$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa File: 25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa (raw, json) Hash identifier: t1lSu/ZkujsfP+yQbZg6fvP6WGkrC7biH/DxOyzwlL0= Subject key identifier: 41:49:B9:AD:BF:26:2A:4C:E2:CD:ED:E2:E2:35:2A:92:03:09:4F:A3 Certificate issuer: /CN=f9d82c71-366a-467f-9b6c-3667d1ae7605 Certificate serial: 010D0C9F4328584E6C6F7543247F3CFBFC3B0730 Authority key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 32083 IP address blocks: 66.158.192.0/18 maxlen: 24 173.46.160.0/19 maxlen: 24 208.111.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:75:43:24:7f:3c:fb:fc:3b:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=74655cd5-9dff-44f3-bb6b-785dd3226007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:74:dc:24:c2:76:46:ba:8b:13:80:b5:a1: d7:c2:7d:dd:0c:6b:2a:d0:53:70:d7:cf:b3:0b:ec: 27:7e:48:7b:b4:14:d6:72:c3:a7:cc:bd:f6:1f:b7: 48:b6:1c:16:24:4b:1d:bc:46:da:f8:d3:52:27:b2: 21:e4:16:c1:5b:88:10:91:d4:33:66:a5:08:d2:40: 1f:6e:8c:06:a1:24:9f:61:14:85:3f:66:32:60:8a: a9:31:c8:93:38:84:b6:62:82:a5:20:d6:76:eb:00: ae:d6:ac:7d:fd:a8:d8:cd:59:d2:b7:7c:02:f4:4a: fc:fb:05:50:ac:55:08:d3:1f:69:c1:b8:b6:ba:89: f3:88:d1:97:95:d5:c1:f3:f4:8f:46:01:38:ce:e7: d6:8d:ec:43:1a:b2:f4:0a:5a:04:a3:69:15:9e:37: 34:a5:76:4c:20:a0:2c:91:92:da:40:d0:d7:96:68: 07:f4:2f:2c:f9:08:6e:cc:35:84:fa:0a:a9:1e:e0: b7:38:4b:ec:41:13:92:90:1c:ef:ea:00:f3:df:75: 1a:80:e4:59:a3:2d:9f:23:2b:49:97:1e:fb:91:9e: ce:f8:fd:d5:8d:3d:1c:29:21:cd:37:a0:e4:f6:10: 38:7d:33:75:83:f8:11:d9:53:b3:e1:33:91:29:ea: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:B9:AD:BF:26:2A:4C:E2:CD:ED:E2:E2:35:2A:92:03:09:4F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/25059d99-2fa5-3c29-aae7-03656d2ab9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.crl X509v3 Authority Key Identifier: keyid:8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer sbgp-ipAddrBlock: critical IPv4: 66.158.192.0/18 173.46.160.0/19 208.111.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:20:cb:39:e1:9e:42:9e:53:14:29:95:86:b2:01:37:da:b5: 7f:3d:98:bf:81:ce:40:32:d0:aa:25:58:aa:b1:cd:5a:34:9a: 44:f6:7e:b3:4a:a8:13:ee:ec:e5:74:bd:97:f5:12:33:0f:26: de:3d:c2:26:1f:38:cb:ce:a1:54:f4:14:d6:aa:7b:b9:2d:ec: 25:76:d1:66:ef:a6:ad:dd:76:7a:42:7b:a0:f0:ac:31:1e:95: 31:89:b2:87:11:d9:52:37:15:10:61:ae:ad:a5:3d:5c:77:ba: b1:91:39:8a:71:01:5f:9a:57:ad:54:6d:07:85:ae:9f:0d:b2: 2b:96:fb:e2:b7:ac:35:0e:67:f3:13:ec:a0:70:0e:91:91:43: 4a:3c:0a:7f:bc:ab:b7:40:f8:01:3b:f0:86:d7:9d:4d:a8:bb: 08:19:b3:fe:65:a0:94:f8:f5:ea:62:81:ae:dc:ee:86:e3:04: 4c:a6:21:9c:b4:67:f3:15:f5:03:2c:4b:64:0d:dc:76:f1:c3: f8:bc:11:16:7d:bc:18:ef:3b:5d:2d:68:c2:d5:ac:a5:47:5f: 74:84:cc:6a:2e:d9:0e:78:48:88:eb:bf:62:18:2d:a6:cc:bf: 58:08:35:05:7e:a1:c7:fe:d5:51:34:2a:8f:27:53:a7:85:12: 2e:1d:4f:52 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5sb3VDJH88+/w7BzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlkODJjNzEtMzY2YS00NjdmLTliNmMtMzY2N2QxYWU3 NjA1MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk NzQ2NTVjZDUtOWRmZi00NGYzLWJiNmItNzg1ZGQzMjI2MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZB03CTCdka6ixOAtaHXwn3dDGsq0FNw18+z C+wnfkh7tBTWcsOnzL32H7dIthwWJEsdvEba+NNSJ7Ih5BbBW4gQkdQzZqUI0kAf bowGoSSfYRSFP2YyYIqpMciTOIS2YoKlINZ26wCu1qx9/ajYzVnSt3wC9Er8+wVQ rFUI0x9pwbi2uonziNGXldXB8/SPRgE4zufWjexDGrL0CloEo2kVnjc0pXZMIKAs kZLaQNDXlmgH9C8s+QhuzDWE+gqpHuC3OEvsQROSkBzv6gDz33UagORZoy2fIytJ lx77kZ7O+P3VjT0cKSHNN6Dk9hA4fTN1g/gR2VOz4TORKeoEAwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEFJua2/JipM4s3t4uI1KpIDCU+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4 MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3ZDFhZTc2MDUvMjUwNTlkOTktMmZhNS0z YzI5LWFhZTctMDM2NTZkMmFiOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjlkODJjNzEtMzY2YS00NjdmLTli NmMtMzY2N2QxYWU3NjA1L2Y5ZDgyYzcxLTM2NmEtNDY3Zi05YjZjLTM2NjdkMWFl NzYwNS5jcmwwHwYDVR0jBBgwFoAUivmrnrZ2KLgxHuoH0zx32aUB93owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWQ4MmM3MS0zNjZhLTQ2N2YtOWI2Yy0zNjY3 ZDFhZTc2MDUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGQp7AAwQF rS6gAwQF0G8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIQgyznhnkKeUxQplYayATfatX89mL+BzkAy0Kol WKqxzVo0mkT2frNKqBPu7OV0vZf1EjMPJt49wiYfOMvOoVT0FNaqe7kt7CV20Wbv pq3ddnpCe6DwrDEelTGJsocR2VI3FRBhrq2lPVx3urGROYpxAV+aV61UbQeFrp8N siuW++K3rDUOZ/MT7KBwDpGRQ0o8Cn+8q7dA+AE78IbXnU2ouwgZs/5loJT49epi ga7c7objBEymIZy0Z/MV9QMsS2QN3Hbxw/i8ERZ9vBjvO10taMLVrKVHX3SEzGou 2Q54SIjrv2IYLabMv1gINQV+ocf+1VE0Ko8nU6eFEi4dT1I= -----END CERTIFICATE-----Generated at Fri Jul 24 16:55:40 2026 by rpki-client