$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa File: c38a9254-bd55-334d-8825-624e13ddc8fa.roa (raw, json) Hash identifier: SQ1e3D0t8sPBfVPCUYcmk92nbyRXrFb7TbMXVByPHuM= Subject key identifier: D9:9F:2A:C7:D7:72:35:8B:BB:66:02:48:67:89:80:1D:A9:A3:C9:56 Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F4328584E640F653FA5294DB4AEC62540 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 26155 IP address blocks: 67.223.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:65:3f:a5:29:4d:b4:ae:c6:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=1a25ba3e-6e2a-4cdf-bd82-f8c68e3a71ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:b2:c8:52:af:1e:87:be:d8:49:03:58:d5: df:c8:09:11:64:7c:bf:f7:03:e3:05:58:b5:21:e3: 78:e1:11:4e:3e:13:ea:ce:16:87:4c:22:e0:3f:60: bc:ce:d6:f7:0b:5f:42:62:fd:e2:f5:6b:f8:ab:b1: ac:3f:e8:c6:61:53:c3:5d:b4:2b:14:a3:c9:55:3a: fe:98:91:6d:64:dc:e0:8c:42:0a:c7:87:37:e3:29: 61:ec:37:4c:e3:0a:fe:80:df:59:2b:21:ea:64:3f: 85:93:91:c3:29:76:98:25:86:59:44:d5:93:c5:0c: b8:c4:48:30:bb:6d:b0:65:7a:9b:c1:98:ec:12:00: fe:f3:10:ba:2a:f7:0c:e0:90:c4:2e:fd:7e:87:20: ea:34:27:ca:d0:ab:b2:e0:70:a7:12:5e:2b:88:de: 35:f8:b8:de:e9:8a:f1:39:3d:91:1c:fc:fb:3c:e5: 23:f8:fb:65:6f:93:f9:11:7d:2e:cc:48:0b:e6:c5: 3d:6f:b6:8a:d2:3f:92:45:51:fc:67:02:8a:8a:06: 12:d9:35:e2:b1:8f:40:75:00:53:d6:30:0b:e8:de: b5:f8:32:4f:47:a2:e0:60:0e:ab:0a:d8:10:7e:10: 3d:eb:a4:58:79:fa:e1:48:d3:d1:43:17:2c:3b:81: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9F:2A:C7:D7:72:35:8B:BB:66:02:48:67:89:80:1D:A9:A3:C9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv4: 67.223.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:32:9a:77:de:bc:dd:8a:94:51:6b:2e:1b:db:9a:1c:fd:25: c7:66:36:74:9f:b0:1b:4f:7f:ed:e5:ad:cc:8a:89:fc:02:8f: e4:c6:6a:f9:c6:b5:9a:aa:b5:81:01:e3:bc:b8:c7:66:ef:0d: 2c:74:8f:32:b6:f9:46:23:0a:da:48:7d:48:60:2a:c3:7e:70: d9:91:8d:f9:f2:07:a7:6d:e3:44:1e:6d:1d:ec:24:b2:cd:70: a3:c2:ad:71:35:58:9f:74:b4:97:c0:b7:7a:7f:24:21:4c:6d: f1:2f:e4:c3:ce:7b:fd:09:f7:cb:67:17:85:4c:16:65:19:8d: 3c:af:8c:4e:56:46:4f:c5:21:07:74:e5:b5:c2:7f:79:6f:ad: 0a:3a:c4:51:3e:75:a6:91:17:ed:b1:a1:da:f4:91:e9:11:72: 7a:53:83:3b:c1:67:89:a9:26:51:bd:a2:0e:52:65:16:90:cf: a4:68:96:4a:6c:b7:f3:8e:69:0e:1c:df:ea:2a:d9:06:62:dc: 66:e9:cf:c6:cc:86:0a:85:25:77:5a:57:cd:c1:f6:30:59:db: 9b:03:46:b5:11:a3:a6:51:5b:fa:37:02:3e:a2:03:16:3c:d4: 29:dd:d3:12:ff:5f:14:ce:fa:73:61:f0:d6:53:5b:fe:49:d7: 36:4a:46:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2U/pSlNtK7GJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MWEyNWJhM2UtNmUyYS00Y2RmLWJkODItZjhjNjhlM2E3MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsyyyFKvHoe+2EkDWNXfyAkRZHy/9wPjBVi1 IeN44RFOPhPqzhaHTCLgP2C8ztb3C19CYv3i9Wv4q7GsP+jGYVPDXbQrFKPJVTr+ mJFtZNzgjEIKx4c34ylh7DdM4wr+gN9ZKyHqZD+Fk5HDKXaYJYZZRNWTxQy4xEgw u22wZXqbwZjsEgD+8xC6KvcM4JDELv1+hyDqNCfK0Kuy4HCnEl4riN41+Lje6Yrx OT2RHPz7POUj+Ptlb5P5EX0uzEgL5sU9b7aK0j+SRVH8ZwKKigYS2TXisY9AdQBT 1jAL6N61+DJPR6LgYA6rCtgQfhA966RYefrhSNPRQxcsO4FYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmfKsfXcjWLu2YCSGeJgB2po8lWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvYzM4YTkyNTQtYmQ1NS0z MzRkLTg4MjUtNjI0ZTEzZGRjOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwymnfevN2KlFFrLhvbmhz9JcdmNnSfsBtPf+3lrcyKifwCj+TGavnG tZqqtYEB47y4x2bvDSx0jzK2+UYjCtpIfUhgKsN+cNmRjfnyB6dt40QebR3sJLLN cKPCrXE1WJ90tJfAt3p/JCFMbfEv5MPOe/0J98tnF4VMFmUZjTyvjE5WRk/FIQd0 5bXCf3lvrQo6xFE+daaRF+2xodr0kekRcnpTgzvBZ4mpJlG9og5SZRaQz6Rolkps t/OOaQ4c3+oq2QZi3Gbpz8bMhgqFJXdaV83B9jBZ25sDRrURo6ZRW/o3Aj6iAxY8 1Cnd0xL/XxTO+nNh8NZTW/5J1zZKRtA= -----END CERTIFICATE-----Generated at Fri Jul 24 19:09:09 2026 by rpki-client