$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa File: a75e9005-93f7-3801-9334-a4a5f7627a9b.roa (raw, json) Hash identifier: Cs67lBll92nmVcD7FfYxsgO4ACxR+vHP6pCsKtUytY4= Subject key identifier: 4A:BD:9D:6F:E7:FF:23:EB:5D:5D:F7:DB:CC:F1:29:AD:C0:29:31:C3 Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584E9A7FF02F58BA377EB167D200 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 30669 IP address blocks: 216.220.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:f0:2f:58:ba:37:7e:b1:67:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=0fbd95ac-f602-402f-b591-3db5c92997a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:00:6b:cd:49:da:13:63:ae:96:ad:1d:e1: 8f:47:39:e1:47:c8:99:5d:1b:ef:e5:4c:27:b5:77: 80:9a:a9:5d:a1:53:d2:96:85:1b:ee:d4:bc:1d:98: 0e:f9:3d:06:d8:ea:fa:e3:96:74:e6:cc:82:69:28: 9f:72:6f:3d:fb:60:5f:9a:10:6a:59:93:e1:25:93: 14:1d:d1:18:2b:2c:10:fb:ae:48:af:63:00:31:77: 62:3a:b5:8f:30:6d:60:70:a3:42:4d:9e:35:b8:3f: 81:dc:11:57:9c:fd:fc:80:6b:ea:e8:8e:fa:92:70: f8:37:21:ac:3f:be:fe:d5:97:88:13:1c:b6:eb:19: d0:35:b8:6d:05:0a:d9:8f:4a:f0:92:57:37:6c:d1: 5f:94:52:e3:87:83:2b:8c:f8:a4:ae:0f:cf:93:4e: 2a:f0:74:02:82:30:e9:6b:a6:9c:22:18:88:86:e1: 78:36:90:c7:d0:e0:d4:48:65:fd:5d:2d:85:be:07: c4:ec:ce:62:17:68:f5:55:2a:de:a0:5d:f1:74:84: 9a:a7:1a:80:7e:15:7f:11:0c:37:65:e1:14:89:87: 99:dc:8e:8c:33:f6:fa:81:ce:1d:35:2e:8d:fd:b9: ec:13:1d:61:4b:6b:2a:4c:da:4e:ce:00:7a:01:71: db:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BD:9D:6F:E7:FF:23:EB:5D:5D:F7:DB:CC:F1:29:AD:C0:29:31:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/a75e9005-93f7-3801-9334-a4a5f7627a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 216.220.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f2:ba:38:06:4d:1b:6b:7f:66:ef:6f:95:b6:73:c2:8a:e2: 25:b7:56:cb:fc:fb:3a:c4:3f:10:0a:18:ea:91:67:75:e5:07: 6f:fc:6f:99:50:73:27:6d:ed:bc:9e:e8:ed:7d:a2:16:cb:e1: cb:70:34:c0:63:e2:1a:b9:dc:b8:12:51:6b:c0:c7:52:e8:28: d3:46:d6:7b:20:90:19:ef:83:65:e0:31:61:b4:c0:1e:43:e0: 6a:83:ee:39:5f:b9:78:31:5e:58:83:6c:5e:6c:1f:50:6c:4b: 40:2f:92:cf:73:88:22:7a:a3:86:81:f6:d5:bb:e5:2c:6e:4b: a6:3a:4a:c9:1d:d5:fc:64:14:60:52:9e:61:4e:db:7e:49:5a: 81:c9:9f:43:d5:5c:82:ff:b5:2a:d4:11:c8:1a:3c:e6:a9:be: 21:aa:73:4c:0e:13:71:d4:d3:42:ff:37:28:f5:b7:be:79:72: 19:ed:3c:29:1c:0f:45:b0:f6:6b:b5:ce:84:e9:ba:53:57:67: 66:30:0c:86:26:95:03:0b:a2:70:8f:e5:d3:7d:25:dc:91:35: 24:e1:62:56:50:38:47:dc:6b:c7:0a:81:4b:af:7f:54:f3:2c: 63:af:03:43:58:5f:96:36:a9:a4:89:f2:d7:98:51:ff:2f:96: 1b:89:da:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af/AvWLo3frFn0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MGZiZDk1YWMtZjYwMi00MDJmLWI1OTEtM2RiNWM5Mjk5N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdIAa81J2hNjrpatHeGPRznhR8iZXRvv5Uwn tXeAmqldoVPSloUb7tS8HZgO+T0G2Or645Z05syCaSifcm89+2BfmhBqWZPhJZMU HdEYKywQ+65Ir2MAMXdiOrWPMG1gcKNCTZ41uD+B3BFXnP38gGvq6I76knD4NyGs P77+1ZeIExy26xnQNbhtBQrZj0rwklc3bNFflFLjh4MrjPikrg/Pk04q8HQCgjDp a6acIhiIhuF4NpDH0ODUSGX9XS2FvgfE7M5iF2j1VSreoF3xdISapxqAfhV/EQw3 ZeEUiYeZ3I6MM/b6gc4dNS6N/bnsEx1hS2sqTNpOzgB6AXHbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq9nW/n/yPrXV3328zxKa3AKTHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvYTc1ZTkwMDUtOTNmNy0z ODAxLTkzMzQtYTRhNWY3NjI3YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3yujgGTRtrf2bvb5W2c8KK4iW3Vsv8+zrEPxAKGOqRZ3XlB2/8b5lQ cydt7bye6O19ohbL4ctwNMBj4hq53LgSUWvAx1LoKNNG1nsgkBnvg2XgMWG0wB5D 4GqD7jlfuXgxXliDbF5sH1BsS0Avks9ziCJ6o4aB9tW75SxuS6Y6Sskd1fxkFGBS nmFO235JWoHJn0PVXIL/tSrUEcgaPOapviGqc0wOE3HU00L/Nyj1t755chntPCkc D0Ww9mu1zoTpulNXZ2YwDIYmlQMLonCP5dN9JdyRNSThYlZQOEfca8cKgUuvf1Tz LGOvA0NYX5Y2qaSJ8teYUf8vlhuJ2gA= -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:17 2026 by rpki-client