$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa File: 9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa (raw, json) Hash identifier: FZxgS1rHWwQNofC53qZ9415Wqp5AbYCded3RghvHa6U= Subject key identifier: D9:17:EB:8D:CA:83:BB:AB:3B:89:49:C2:FC:0D:EA:CD:38:61:59:04 Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584E4AEF32109EF1A1ACAB7D3B00 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 397127 IP address blocks: 67.218.1.0/24 maxlen: 24 2620:13d:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:32:10:9e:f1:a1:ac:ab:7d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=5741f449-16fe-498c-b3f5-d1c4280c2d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:b6:fc:34:f3:e4:61:8b:d4:20:c4:2c:ff: ce:21:16:82:5f:22:65:28:f6:6f:25:27:d9:0d:83: 4f:56:01:40:35:53:8e:6e:18:95:2c:5e:ab:8f:56: e1:f4:7c:73:65:44:27:84:25:45:d1:b5:e0:9f:ea: 9e:ec:31:41:b5:73:2f:1f:8c:75:13:1a:1d:9c:9f: e0:cc:2b:44:0b:57:5e:e8:fe:fd:72:2b:13:90:3c: 13:66:5d:31:49:33:66:a5:d1:45:3e:12:60:d9:fd: 85:c0:18:69:e8:c9:bd:b2:12:be:70:f9:d7:f0:5a: b3:c6:cd:1b:4b:86:3f:e1:fb:86:65:f3:63:dc:c7: 14:c3:ad:e4:1f:4c:cc:e5:18:69:c5:34:e3:77:40: f2:79:52:d4:57:02:9a:a6:fd:2d:3f:d1:a0:7c:e6: 8a:16:1e:d8:e9:2f:2d:ab:84:74:c8:df:ee:9b:46: 5a:fc:83:20:1c:12:e1:64:06:12:86:ea:92:76:dc: 4a:c9:30:81:6d:60:1c:8c:6b:ec:81:bf:3c:19:42: a8:25:03:90:06:2c:7f:22:42:4b:69:5c:45:ca:fb: 60:78:10:88:f6:14:6d:2d:73:8b:7f:f2:42:89:c8: e3:59:dc:56:ca:e5:85:9a:6e:58:a6:c3:60:82:20: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:EB:8D:CA:83:BB:AB:3B:89:49:C2:FC:0D:EA:CD:38:61:59:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 67.218.1.0/24 IPv6: 2620:13d:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:b2:c2:9a:af:d0:95:21:e5:03:97:27:60:6a:41:a3:9c:61: 41:a0:23:ce:14:a2:94:27:94:66:7c:7d:9f:8e:36:28:91:15: ba:dd:3c:a5:84:41:82:a2:3e:90:23:56:e9:95:69:5a:c9:d6: c9:12:b8:d9:e8:e8:7f:b3:78:6b:43:bb:41:f3:d4:73:bb:ab: cf:d8:eb:43:2f:b0:6c:f7:b5:3c:1b:6c:24:7a:05:62:2c:bf: 07:84:e8:d4:23:63:b1:2f:98:86:b6:8a:eb:54:6a:42:6d:9a: fd:b3:9b:10:07:ef:28:8c:8f:5d:68:4c:cd:39:5b:e8:ff:92: 4c:c6:d6:28:cc:89:3f:40:01:96:6f:64:e5:f0:23:1f:c6:be: 2a:5d:11:d0:b3:64:0d:99:34:be:76:7a:88:47:8a:23:b4:57: 9b:13:e2:bc:6f:98:90:6e:c7:d2:7e:45:5d:00:48:ce:17:49: b9:b6:4e:75:4b:c2:06:2f:ab:0b:db:f5:39:5e:e4:dc:4b:da: cc:6e:40:fe:52:2c:ab:b9:cd:f3:1c:f7:20:e9:f6:cf:85:60: d6:98:f0:03:34:7e:a8:02:04:4b:5b:62:4b:fe:f8:0b:09:b9: 05:0e:b5:88:eb:60:d8:69:80:cc:b9:fc:33:66:74:3c:73:d9: 79:ee:8a:8b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5K7zIQnvGhrKt9OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk NTc0MWY0NDktMTZmZS00OThjLWIzZjUtZDFjNDI4MGMyZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nm2/DTz5GGL1CDELP/OIRaCXyJlKPZvJSfZ DYNPVgFANVOObhiVLF6rj1bh9HxzZUQnhCVF0bXgn+qe7DFBtXMvH4x1ExodnJ/g zCtEC1de6P79cisTkDwTZl0xSTNmpdFFPhJg2f2FwBhp6Mm9shK+cPnX8Fqzxs0b S4Y/4fuGZfNj3McUw63kH0zM5RhpxTTjd0DyeVLUVwKapv0tP9GgfOaKFh7Y6S8t q4R0yN/um0Za/IMgHBLhZAYShuqSdtxKyTCBbWAcjGvsgb88GUKoJQOQBix/IkJL aVxFyvtgeBCI9hRtLXOLf/JCicjjWdxWyuWFmm5YpsNggiCvAQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNkX643Kg7urO4lJwvwN6s04YVkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvOWJkODkzZDctYWY2ZS0z NGM2LWIzMTEtOTRhNzdkMWU0MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQ9oBMA8E AgACMAkDBwQmIAE94AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAxLLCmq/QlSHlA5cnYGpBo5xhQaAjzhSi lCeUZnx9n442KJEVut08pYRBgqI+kCNW6ZVpWsnWyRK42ejof7N4a0O7QfPUc7ur z9jrQy+wbPe1PBtsJHoFYiy/B4To1CNjsS+YhraK61RqQm2a/bObEAfvKIyPXWhM zTlb6P+STMbWKMyJP0ABlm9k5fAjH8a+Kl0R0LNkDZk0vnZ6iEeKI7RXmxPivG+Y kG7H0n5FXQBIzhdJubZOdUvCBi+rC9v1OV7k3EvazG5A/lIsq7nN8xz3IOn2z4Vg 1pjwAzR+qAIES1tiS/74Cwm5BQ61iOtg2GmAzLn8M2Z0PHPZee6Kiw== -----END CERTIFICATE-----Generated at Fri Jul 24 09:48:01 2026 by rpki-client