$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/6db32b80-f653-3746-80ce-0a28396f4fe1.roa File: 6db32b80-f653-3746-80ce-0a28396f4fe1.roa (raw, json) Hash identifier: oG5inZivsfPqruAAH0K+5TK58SqL0aye0nr5Rq/DVzU= Subject key identifier: E9:30:22:FD:1F:12:9A:90:A3:7C:BB:8C:35:8B:D4:FE:87:86:1D:A6 Certificate issuer: /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Certificate serial: 010D0C9F4328584E779A2A4B46051C5BBDA84080 Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/6db32b80-f653-3746-80ce-0a28396f4fe1.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 10967 IP address blocks: 165.130.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:2a:4b:46:05:1c:5b:bd:a8:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=6622237b-51e3-4170-b74d-2c610df02f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:fc:53:13:83:24:4c:24:3d:6c:30:3d:e2: 5b:ae:a0:13:9e:9a:0c:e5:c6:c8:60:1c:50:b4:28: 04:f8:e2:47:8e:6c:43:96:e6:4c:ca:3f:5f:ef:c7: 0c:86:b5:4a:04:7c:77:c4:10:ca:0b:22:cc:1c:d0: 3f:79:ff:c8:ef:51:a4:cf:da:a0:c1:6b:71:51:ca: 48:9f:49:df:2a:11:d9:b0:9d:27:87:26:41:4a:f3: 33:ca:db:b1:1a:ec:35:ca:87:a7:04:1b:86:b5:52: f1:ea:5a:7f:6a:93:b0:84:10:b5:06:62:c9:b5:a5: b5:44:49:c6:03:4e:a3:d6:d3:9f:36:45:84:d5:07: cb:ce:ca:40:77:0d:a8:17:46:df:39:af:21:09:a6: ed:e6:db:36:40:10:bf:f2:ad:a2:7a:cf:05:08:2a: fa:e8:ee:af:f3:e7:a5:8c:a8:1a:96:4f:54:be:94: 12:7a:5c:24:09:8d:cb:87:7a:f6:fa:02:81:09:4d: e5:26:14:46:79:5f:06:d8:50:be:a9:a7:11:56:89: dc:2e:3b:e2:d2:da:06:9a:90:df:27:88:b6:f6:c0: ad:24:b6:0c:ed:33:aa:69:0c:28:6b:ff:18:95:68: 88:50:ec:a1:41:74:c8:63:65:ee:43:e2:47:c8:1a: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:22:FD:1F:12:9A:90:A3:7C:BB:8C:35:8B:D4:FE:87:86:1D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/6db32b80-f653-3746-80ce-0a28396f4fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl X509v3 Authority Key Identifier: keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer sbgp-ipAddrBlock: critical IPv4: 165.130.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:db:45:2c:91:aa:ee:af:5b:a5:3a:2d:08:e5:1d:dc:8f:e8: a9:29:5b:95:03:97:b5:79:3a:c0:84:d5:21:29:d4:e2:50:32: 00:41:04:4a:bd:b1:15:5c:9d:16:2e:e5:f1:5c:51:14:d1:71: b3:be:8a:8c:bd:00:77:16:48:2b:6e:23:33:a1:8e:12:18:a0: be:c9:f5:db:44:c2:11:00:8d:ca:63:57:f9:58:26:fd:50:50: b2:a4:5c:ad:dc:d7:f7:fe:65:df:94:e3:62:87:e6:c8:fc:a1: dc:01:2c:d6:98:fa:50:13:ca:1b:b1:f1:cb:04:ed:53:20:d9: e8:c1:4d:79:52:0a:20:f0:07:4d:ed:50:a1:b7:01:81:f7:91: d0:fd:1a:4e:9d:23:ff:f1:10:a4:61:40:30:77:17:ca:26:e6: e5:57:98:2a:7c:c3:5e:1a:ef:58:1e:ca:3d:a9:7c:32:7a:33: 5a:81:4e:72:b3:aa:4f:6c:2c:1e:85:a5:10:45:5c:2b:b4:5d: 98:ad:c4:bf:ac:ba:8d:d5:c3:76:a7:a3:01:13:6b:88:b9:86: 6e:73:84:8a:da:10:a7:cc:b9:a3:81:33:59:79:65:95:be:48: 96:af:1e:6d:1a:a2:cc:7d:a4:d4:0b:32:d8:19:3b:17:6c:99: 67:e6:e4:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mipLRgUcW72oQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0 NmMzMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk NjYyMjIzN2ItNTFlMy00MTcwLWI3NGQtMmM2MTBkZjAyZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0if8UxODJEwkPWwwPeJbrqATnpoM5cbIYBxQ tCgE+OJHjmxDluZMyj9f78cMhrVKBHx3xBDKCyLMHNA/ef/I71Gkz9qgwWtxUcpI n0nfKhHZsJ0nhyZBSvMzytuxGuw1yoenBBuGtVLx6lp/apOwhBC1BmLJtaW1REnG A06j1tOfNkWE1QfLzspAdw2oF0bfOa8hCabt5ts2QBC/8q2ies8FCCr66O6v8+el jKgalk9UvpQSelwkCY3Lh3r2+gKBCU3lJhRGeV8G2FC+qacRVoncLjvi0toGmpDf J4i29sCtJLYM7TOqaQwoa/8YlWiIUOyhQXTIY2XuQ+JHyBoKCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkwIv0fEpqQo3y7jDWL1P6Hhh2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4 MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvNmRiMzJiODAtZjY1My0z NzQ2LTgwY2UtMGEyODM5NmY0ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk5ODFjMWYtNWI5MC00YWM0LWJk M2EtMTdjNTQ1MjE0NmMzL2M5OTgxYzFmLTViOTAtNGFjNC1iZDNhLTE3YzU0NTIx NDZjMy5jcmwwHwYDVR0jBBgwFoAUud4nFso2NAm9Cwz2faUhvHaAqNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1 NDUyMTQ2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpYJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPbRSyRqu6vW6U6LQjlHdyP6KkpW5UDl7V5OsCE1SEp1OJQMgBBBEq9 sRVcnRYu5fFcURTRcbO+ioy9AHcWSCtuIzOhjhIYoL7J9dtEwhEAjcpjV/lYJv1Q ULKkXK3c1/f+Zd+U42KH5sj8odwBLNaY+lATyhux8csE7VMg2ejBTXlSCiDwB03t UKG3AYH3kdD9Gk6dI//xEKRhQDB3F8om5uVXmCp8w14a71geyj2pfDJ6M1qBTnKz qk9sLB6FpRBFXCu0XZitxL+suo3Vw3anowETa4i5hm5zhIraEKfMuaOBM1l5ZZW+ SJavHm0aosx9pNQLMtgZOxdsmWfm5HQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:20:58 2026 by rpki-client