$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa File: d75fdb09-5717-3050-9039-6e239be863f8.roa (raw, json) Hash identifier: X8A3HrTVYkKLuYKf0P7xQQmUb9GsRnESoJ8TfHYYSxc= Subject key identifier: 39:DC:9D:A6:C0:71:B7:2A:1B:6A:9A:E9:5A:0E:71:B0:3C:59:33:4C Certificate issuer: /CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27 Certificate serial: 010D0C9F4328584E6DD4C98D1BED8277FB8CC280 Authority key identifier: CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 36267 IP address blocks: 172.83.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:c9:8d:1b:ed:82:77:fb:8c:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27 Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=da140bdc-6f0f-4221-8f93-a6b2504e692d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:2e:83:5b:96:c9:9b:67:55:45:27:27:a6: ac:8f:06:4e:5a:6e:35:23:19:60:f0:3c:83:c9:7f: e3:3e:ab:21:5a:5f:96:b4:59:2c:d3:9b:80:db:59: 00:ec:c7:9f:73:e9:a0:2e:1a:26:5c:c6:c2:34:df: 76:23:96:79:46:4f:e6:33:b7:95:f0:8e:2d:f4:65: be:2a:d4:7f:1f:28:66:07:23:09:15:d2:9a:ad:df: 52:be:14:79:63:d9:8a:fa:e6:1c:d4:f9:02:61:93: 6b:84:de:0f:32:6b:8d:ca:57:1d:91:f7:24:5c:15: 92:94:8a:87:c8:b0:c4:41:ab:b2:69:aa:49:e7:bf: c7:cd:e4:c0:da:5c:32:ea:29:29:82:9c:04:8a:fa: f3:d1:9c:c8:28:6d:ab:14:8b:7f:af:63:ae:3d:c3: 77:27:a7:06:78:35:f7:0d:78:fa:d1:62:e7:e3:ca: a0:69:42:92:93:33:78:94:02:31:b1:7e:68:6b:c3: e5:d2:57:31:2b:d5:53:f5:76:30:4f:58:d4:da:34: dd:8a:a2:45:31:45:40:d3:78:bc:88:9d:a5:d5:e9: 54:ec:61:58:62:f1:37:a1:5a:df:db:70:16:00:f4: b7:b1:28:cb:92:74:70:92:35:ad:90:7f:2c:49:6e: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DC:9D:A6:C0:71:B7:2A:1B:6A:9A:E9:5A:0E:71:B0:3C:59:33:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.crl X509v3 Authority Key Identifier: keyid:CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer sbgp-ipAddrBlock: critical IPv4: 172.83.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b6:51:35:86:d3:8e:bf:b2:07:96:18:33:02:5e:9b:9a:d2: eb:a8:5c:56:82:32:a9:a5:eb:8b:55:6c:cf:26:09:61:e2:c7: d1:15:25:64:b1:d5:61:45:3d:9c:05:99:70:76:7c:54:1f:d5: 01:e1:3b:82:17:67:23:f9:4b:4d:56:3e:66:e6:0b:66:86:4b: 56:1a:95:fc:5d:1f:e7:76:b0:a4:5a:60:a7:a7:8a:ed:9f:97: 27:fa:84:03:4e:c5:00:22:d2:df:6b:a8:25:37:20:72:34:03: 36:b3:52:ac:d0:26:83:21:24:49:5a:fa:12:f0:9e:db:46:46: 46:6a:ef:42:cf:9f:c1:5a:73:a7:26:ab:94:9a:68:c3:7e:77: 36:7a:3f:8f:7e:1c:24:ad:50:3d:f0:ac:58:33:e2:7c:b1:eb: 1d:a7:18:30:71:35:80:c3:d0:86:ef:2e:13:12:ec:59:ef:22: 4e:ea:1c:e1:3b:17:0e:9f:cc:4b:97:46:59:ab:13:5a:ca:fa: b4:b6:e8:68:51:af:10:cd:46:19:e8:8f:5e:1b:e7:71:9a:e9: 76:34:c0:b4:4f:b7:39:2a:68:8d:b8:f3:91:7c:da:e9:cb:12: 59:25:0d:8f:f5:ee:57:ad:b8:d4:50:0e:6d:b9:34:56:41:ec: b4:3e:71:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1MmNG+2Cd/uMwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE2NDg1YTMtMGRkMS00YmIzLTk4OWItYWMwMDBkNTRj ZTI3MB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk ZGExNDBiZGMtNmYwZi00MjIxLThmOTMtYTZiMjUwNGU2OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn14ug1uWyZtnVUUnJ6asjwZOWm41Ixlg8DyD yX/jPqshWl+WtFks05uA21kA7Mefc+mgLhomXMbCNN92I5Z5Rk/mM7eV8I4t9GW+ KtR/HyhmByMJFdKard9SvhR5Y9mK+uYc1PkCYZNrhN4PMmuNylcdkfckXBWSlIqH yLDEQauyaapJ57/HzeTA2lwy6ikpgpwEivrz0ZzIKG2rFIt/r2OuPcN3J6cGeDX3 DXj60WLn48qgaUKSkzN4lAIxsX5oa8Pl0lcxK9VT9XYwT1jU2jTdiqJFMUVA03i8 iJ2l1elU7GFYYvE3oVrf23AWAPS3sSjLknRwkjWtkH8sSW4x8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDncnabAcbcqG2qa6VoOcbA8WTNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYTY0 ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAwMGQ1NGNlMjcvZDc1ZmRiMDktNTcxNy0z MDUwLTkwMzktNmUyMzliZTg2M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWE2NDg1YTMtMGRkMS00YmIzLTk4 OWItYWMwMDBkNTRjZTI3L2FhNjQ4NWEzLTBkZDEtNGJiMy05ODliLWFjMDAwZDU0 Y2UyNy5jcmwwHwYDVR0jBBgwFoAUzPaBDKvWdMCst+tOq8Xe1TrqTFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hYTY0ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAw MGQ1NGNlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE22UTWG046/sgeWGDMCXpua0uuoXFaCMqml64tVbM8mCWHix9EVJWSx 1WFFPZwFmXB2fFQf1QHhO4IXZyP5S01WPmbmC2aGS1YalfxdH+d2sKRaYKeniu2f lyf6hANOxQAi0t9rqCU3IHI0AzazUqzQJoMhJEla+hLwnttGRkZq70LPn8Fac6cm q5SaaMN+dzZ6P49+HCStUD3wrFgz4nyx6x2nGDBxNYDD0IbvLhMS7FnvIk7qHOE7 Fw6fzEuXRlmrE1rK+rS26GhRrxDNRhnoj14b53Ga6XY0wLRPtzkqaI2485F82unL ElklDY/17letuNRQDm25NFZB7LQ+cdM= -----END CERTIFICATE-----Generated at Thu Jul 23 22:05:16 2026 by rpki-client