$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa File: e9118524-ea78-3d58-a7f1-bb0892a23904.roa (raw, json) Hash identifier: 28ggIMRTeyLnKMPeX5sph5VVQVhK6+nEG3PGivuR0UY= Subject key identifier: EA:85:DA:26:11:A6:D9:B3:9D:7A:87:B6:1A:10:19:09:78:22:C7:E7 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E90BA458AE8142229F10CF200 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 21947 IP address blocks: 69.165.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:45:8a:e8:14:22:29:f1:0c:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=2a8c306d-4d6e-4049-a2b2-e1ef31e987a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8e:1d:13:77:b7:56:ca:03:3f:99:38:7e:77: 10:c1:dd:4c:08:74:8d:c3:fe:34:9a:1a:87:07:9b: 30:ef:5a:12:44:58:9b:b0:37:44:1f:75:6f:4a:56: 01:df:61:e1:5e:61:43:2e:02:42:b0:5a:fb:f6:52: e8:78:f1:8c:81:2b:f8:1f:ac:2e:5d:96:39:43:1b: 27:ac:aa:53:5b:f5:70:95:40:86:2f:d9:b1:4a:8a: f2:06:de:2e:0f:91:cc:1f:81:c2:b0:8e:04:76:78: 5a:6e:a3:b9:33:eb:47:a6:89:dd:0c:a3:8a:ef:ef: ca:6e:03:44:b1:d6:79:88:c1:57:5f:c6:7b:f1:ae: f5:0b:b1:c4:27:2f:ca:91:e2:6b:26:36:01:80:d7: a0:e8:50:18:97:7f:80:4b:ab:82:e0:2c:e3:c4:b3: 57:1d:78:e7:80:d0:59:34:76:82:43:73:60:50:40: 10:83:6a:f7:7f:74:0a:f1:b3:c9:4a:06:87:66:53: c7:a4:1b:d1:a8:d2:b8:74:1b:d0:05:b1:54:3d:13: 43:e5:34:e4:ee:5b:e5:c1:2f:41:d0:9b:99:1e:af: cd:e1:c2:0c:04:d0:49:c9:36:cf:9a:19:ce:44:3d: e0:27:d2:90:36:93:fa:8c:6b:84:f3:b2:18:b4:29: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:DA:26:11:A6:D9:B3:9D:7A:87:B6:1A:10:19:09:78:22:C7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 69.165.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:55:af:f8:5f:a9:0d:5a:2c:5e:7c:30:12:ab:6d:87:54:8c: 31:db:b0:55:a1:e3:2e:b0:8b:db:aa:ee:13:ea:59:a9:af:2c: 64:b1:f9:99:19:55:4f:59:a8:05:33:e3:5f:cb:55:70:80:52: ce:c3:92:cd:49:99:3c:9c:10:ef:07:94:d4:12:64:fe:b3:e7: 3d:f1:f2:f9:53:d3:cc:48:33:08:be:ee:ca:c7:1e:e1:8e:05: 16:ac:54:84:9d:c8:41:3a:1f:a1:04:1f:5f:b8:3f:d6:f1:9d: 37:93:b9:9b:82:f7:f8:08:20:a8:22:12:f2:ac:f4:51:79:22: 4e:46:3d:13:74:f2:47:95:e4:2e:c2:e0:41:05:40:e7:51:90: 11:1a:89:78:1a:b1:63:54:17:b2:a6:9d:04:11:97:99:e1:1d: 2e:cb:e6:96:c8:b0:b8:61:e0:f6:e8:b9:00:a5:d2:b1:6c:b7: 22:b3:2e:89:74:8f:d9:3c:e9:8b:e4:41:12:39:f7:2b:0d:9d: 26:82:84:a4:22:b3:02:b7:cd:33:7e:e6:10:c8:48:f4:92:6d: 55:f3:90:0b:8b:47:90:33:ae:99:7e:7a:ea:ee:10:be:6b:1e: 0f:94:b6:60:01:ce:7a:9c:15:76:4b:11:e2:e6:00:66:88:95: 92:bf:35:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QukWK6BQiKfEM8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk MmE4YzMwNmQtNGQ2ZS00MDQ5LWEyYjItZTFlZjMxZTk4N2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y4dE3e3VsoDP5k4fncQwd1MCHSNw/40mhqH B5sw71oSRFibsDdEH3VvSlYB32HhXmFDLgJCsFr79lLoePGMgSv4H6wuXZY5Qxsn rKpTW/VwlUCGL9mxSoryBt4uD5HMH4HCsI4EdnhabqO5M+tHpondDKOK7+/KbgNE sdZ5iMFXX8Z78a71C7HEJy/KkeJrJjYBgNeg6FAYl3+AS6uC4CzjxLNXHXjngNBZ NHaCQ3NgUEAQg2r3f3QK8bPJSgaHZlPHpBvRqNK4dBvQBbFUPRND5TTk7lvlwS9B 0JuZHq/N4cIMBNBJyTbPmhnORD3gJ9KQNpP6jGuE87IYtCn3qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqF2iYRptmznXqHthoQGQl4IsfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvZTkxMTg1MjQtZWE3OC0z ZDU4LWE3ZjEtYmIwODkyYTIzOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERaVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItVr/hfqQ1aLF58MBKrbYdUjDHbsFWh4y6wi9uq7hPqWamvLGSx+ZkZ VU9ZqAUz41/LVXCAUs7Dks1JmTycEO8HlNQSZP6z5z3x8vlT08xIMwi+7srHHuGO BRasVISdyEE6H6EEH1+4P9bxnTeTuZuC9/gIIKgiEvKs9FF5Ik5GPRN08keV5C7C 4EEFQOdRkBEaiXgasWNUF7KmnQQRl5nhHS7L5pbIsLhh4PbouQCl0rFstyKzLol0 j9k86YvkQRI59ysNnSaChKQiswK3zTN+5hDISPSSbVXzkAuLR5Azrpl+euruEL5r Hg+UtmABznqcFXZLEeLmAGaIlZK/Neg= -----END CERTIFICATE-----Generated at Fri Jul 24 10:39:54 2026 by rpki-client