$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa File: 3c659425-4a42-3ef9-8a3f-c568097ff599.roa (raw, json) Hash identifier: oIkto2P9IdW2oPDjLHAwWN6ftOK8x/gkIU3mTs9ikiI= Subject key identifier: 32:76:7B:0E:C9:FE:C3:D8:A0:A1:A7:B6:B4:18:37:5A:F7:68:75:3D Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584E89BF9393D57E3858313E72AC Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 395383 IP address blocks: 70.34.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:93:93:d5:7e:38:58:31:3e:72:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=8fab42a2-7ea8-40a5-b801-304f57eb1080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:08:9c:2d:c9:6d:17:bc:9d:55:61:3d:48: 25:41:de:22:b4:b2:a0:45:20:1e:17:45:00:32:c3: 4b:3d:98:e4:df:b8:66:12:04:8e:44:1a:b2:c8:29: ac:05:7e:58:79:bb:ed:56:f9:a1:7d:bf:d6:b8:a3: 1c:e6:64:fe:be:4c:da:02:64:04:a0:a0:f3:cb:75: b3:31:87:dc:1a:e8:47:3f:3e:4a:bf:94:c5:9f:f1: ec:07:cf:68:dd:4a:94:cb:4a:a8:d6:f9:2f:05:70: 41:ac:a8:1d:e2:98:6b:4f:7d:98:43:11:e8:d2:c0: 94:de:ed:ac:8a:75:8c:7b:d7:18:b3:11:73:e9:c9: 76:59:ee:db:2e:f9:06:0a:db:8e:61:45:97:f5:8f: ef:7b:48:97:01:d5:29:2a:c9:c0:89:2b:b9:53:60: c0:81:02:cd:8c:66:46:f8:00:63:73:89:f6:ab:35: e7:f9:dd:c1:1f:21:87:46:78:0c:28:f1:df:50:d6: 67:30:52:31:9e:a1:f8:2a:b1:4f:17:4e:bd:cf:da: f9:1a:0c:71:6b:81:1e:75:9c:c8:75:7f:0a:2a:a7: 3f:e8:8e:36:15:f4:04:dc:b4:19:13:85:4b:69:d2: ab:4e:f2:a4:76:14:bf:8e:8b:b9:c4:4c:46:69:2f: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:76:7B:0E:C9:FE:C3:D8:A0:A1:A7:B6:B4:18:37:5A:F7:68:75:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/3c659425-4a42-3ef9-8a3f-c568097ff599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:63:8f:91:c8:f3:0a:2e:7d:a0:f2:80:3f:6a:48:26:9f:09: 1d:75:92:d3:1c:ea:9e:9a:cb:99:0b:6d:79:93:86:e8:b8:b2: 7c:06:b8:fa:f2:88:8b:e7:a8:62:37:d5:55:ea:5b:b3:ce:98: 86:51:b1:5d:43:e3:c7:27:cd:0a:6a:68:c3:a3:41:8e:eb:8b: 1e:e5:51:df:ab:aa:97:86:3e:0f:88:9c:e9:d4:87:6a:53:91: 03:da:7d:c8:78:81:5f:28:f1:6e:6a:a6:33:f3:a1:ba:f5:ec: 03:10:97:2c:84:e6:f5:a5:b4:f5:f9:8e:56:1c:7a:22:0f:c0: 34:bc:6d:f2:56:32:d8:54:6e:24:73:f4:b1:7f:d8:11:2d:c6: 99:fd:de:63:c2:e5:f9:63:f1:01:99:1c:93:c7:dc:17:88:1f: 77:b4:ef:55:20:0b:24:5c:b8:b8:ad:40:49:96:65:fc:8f:f0: 68:7f:fc:f7:77:85:4e:8b:ee:05:d3:44:2a:7b:a4:48:77:ec: f1:3c:bc:3f:dc:75:52:61:0a:e3:de:e4:85:43:1e:97:f2:d9: 63:ea:c1:51:68:23:27:c7:96:fe:76:c8:da:5c:03:02:f1:48: 1a:a6:d1:73:c8:9e:52:85:08:2e:44:64:37:b8:d3:05:dd:41: 36:68:d5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Jv5OT1X44WDE+cqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk OGZhYjQyYTItN2VhOC00MGE1LWI4MDEtMzA0ZjU3ZWIxMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+0InC3JbRe8nVVhPUglQd4itLKgRSAeF0UA MsNLPZjk37hmEgSORBqyyCmsBX5YebvtVvmhfb/WuKMc5mT+vkzaAmQEoKDzy3Wz MYfcGuhHPz5Kv5TFn/HsB89o3UqUy0qo1vkvBXBBrKgd4phrT32YQxHo0sCU3u2s inWMe9cYsxFz6cl2We7bLvkGCtuOYUWX9Y/ve0iXAdUpKsnAiSu5U2DAgQLNjGZG +ABjc4n2qzXn+d3BHyGHRngMKPHfUNZnMFIxnqH4KrFPF069z9r5Ggxxa4EedZzI dX8KKqc/6I42FfQE3LQZE4VLadKrTvKkdhS/jou5xExGaS9DxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ2ew7J/sPYoKGntrQYN1r3aHU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvM2M2NTk0MjUtNGE0Mi0z ZWY5LThhM2YtYzU2ODA5N2ZmNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANjj5HI8woufaDygD9qSCafCR11ktMc6p6ay5kLbXmThui4snwGuPry iIvnqGI31VXqW7POmIZRsV1D48cnzQpqaMOjQY7rix7lUd+rqpeGPg+InOnUh2pT kQPafch4gV8o8W5qpjPzobr17AMQlyyE5vWltPX5jlYceiIPwDS8bfJWMthUbiRz 9LF/2BEtxpn93mPC5flj8QGZHJPH3BeIH3e071UgCyRcuLitQEmWZfyP8Gh//Pd3 hU6L7gXTRCp7pEh37PE8vD/cdVJhCuPe5IVDHpfy2WPqwVFoIyfHlv52yNpcAwLx SBqm0XPInlKFCC5EZDe40wXdQTZo1ZA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:34:54 2026 by rpki-client