6:7d:be:0c:40:e4:8d:89:2e:fb: c8:4b:ba:67:f1:aa:a5:e7:9d:b8:c9:df:b2:bc:ae:27:79:53: 64:b6:da:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N76YpZj9s60PtqqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDYxYTc0YmEtYzlkNy00YTlmLThkZWYtN2IwMTI0YTIw NGE3MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MjJiNzIwY2UtMDc3Zi00MzJiLWI5NDEtZjZiZDE1Y2QxMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfRlmIzG2N+02fcTWVIC5royLEnUqikSeJrt /q9ZeLUfSZi8+BdYjidX9pt+i77QplKtbdudSIo4msRjluT86vqSMKbmM0XtiQRQ 1RRTNhuxQGXFHmwu2jb/xCoPHFpYg6BbB3BRDl6JHr0/jmQCXLfj4iuYmV9OW5gL uNf3BfMBxEOoyjIeIHjISBNU9HL/ppyBxWlrLJPTTf2At5z3kM7tvoZQZwbZ05zs ztoLJXTm0XqOEszr00tLhivNWHbiPdCwuHmBnROl+96L5YOUVfmVm1sLYaAN7r/K RTerlGAC5S3CsxoHy/5T9neI9QDcVFRxge0gqKS1o3sPy6gdNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZXYHZEIKRG+fu1ef4QRkceMHVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNjFh NzRiYS1jOWQ3LTRhOWYtOGRlZi03YjAxMjRhMjA0YTcvZjVlNDg3MjItOTc4OS0z ZjQ0LThhNWEtY2JhNzk2YjkzNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDYxYTc0YmEtYzlkNy00YTlmLThk ZWYtN2IwMTI0YTIwNGE3L2Q2MWE3NGJhLWM5ZDctNGE5Zi04ZGVmLTdiMDEyNGEy MDRhNy5jcmwwHwYDVR0jBBgwFoAUB8ozYLbpbCZB/kEkYHrOJe2aiLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNjFhNzRiYS1jOWQ3LTRhOWYtOGRlZi03YjAx MjRhMjA0YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwEvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHALTBAqdLIHBwwf/dWC+ssidY56M0AFrbF4Qv7vdDxNCQ9UjetsW3j BLfDzjm8S0dFgeMFB0Jrqwi0rYHa+22R3zLbL/xvN4EI5kDZDMezitWCXaB0cjTc Vq0J2waAhMld4qtTLN4LoUnkoXnPamRnjNKwFrXJHnRebFNVUH/qNEzwr1S63w6i KdDR6xanC/DchM/FVbF/TySBhRq1FHd96CBPJZzJv2JY2JM21QgWaPewkYJ+VUri KCe0swa2XvYT23B/NFs+RgZDGpZ3KRUxv4YU4bytPb+HyoqZhgmrtn2+DEDkjYku +8hLumfxqqXnnbjJ37K8rid5U2S22qA= -----END CERTIFICATE-----Generated at Fri Jul 24 11:04:35 2026 by rpki-client