$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa File: 0f0b6b28-4fd9-341d-b09c-debd722a166c.roa (raw, json) Hash identifier: gIHUk4svE5VMzzzrlX1v1Oru7TIa3oYEzy6iGR6nnRE= Subject key identifier: A1:BE:71:71:2A:4B:67:DE:6F:51:D4:75:98:9A:BB:AA:D4:99:E6:D0 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584E8F54EC2600E74DFEB727EF00 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 22223 IP address blocks: 162.211.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:ec:26:00:e7:4d:fe:b7:27:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=d316dac7-c8c9-4867-af44-a7855941b0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:da:8c:8f:6b:29:1c:94:d2:8d:70:96:64: 56:28:72:14:fc:5c:70:73:22:21:e2:c4:82:06:72: 52:e8:d3:3d:3d:33:05:1a:da:d0:48:06:5d:15:ed: 34:e5:6a:f3:53:02:1a:2f:b0:4a:12:99:bc:a3:af: 7d:d3:61:88:f4:1c:5e:a5:8c:e6:d8:ec:aa:a4:30: cf:6b:3a:fb:91:5d:fe:15:51:f9:07:93:34:90:94: 53:f8:13:1b:22:ab:b2:db:40:bf:c7:40:0f:7e:02: 6b:f4:08:18:7b:71:e8:e6:b5:63:c5:66:3a:c0:74: b9:8a:a7:14:05:34:31:c3:91:43:e9:41:71:57:e0: 19:66:b4:2e:5f:9a:9b:da:31:8c:59:44:5b:59:0e: 14:a5:86:6f:bf:12:2a:5c:03:69:8a:16:97:f0:2b: 90:10:57:2b:ad:87:b8:a5:3c:9a:4e:d2:90:7f:da: 24:1b:d4:79:21:ce:cd:3c:59:13:83:1a:59:27:ec: 65:6b:ff:fd:78:07:84:7d:7d:66:2f:62:5e:86:e2: 0e:29:1b:cf:1c:5e:7f:0a:3b:0e:95:32:b4:01:58: b7:db:7b:94:38:8b:a2:72:c3:a9:73:79:a9:ec:8b: 46:62:79:71:72:da:e4:dc:db:98:ae:8f:04:a1:f7: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:71:71:2A:4B:67:DE:6F:51:D4:75:98:9A:BB:AA:D4:99:E6:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/0f0b6b28-4fd9-341d-b09c-debd722a166c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 162.211.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ad:50:cc:a0:c0:f0:59:fa:03:7b:9f:f3:d4:46:df:29:54: 93:50:9b:d2:01:b4:ba:93:aa:a2:23:51:34:09:5e:b6:d0:e0: 95:3d:10:2c:6a:8d:5f:cb:b2:8d:d1:05:82:d5:c3:ef:03:a0: f6:17:d2:f7:4d:45:a1:6b:2c:79:c3:e0:e5:89:8a:15:fb:e9: fb:cc:c0:1b:85:df:da:a7:64:a7:04:a3:ff:52:f8:30:00:9c: 4d:ed:87:f1:0b:80:f5:01:38:36:7e:a9:07:8f:d7:73:af:5e: 28:21:f5:e2:d1:58:67:99:21:62:36:17:74:2b:0a:6e:a8:d8: 4e:e5:3f:39:83:22:5b:7b:18:3f:1d:36:0a:70:b2:ea:7a:3f: ab:86:35:b2:92:9c:6a:b0:b1:91:e5:cf:32:08:ff:59:42:19: da:88:23:84:dd:8c:64:01:4a:bf:26:59:0d:be:99:a8:8f:98: 98:2d:99:40:78:88:ea:ce:66:95:c8:2a:c2:30:9d:04:11:d5: 68:ab:cd:47:d6:e1:7f:83:cc:6c:f2:3f:44:98:0b:60:c2:2f: 6b:60:b1:f3:89:36:e1:23:e5:60:ac:4c:23:63:29:13:89:34: b1:12:19:bb:f2:bd:20:00:ba:be:25:79:b8:78:2a:fc:e5:df: 28:b9:70:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVOwmAOdN/rcn7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZDMxNmRhYzctYzhjOS00ODY3LWFmNDQtYTc4NTU5NDFiMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PrajI9rKRyU0o1wlmRWKHIU/FxwcyIh4sSC BnJS6NM9PTMFGtrQSAZdFe005WrzUwIaL7BKEpm8o69902GI9BxepYzm2OyqpDDP azr7kV3+FVH5B5M0kJRT+BMbIquy20C/x0APfgJr9AgYe3Ho5rVjxWY6wHS5iqcU BTQxw5FD6UFxV+AZZrQuX5qb2jGMWURbWQ4UpYZvvxIqXANpihaX8CuQEFcrrYe4 pTyaTtKQf9okG9R5Ic7NPFkTgxpZJ+xla//9eAeEfX1mL2JehuIOKRvPHF5/CjsO lTK0AVi323uUOIuicsOpc3mp7ItGYnlxctrk3NuYro8Eofc0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG+cXEqS2feb1HUdZiau6rUmebQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvMGYwYjZiMjgtNGZkOS0z NDFkLWIwOWMtZGViZDcyMmExNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGatUMygwPBZ+gN7n/PURt8pVJNQm9IBtLqTqqIjUTQJXrbQ4JU9ECxq jV/Lso3RBYLVw+8DoPYX0vdNRaFrLHnD4OWJihX76fvMwBuF39qnZKcEo/9S+DAA nE3th/ELgPUBODZ+qQeP13OvXigh9eLRWGeZIWI2F3QrCm6o2E7lPzmDIlt7GD8d Ngpwsup6P6uGNbKSnGqwsZHlzzII/1lCGdqII4TdjGQBSr8mWQ2+maiPmJgtmUB4 iOrOZpXIKsIwnQQR1WirzUfW4X+DzGzyP0SYC2DCL2tgsfOJNuEj5WCsTCNjKROJ NLESGbvyvSAAur4lebh4Kvzl3yi5cPE= -----END CERTIFICATE-----Generated at Fri Jul 24 14:17:53 2026 by rpki-client