$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/34cdd581-a23e-3be8-aa21-bbff7040974e.roa File: 34cdd581-a23e-3be8-aa21-bbff7040974e.roa (raw, json) Hash identifier: WCyzX1C6UmLizIqAjRspUmjK81KYnYahpXYu57f6SBI= Subject key identifier: E6:2A:91:86:15:EF:A2:88:D7:73:68:91:63:FE:92:C6:1D:E3:C4:3B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E8DEF95C9E0D5BC46D63B4B40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/34cdd581-a23e-3be8-aa21-bbff7040974e.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 399955 IP address blocks: 68.167.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:95:c9:e0:d5:bc:46:d6:3b:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=afa528ad-3e36-45ad-be7d-00b11497e98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:db:62:74:97:ba:38:15:bf:03:6e:5a:5d: 04:f5:9c:b0:c5:d9:0f:af:39:39:ba:40:89:ee:6c: ef:70:88:e0:5d:97:e8:a6:0f:ae:d5:e1:96:3f:a0: 82:23:49:ce:a8:19:c7:33:2a:62:e7:f3:fa:c2:18: 06:64:21:04:fa:48:06:a9:80:c0:ae:fd:a7:86:a4: 3b:84:20:09:00:be:83:22:a5:b7:3d:6a:a9:ee:5f: ae:f9:0d:a5:5a:c2:c9:4a:72:a1:47:cd:c1:79:67: 1a:2e:a7:f0:09:e0:98:8e:bd:be:3e:5f:b5:90:c0: d1:fc:cf:f3:3b:9a:87:82:86:c3:1d:41:fd:4d:38: 72:76:1c:07:ef:02:14:57:d3:ec:ba:41:7b:90:7a: 0d:ef:03:7e:f4:11:96:1d:e3:a8:a4:89:a2:b2:2a: 4f:e8:22:ef:23:3d:c9:79:c9:e2:6a:25:62:29:52: 1c:73:d1:9c:55:02:db:6c:85:03:fa:aa:5a:a4:b5: 57:3f:f3:d5:96:17:2e:c6:ac:85:ca:a3:92:8d:68: d5:a2:f6:28:52:27:82:31:a1:03:4e:e8:99:54:bf: d1:5f:db:95:e2:e3:ad:73:43:82:c9:0c:db:e5:72: e1:dd:e6:d8:38:06:a1:0f:ce:15:63:3a:6a:43:34: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2A:91:86:15:EF:A2:88:D7:73:68:91:63:FE:92:C6:1D:E3:C4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/34cdd581-a23e-3be8-aa21-bbff7040974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:38:af:d6:b3:e2:f2:41:c7:23:dc:af:b2:80:48:53:44:85: ba:df:25:ff:ed:83:4f:3c:7e:5c:a3:87:1d:b7:d6:d9:16:05: bd:48:f4:6c:97:89:eb:7e:d2:db:0d:82:8f:a4:0c:ca:74:b6: b8:02:0c:4e:db:b7:1d:26:45:61:36:f5:dd:82:79:2e:39:49: 72:96:7d:da:92:05:79:04:50:19:a8:1b:5e:14:4b:18:52:fc: 27:f7:11:d6:0e:fc:d7:c1:aa:03:70:c4:f2:db:8c:79:65:e5: c6:93:7d:3c:46:10:5b:0a:b7:97:34:1d:64:23:6e:8d:7f:b8: de:f2:7a:f9:6b:48:24:79:e8:1b:8f:48:44:ed:30:34:c7:2d: e3:d8:75:bb:08:6f:bb:53:72:1b:45:df:7b:5c:6e:90:ff:f4: 6c:cf:cf:0a:3d:f9:cd:b9:df:9b:aa:7b:00:8e:c3:d1:92:4c: da:82:99:d1:cb:80:ee:53:2c:58:b7:33:cb:96:34:db:e3:61: 04:f0:b8:e0:63:77:70:61:b3:c2:f5:9f:64:0e:4e:18:b7:15: 37:d9:ff:90:e4:58:75:ea:08:78:d7:ed:89:85:ca:5f:97:b0: eb:50:84:60:d4:53:9e:e0:8d:1a:d3:c5:20:46:e7:c2:a9:1c: f3:97:74:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N75XJ4NW8RtY7S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YWZhNTI4YWQtM2UzNi00NWFkLWJlN2QtMDBiMTE0OTdlOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3jbYnSXujgVvwNuWl0E9ZywxdkPrzk5ukCJ 7mzvcIjgXZfopg+u1eGWP6CCI0nOqBnHMypi5/P6whgGZCEE+kgGqYDArv2nhqQ7 hCAJAL6DIqW3PWqp7l+u+Q2lWsLJSnKhR83BeWcaLqfwCeCYjr2+Pl+1kMDR/M/z O5qHgobDHUH9TThydhwH7wIUV9PsukF7kHoN7wN+9BGWHeOopImisipP6CLvIz3J ecniaiViKVIcc9GcVQLbbIUD+qpapLVXP/PVlhcuxqyFyqOSjWjVovYoUieCMaED TuiZVL/RX9uV4uOtc0OCyQzb5XLh3ebYOAahD84VYzpqQzRPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYqkYYV76KI13NokWP+ksYd48Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzRjZGQ1ODEtYTIzZS0z YmU4LWFhMjEtYmJmZjcwNDA5NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo4r9az4vJBxyPcr7KASFNEhbrfJf/tg088flyjhx231tkWBb1I9GyX iet+0tsNgo+kDMp0trgCDE7btx0mRWE29d2CeS45SXKWfdqSBXkEUBmoG14USxhS /Cf3EdYO/NfBqgNwxPLbjHll5caTfTxGEFsKt5c0HWQjbo1/uN7yevlrSCR56BuP SETtMDTHLePYdbsIb7tTchtF33tcbpD/9GzPzwo9+c2535uqewCOw9GSTNqCmdHL gO5TLFi3M8uWNNvjYQTwuOBjd3Bhs8L1n2QOThi3FTfZ/5DkWHXqCHjX7YmFyl+X sOtQhGDUU57gjRrTxSBG58KpHPOXdLY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:52:14 2026 by rpki-client