$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa File: 25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa (raw, json) Hash identifier: FNc9gUC91eoaBkP8gDEMZ+HCy4uK9qrgq+oOL5lz1tw= Subject key identifier: 63:C1:98:E4:2C:02:9A:68:33:97:61:5B:E3:61:A7:C8:44:98:BB:3D Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584E704474E2B69DA6A5E6943DC0 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa Signing time: Thu 09 Jul 2026 05:56:59 +0000 ROA not before: Thu 09 Jul 2026 05:56:59 +0000 ROA not after: Wed 07 Oct 2026 05:56:59 +0000 asID: 17315 IP address blocks: 216.220.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:44:74:e2:b6:9d:a6:a5:e6:94:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Jul 9 05:56:59 2026 GMT Not After : Oct 7 05:56:59 2026 GMT Subject: CN=abc2ddd6-ec7a-4bc8-9e01-d3441918e937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:f2:33:80:89:8d:41:c1:53:b8:29:c2:70: 87:30:6b:81:a4:87:e1:b8:8c:77:f0:2a:ac:96:e9: 1e:14:77:b0:33:c4:78:f9:cd:1a:e4:5d:06:1a:1a: 92:47:f0:13:3c:bd:36:83:c2:e0:27:08:f4:3b:37: 83:83:c1:4f:55:7d:68:33:ff:7b:08:0d:c2:d7:9a: 67:7e:ff:4f:ad:ee:b4:f5:8f:c1:5b:d5:61:89:89: 3a:8c:7c:31:2e:f5:28:6c:92:2e:79:77:d0:8c:74: d0:9d:91:c4:b4:50:83:f5:3a:74:cf:92:a0:8d:60: ff:a7:d8:a8:21:08:e2:1f:ca:11:17:c7:6d:2e:dc: 02:98:f3:e8:df:c7:ab:4e:d0:4d:e5:35:19:80:0d: f8:8a:c9:c8:f1:13:fe:83:5a:86:1a:17:27:e7:81: 85:15:d0:b3:ba:96:cd:02:b9:05:0d:02:86:10:85: eb:c8:0b:f1:03:6f:05:c0:c5:9c:a5:a4:30:f2:5c: 8e:ba:9e:88:1e:f6:3e:eb:3b:83:63:97:bf:c3:94: bc:4e:fd:bd:d5:6a:d4:b1:cc:4d:12:f9:60:38:da: 0d:39:8f:04:68:98:cf:93:30:e5:e6:64:45:1a:23: 2b:92:b4:2a:9e:f8:71:db:bd:6b:83:3b:f6:6f:0b: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C1:98:E4:2C:02:9A:68:33:97:61:5B:E3:61:A7:C8:44:98:BB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/25e85bfd-0820-3a8d-a0d7-b984c7bba31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 216.220.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:22:86:9f:04:b3:25:28:73:f1:ed:74:6c:37:3c:dd:93:e8: 89:76:c2:d9:b5:e1:11:e9:c8:82:ed:88:45:9b:5f:6a:e9:71: 4b:67:e5:f5:48:3a:cd:c4:d7:a9:7e:fe:e4:fd:2e:ac:f8:68: 00:e6:78:fa:19:35:08:b7:64:13:20:d5:73:1c:92:9a:00:c4: 61:5d:03:34:b7:ad:28:9e:e9:4a:ed:95:0a:51:94:46:b2:39: 79:3a:a3:98:44:cb:4b:3c:1d:0f:99:8c:28:9e:51:e5:84:33: 08:43:7d:e6:e5:dd:7b:b6:4c:f9:1f:f2:bb:95:8a:ca:aa:43: 2d:1a:23:1f:9e:bd:3f:67:d9:6d:55:5e:55:2b:67:5d:66:ff: 1a:c2:be:91:5a:94:88:92:f8:69:41:06:23:f2:c9:e9:84:27: 45:59:12:f5:5b:6a:47:b9:e3:1f:19:10:67:43:1c:eb:fb:e2: ad:4a:cf:7d:fb:ee:e7:fc:6f:56:03:c1:d9:83:2d:03:5b:3a: 65:1f:8a:35:c3:62:77:da:10:3d:ab:57:9b:94:a7:42:51:84: ed:fd:99:e0:56:d4:3c:57:62:81:4b:fb:38:b5:52:11:9e:8d: a7:0d:af:33:4f:f7:37:6d:77:15:d6:dd:84:ae:49:5e:15:eb: b0:f8:10:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wRHTitp2mpeaUPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDcwOTA1NTY1OVoXDTI2MTAwNzA1NTY1OVowLzEtMCsGA1UEAxMk YWJjMmRkZDYtZWM3YS00YmM4LTllMDEtZDM0NDE5MThlOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMvyM4CJjUHBU7gpwnCHMGuBpIfhuIx38Cqs lukeFHewM8R4+c0a5F0GGhqSR/ATPL02g8LgJwj0OzeDg8FPVX1oM/97CA3C15pn fv9Pre609Y/BW9VhiYk6jHwxLvUobJIueXfQjHTQnZHEtFCD9Tp0z5KgjWD/p9io IQjiH8oRF8dtLtwCmPPo38erTtBN5TUZgA34isnI8RP+g1qGGhcn54GFFdCzupbN ArkFDQKGEIXryAvxA28FwMWcpaQw8lyOup6IHvY+6zuDY5e/w5S8Tv291WrUscxN EvlgONoNOY8EaJjPkzDl5mRFGiMrkrQqnvhx271rgzv2bwsDOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPBmOQsAppoM5dhW+Nhp8hEmLs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvMjVlODViZmQtMDgyMC0z YThkLWEwZDctYjk4NGM3YmJhMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYihp8EsyUoc/HtdGw3PN2T6Il2wtm14RHpyILtiEWbX2rpcUtn5fVI Os3E16l+/uT9Lqz4aADmePoZNQi3ZBMg1XMckpoAxGFdAzS3rSie6UrtlQpRlEay OXk6o5hEy0s8HQ+ZjCieUeWEMwhDfebl3Xu2TPkf8ruVisqqQy0aIx+evT9n2W1V XlUrZ11m/xrCvpFalIiS+GlBBiPyyemEJ0VZEvVbake54x8ZEGdDHOv74q1Kz337 7uf8b1YDwdmDLQNbOmUfijXDYnfaED2rV5uUp0JRhO39meBW1DxXYoFL+zi1UhGe jacNrzNP9zdtdxXW3YSuSV4V67D4ENk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:38:24 2026 by rpki-client