$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa File: 3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa (raw, json) Hash identifier: CqNE/EohnBzjP1znpou6RcyJ+5mIBBB/hVvNJBefpH4= Subject key identifier: 2D:04:AA:36:9A:F3:93:33:46:6B:8E:61:50:06:11:BD:85:E2:84:49 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E683F621BCA76D5BE686B7380 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 36546 IP address blocks: 64.111.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:62:1b:ca:76:d5:be:68:6b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=e8ebab50-e6d3-4d6d-ad72-9ab70902a9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:4c:02:83:21:c3:06:26:54:9f:fb:e0:01: 6e:ac:7c:23:72:e0:5e:02:91:9a:c3:69:79:31:33: f1:4e:df:56:f8:fd:c6:74:4a:28:a8:13:d2:f3:12: 4c:db:91:ff:c3:cc:70:db:c0:a9:60:21:48:e1:21: 2b:26:10:46:f4:12:56:81:45:98:80:da:b1:fd:f5: a0:d4:84:ce:3d:de:41:00:9d:0a:da:0e:80:4b:cd: 48:53:04:dc:1b:0d:5a:ad:28:76:55:b8:aa:b0:79: e1:ea:c5:50:a7:64:76:4e:31:f4:1a:1b:b1:74:28: 20:29:c8:a5:41:d8:fe:03:aa:1a:69:12:b8:3d:a0: 61:21:59:db:1a:3a:58:5b:a0:4d:12:a8:95:c7:59: 31:eb:d3:ac:6f:7a:34:a2:0e:79:cb:34:ca:fd:e5: bb:ec:d1:c9:6f:c5:1c:32:bd:7b:99:54:24:ee:80: 8e:30:2e:b2:c5:1e:fc:ab:f8:7c:14:5c:93:de:4f: de:03:15:ca:37:9a:5f:34:90:93:45:80:68:0d:9a: 9c:83:96:ec:74:0a:b7:b6:02:8c:3a:92:e5:a4:7f: 99:78:23:4c:08:5d:5b:30:74:cb:54:4c:b7:cd:1e: c1:b0:db:40:6d:36:62:39:4f:7f:bc:eb:1e:d8:1d: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:04:AA:36:9A:F3:93:33:46:6B:8E:61:50:06:11:BD:85:E2:84:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/3f49bbba-63a4-35b1-8f9a-e7c5da4ab7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 64.111.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4f:a3:7f:b5:59:75:70:bd:34:3a:e0:03:85:49:c9:3a:0f: 98:b6:16:91:4e:cb:c3:e0:95:7d:7f:2e:81:42:b6:4d:13:55: 28:1b:86:81:cb:53:92:a6:e1:b1:d8:05:73:fb:09:2b:6e:1a: a4:ca:c0:50:48:cf:66:51:74:6c:9f:57:a5:11:c1:06:b6:81: 47:d8:aa:11:74:42:9e:da:54:46:05:18:cb:87:77:6a:6c:34: ba:a2:75:c6:41:c6:b9:20:96:f5:33:ef:74:7b:7e:da:4d:d5: 4b:e3:66:4f:10:6e:ed:38:f2:02:43:61:3a:53:98:4c:07:58: 41:ef:3f:1f:3b:5c:ec:fc:cd:0c:45:7f:60:a7:6d:00:fd:9a: d0:10:8e:20:c0:b4:00:ac:4c:4b:49:7a:d1:f7:fb:6d:d3:2b: 9b:24:28:1c:74:44:bf:e8:48:c8:96:b1:92:75:23:4d:fb:f3: f2:75:26:90:b9:97:a8:96:6b:76:36:be:d9:10:c9:c3:f7:81: dc:1c:18:45:18:30:33:2b:78:a4:a0:96:b2:61:75:7d:6e:82: 1f:a0:52:26:4f:6b:c8:15:99:1c:61:c7:00:ff:59:ff:d7:f8: 39:ae:ae:9c:a7:94:8b:fa:62:71:b7:d6:85:51:d8:47:e2:dd: 9e:cf:44:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP2IbynbVvmhrc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk ZThlYmFiNTAtZTZkMy00ZDZkLWFkNzItOWFiNzA5MDJhOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh5MAoMhwwYmVJ/74AFurHwjcuBeApGaw2l5 MTPxTt9W+P3GdEooqBPS8xJM25H/w8xw28CpYCFI4SErJhBG9BJWgUWYgNqx/fWg 1ITOPd5BAJ0K2g6AS81IUwTcGw1arSh2VbiqsHnh6sVQp2R2TjH0GhuxdCggKcil Qdj+A6oaaRK4PaBhIVnbGjpYW6BNEqiVx1kx69Osb3o0og55yzTK/eW77NHJb8Uc Mr17mVQk7oCOMC6yxR78q/h8FFyT3k/eAxXKN5pfNJCTRYBoDZqcg5bsdAq3tgKM OpLlpH+ZeCNMCF1bMHTLVEy3zR7BsNtAbTZiOU9/vOse2B0VlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0Eqjaa85MzRmuOYVAGEb2F4oRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvM2Y0OWJiYmEtNjNhNC0z NWIxLThmOWEtZTdjNWRhNGFiN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQG80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdPo3+1WXVwvTQ64AOFSck6D5i2FpFOy8PglX1/LoFCtk0TVSgbhoHL U5Km4bHYBXP7CStuGqTKwFBIz2ZRdGyfV6URwQa2gUfYqhF0Qp7aVEYFGMuHd2ps NLqidcZBxrkglvUz73R7ftpN1UvjZk8Qbu048gJDYTpTmEwHWEHvPx87XOz8zQxF f2CnbQD9mtAQjiDAtACsTEtJetH3+23TK5skKBx0RL/oSMiWsZJ1I0378/J1JpC5 l6iWa3Y2vtkQycP3gdwcGEUYMDMreKSglrJhdX1ugh+gUiZPa8gVmRxhxwD/Wf/X +DmurpynlIv6YnG31oVR2Efi3Z7PRAE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:41:49 2026 by rpki-client