$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa File: d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa (raw, json) Hash identifier: c/vSoOZmid5hA/oD6AuV9Fatxul5pdJUQRgNSIAMspE= Subject key identifier: 53:F4:FB:FE:7B:D2:FF:77:55:44:AC:C7:15:43:08:AD:F5:5B:D0:25 Certificate issuer: /CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Certificate serial: 010D0C9F4328584E7634C9E02760925F1CAAA5B0 Authority key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 22675 IP address blocks: 209.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:c9:e0:27:60:92:5f:1c:aa:a5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=a7a508ec-6fd4-4129-9742-70fe4da0369a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:78:3a:9b:66:9b:38:bc:fd:ba:d1:dd:d7: d7:9f:d4:63:a6:fc:e2:63:f7:e1:e9:c4:12:31:f4: 5b:d6:a9:f7:85:ac:d3:a5:76:e1:b7:20:11:a2:d0: 6f:64:e0:3e:e9:31:be:58:38:3b:07:63:1c:aa:97: 7b:a1:12:23:76:49:45:da:55:aa:e0:be:09:4a:b7: 97:b4:0e:39:f9:7c:65:92:18:ba:f4:80:e6:c9:77: 48:64:3b:1f:9a:73:46:ce:1a:59:26:d2:23:5c:6b: 43:b0:99:c8:01:16:75:36:80:75:27:db:bf:eb:ea: e8:e5:43:9e:f4:ab:e2:4d:85:b5:bb:f8:b3:3b:35: 7a:2e:fb:64:74:36:19:89:91:8d:4a:b9:1d:e0:e1: 02:7c:2c:4b:d6:5c:90:44:de:a8:66:9c:e2:02:26: 12:43:e6:d1:9e:b5:57:f7:ca:0f:f8:bd:5f:97:e4: 3f:16:5b:21:ec:f4:06:35:d6:03:8b:13:aa:b3:53: 0a:aa:24:71:68:63:36:2a:6c:cd:fd:c7:56:02:a6: 00:30:e9:d0:05:07:16:36:c1:d9:d6:3a:6b:ff:f7: 6a:58:05:95:80:e9:08:1f:d9:1a:b2:e7:94:15:81: 9b:f0:9f:b0:ad:aa:2c:2a:2f:8b:bb:65:5a:b7:ea: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F4:FB:FE:7B:D2:FF:77:55:44:AC:C7:15:43:08:AD:F5:5B:D0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl X509v3 Authority Key Identifier: keyid:4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer sbgp-ipAddrBlock: critical IPv4: 209.239.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1b:0d:e7:55:d9:68:75:a1:d1:73:18:64:35:5f:1c:10:d0: 91:6f:98:d9:dc:7b:f9:11:5b:96:2e:ef:7b:06:31:66:e9:ea: 68:90:bc:15:17:7c:aa:cd:75:51:91:c5:a0:f1:02:69:10:06: c9:c4:bb:b8:cd:db:d8:5f:80:a8:57:e7:a5:79:47:98:68:9c: 5c:0d:66:69:46:28:a4:f6:9a:e1:6f:54:55:ce:36:29:90:18: 91:7d:c8:78:20:cf:ed:14:b6:4a:d0:ee:be:b2:c2:a5:e4:83: a9:09:97:b0:31:90:bb:3c:a9:27:f7:9f:c9:1d:50:81:90:a0: 7f:e2:ad:3c:e3:21:8f:22:b0:33:d2:e0:d7:92:a0:ca:cc:77: 28:fc:e9:ed:b7:95:e3:44:58:64:b1:28:b2:3f:f0:ac:c1:a1: 46:d9:60:87:e0:9b:7f:bb:87:1a:ad:10:52:da:4b:37:76:ac: 85:0d:ed:2a:30:46:75:98:39:61:41:46:3c:3f:16:b8:05:33: 02:16:50:a6:e5:e2:5a:2f:5b:62:fd:cf:b6:43:0a:f8:b1:9c: 9b:6b:82:a8:96:6c:63:09:e5:31:e7:cb:08:bf:84:6f:b2:0e: 43:b9:2b:54:18:d9:a2:01:8b:47:43:2f:a8:06:4a:15:9f:a1: 95:30:a8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NMngJ2CSXxyqpbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdiNWZhYWQtNjNkYi00Y2ZkLWE1NWItNDE0M2MzZTk0 MjkxMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YTdhNTA4ZWMtNmZkNC00MTI5LTk3NDItNzBmZTRkYTAzNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO14Optmmzi8/brR3dfXn9RjpvziY/fh6cQS MfRb1qn3hazTpXbhtyARotBvZOA+6TG+WDg7B2Mcqpd7oRIjdklF2lWq4L4JSreX tA45+Xxlkhi69IDmyXdIZDsfmnNGzhpZJtIjXGtDsJnIARZ1NoB1J9u/6+ro5UOe 9KviTYW1u/izOzV6LvtkdDYZiZGNSrkd4OECfCxL1lyQRN6oZpziAiYSQ+bRnrVX 98oP+L1fl+Q/Flsh7PQGNdYDixOqs1MKqiRxaGM2KmzN/cdWAqYAMOnQBQcWNsHZ 1jpr//dqWAWVgOkIH9kasueUFYGb8J+wraosKi+Lu2Vat+rV1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP0+/570v93VUSsxxVDCK31W9AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1 ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQzYzNlOTQyOTEvZDdlNjdiZmMtZGI3ZS0z Y2ViLWE2ZjEtMGVmMDk5YWE3OGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTdiNWZhYWQtNjNkYi00Y2ZkLWE1 NWItNDE0M2MzZTk0MjkxLzU3YjVmYWFkLTYzZGItNGNmZC1hNTViLTQxNDNjM2U5 NDI5MS5jcmwwHwYDVR0jBBgwFoAUS3Ybjt1V265CNvhniSBnepTz7ZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQz YzNlOTQyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUbDedV2Wh1odFzGGQ1XxwQ0JFvmNnce/kRW5Yu73sGMWbp6miQvBUX fKrNdVGRxaDxAmkQBsnEu7jN29hfgKhX56V5R5honFwNZmlGKKT2muFvVFXONimQ GJF9yHggz+0UtkrQ7r6ywqXkg6kJl7AxkLs8qSf3n8kdUIGQoH/irTzjIY8isDPS 4NeSoMrMdyj86e23leNEWGSxKLI/8KzBoUbZYIfgm3+7hxqtEFLaSzd2rIUN7Sow RnWYOWFBRjw/FrgFMwIWUKbl4lovW2L9z7ZDCvixnJtrgqiWbGMJ5THnywi/hG+y DkO5K1QY2aIBi0dDL6gGShWfoZUwqCw= -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:16 2026 by rpki-client