$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa File: d11d7e2d-3067-3749-a2e7-fb3533597efa.roa (raw, json) Hash identifier: OsR+XOz+WFxvyX9BWxMU8L55c1okaMjfNO1TFuH547g= Subject key identifier: 21:4C:C9:47:5B:0B:68:97:A2:73:B7:DF:99:E6:29:D7:4B:34:A7:D9 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584E9384F70D51F4AF52D1B03420 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 21782 IP address blocks: 64.127.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f7:0d:51:f4:af:52:d1:b0:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=e8a1f2fa-c7cf-4781-9033-685e3233cb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:7e:8c:b9:4a:c6:28:cb:6b:2b:76:0e:dd: 52:e9:48:30:b8:bc:47:b7:2e:fa:e8:9d:56:cb:97: 3a:ef:d6:46:32:e4:ca:f5:a4:86:b1:b4:26:21:d8: 30:18:b3:ec:dd:86:13:7d:37:ec:04:86:4c:8c:af: 1b:1b:f1:be:61:48:df:85:b3:58:5b:04:45:8b:8e: 7a:df:2a:76:b2:5a:69:27:dc:61:c5:a4:c1:3d:1d: 27:dc:1c:10:7c:94:24:38:9d:50:69:e8:81:a4:43: 17:25:c7:7f:de:f7:37:7f:1b:19:24:c3:3d:1c:80: 8c:52:5c:7a:76:0c:d8:7f:34:c0:d9:e6:e1:eb:af: d9:3d:e9:4e:64:d3:8e:9a:f1:d2:08:34:85:ab:c4: 6a:06:18:52:7d:d8:9c:73:3a:2d:b7:e9:d0:6f:c1: 8f:a7:40:34:d3:06:ca:5c:11:9b:5c:f2:39:6b:e3: f3:72:45:60:a6:b6:8f:04:cf:9b:de:5d:b1:31:83: a8:3b:b4:17:e0:fc:73:50:be:28:ff:85:26:22:62: 3b:a2:96:c1:ea:1d:c0:f4:5a:59:14:19:5c:54:b9: ec:d0:ae:c4:63:9d:7b:23:4e:24:4e:77:34:53:5f: ba:46:dd:0d:6e:2b:e3:c4:d4:75:ab:b9:b2:c2:85: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4C:C9:47:5B:0B:68:97:A2:73:B7:DF:99:E6:29:D7:4B:34:A7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 64.127.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f0:f0:4c:d7:4d:7c:dd:1c:25:b5:57:00:63:d0:fd:f5:fa: e5:fb:46:c4:b7:8e:0b:10:ae:d2:36:8b:1c:4b:72:ee:39:5c: 83:1c:f2:13:9f:f5:6f:2b:e6:27:db:e8:5a:6c:67:ff:5e:be: d5:0b:08:61:7c:05:26:63:30:0c:94:68:29:56:17:79:bb:8d: 10:7d:dc:e4:42:9d:89:02:67:3a:62:5c:fe:c0:15:1f:4e:3a: 4e:b5:1e:57:b3:36:8b:23:84:36:2a:89:92:04:f6:ce:c7:f9: 7b:ce:aa:09:99:83:d2:d0:94:9e:3a:8f:eb:13:48:a4:32:de: f7:a1:d8:3f:20:6f:6f:bf:c0:13:64:29:13:d5:c1:a6:91:24: d2:72:78:ab:14:48:93:2e:98:8e:cb:04:5d:f6:2f:6d:c7:d8: d4:25:e1:3d:59:4d:08:f2:33:5d:20:22:31:ac:62:31:16:28: 56:31:8a:b0:92:03:98:c9:f4:d4:ba:7f:68:d9:02:6b:e0:2a: 68:29:10:25:0d:04:27:9b:7d:f4:29:96:8a:15:4c:74:76:1e: 96:dc:22:47:09:05:b2:92:08:8f:16:60:fe:73:ae:b2:20:38: d1:f6:cf:90:fb:c5:e1:09:b4:8a:30:a0:56:e8:33:59:f2:dd: 0b:cc:1d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPcNUfSvUtGwNCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk ZThhMWYyZmEtYzdjZi00NzgxLTkwMzMtNjg1ZTMyMzNjYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5J+jLlKxijLayt2Dt1S6UgwuLxHty766J1W y5c679ZGMuTK9aSGsbQmIdgwGLPs3YYTfTfsBIZMjK8bG/G+YUjfhbNYWwRFi456 3yp2slppJ9xhxaTBPR0n3BwQfJQkOJ1QaeiBpEMXJcd/3vc3fxsZJMM9HICMUlx6 dgzYfzTA2ebh66/ZPelOZNOOmvHSCDSFq8RqBhhSfdicczott+nQb8GPp0A00wbK XBGbXPI5a+PzckVgpraPBM+b3l2xMYOoO7QX4PxzUL4o/4UmImI7opbB6h3A9FpZ FBlcVLns0K7EY517I04kTnc0U1+6Rt0NbivjxNR1q7mywoVOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFMyUdbC2iXonO335nmKddLNKfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvZDExZDdlMmQtMzA2Ny0z NzQ5LWEyZTctZmIzNTMzNTk3ZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQH+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjw8EzXTXzdHCW1VwBj0P31+uX7RsS3jgsQrtI2ixxLcu45XIMc8hOf 9W8r5ifb6FpsZ/9evtULCGF8BSZjMAyUaClWF3m7jRB93ORCnYkCZzpiXP7AFR9O Ok61HlezNosjhDYqiZIE9s7H+XvOqgmZg9LQlJ46j+sTSKQy3veh2D8gb2+/wBNk KRPVwaaRJNJyeKsUSJMumI7LBF32L23H2NQl4T1ZTQjyM10gIjGsYjEWKFYxirCS A5jJ9NS6f2jZAmvgKmgpECUNBCebffQplooVTHR2HpbcIkcJBbKSCI8WYP5zrrIg ONH2z5D7xeEJtIowoFboM1ny3QvMHeg= -----END CERTIFICATE-----Generated at Fri Jul 24 15:57:53 2026 by rpki-client