$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa File: 6700284b-4b85-318a-8bb1-21ca06ce50e1.roa (raw, json) Hash identifier: dIm97PyU0Wd3cxv6Y0ueDteb0tE4Be+aRY1QFINZAA8= Subject key identifier: 54:CA:A2:6F:27:72:09:65:65:AA:D0:EB:CA:CD:14:22:F7:3E:A9:29 Certificate issuer: /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Certificate serial: 010D0C9F4328584E94EA539638F627005A6FF600 Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 396298 IP address blocks: 209.237.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:53:96:38:f6:27:00:5a:6f:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=209f4b20-58f0-452d-a235-c6fcafd1b212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:0b:28:6d:c0:33:e0:bd:b3:e6:76:a4:6f: 82:d9:b8:0e:57:ed:0e:00:ba:61:70:a4:9c:5e:f1: 4c:9c:8e:ab:99:78:0e:25:67:8d:59:84:de:28:c7: 31:54:88:4d:c3:0a:9e:15:a8:2d:06:c6:d1:9a:42: 70:02:d6:a9:03:2c:c5:4d:f3:77:7d:c9:2f:3f:15: 5e:2b:89:26:34:1a:58:d4:c8:43:a2:dc:bd:fe:cf: aa:8a:7d:9e:0d:7c:e9:34:3e:48:df:b4:60:10:5f: 67:45:b3:cc:e5:16:a5:e0:86:64:eb:b9:e7:84:5c: 91:09:df:19:a7:b6:56:4e:56:b4:b6:2b:3c:a0:0a: 39:92:a4:18:92:22:20:c8:40:ad:f8:5f:40:2f:d6: 04:41:80:ef:33:56:28:ac:59:fb:11:19:1a:b0:7d: 82:ed:4a:c7:33:63:09:b7:67:fc:7a:10:aa:04:17: 14:77:7c:9e:ad:50:62:27:cb:14:81:59:63:f5:24: 9d:9a:7f:58:48:7b:2a:8e:6d:7a:3f:a7:15:6a:ce: 78:50:20:43:c3:8c:55:79:83:fd:0a:d3:7c:d2:ba: cc:d1:51:5c:8c:0e:b3:48:51:ca:c8:9f:44:48:f7: 1a:eb:2d:d3:fd:60:2a:ec:11:9b:4c:5e:cd:9f:d2: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CA:A2:6F:27:72:09:65:65:AA:D0:EB:CA:CD:14:22:F7:3E:A9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl X509v3 Authority Key Identifier: keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer sbgp-ipAddrBlock: critical IPv4: 209.237.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:32:41:e0:81:83:97:20:d9:82:15:82:ff:13:e5:fb:4d:1a: 03:88:25:c1:28:c6:3f:db:13:5f:9c:23:89:7b:72:b6:dd:ff: d7:56:dc:c7:26:98:28:b7:68:d9:e2:3c:02:9e:5f:e5:e0:cb: 8e:93:92:23:98:d0:04:26:fa:48:2e:1d:db:7b:6b:60:8b:9e: 28:f2:52:fe:d9:1e:c8:d5:b7:d4:cc:03:ed:0e:3a:3b:e3:8d: c1:7c:64:62:67:03:1f:74:a2:68:22:ab:32:2a:f8:b5:29:7f: bf:15:66:80:cd:5f:2b:09:a3:99:7b:c6:4e:d6:fc:95:46:1f: 0b:9d:1f:7c:89:6b:a1:93:2e:fb:29:3c:c0:f4:e7:5d:41:d3: f9:d8:bc:e5:93:6f:13:e3:8d:10:51:ff:79:bf:ca:28:fb:2b: a4:6a:6f:2c:10:de:5c:04:3d:51:25:a9:cc:2e:30:00:3a:4b: 8a:46:83:27:f3:a4:fa:87:59:0c:87:90:1b:ea:35:d0:57:dc: 55:2d:12:70:17:53:06:be:c9:22:f4:80:ef:9d:4e:46:03:dd: ee:8e:46:01:28:8e:6d:5d:c4:a1:0b:74:da:6b:4c:e3:1b:61: 7e:d6:5b:69:47:1e:2c:6d:9e:9e:62:cf:f9:71:7c:19:6e:6d: 93:f1:38:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lOWOPYnAFpv9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjNDNlZmUtZTlkOS00MmQ3LTliNTEtZDA4NjAwZTQx M2ZhMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk MjA5ZjRiMjAtNThmMC00NTJkLWEyMzUtYzZmY2FmZDFiMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSELKG3AM+C9s+Z2pG+C2bgOV+0OALphcKSc XvFMnI6rmXgOJWeNWYTeKMcxVIhNwwqeFagtBsbRmkJwAtapAyzFTfN3fckvPxVe K4kmNBpY1MhDoty9/s+qin2eDXzpND5I37RgEF9nRbPM5Ral4IZk67nnhFyRCd8Z p7ZWTla0tis8oAo5kqQYkiIgyECt+F9AL9YEQYDvM1YorFn7ERkasH2C7UrHM2MJ t2f8ehCqBBcUd3yerVBiJ8sUgVlj9SSdmn9YSHsqjm16P6cVas54UCBDw4xVeYP9 CtN80rrM0VFcjA6zSFHKyJ9ESPca6y3T/WAq7BGbTF7Nn9ID/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTKom8ncgllZarQ68rNFCL3PqkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0 M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2MDBlNDEzZmEvNjcwMDI4NGItNGI4NS0z MThhLThiYjEtMjFjYTA2Y2U1MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRjNDNlZmUtZTlkOS00MmQ3LTli NTEtZDA4NjAwZTQxM2ZhLzBkYzQzZWZlLWU5ZDktNDJkNy05YjUxLWQwODYwMGU0 MTNmYS5jcmwwHwYDVR0jBBgwFoAUMbNEuzpeHgdJoKxgGNVS34HT9r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2 MDBlNDEzZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0e2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAyQeCBg5cg2YIVgv8T5ftNGgOIJcEoxj/bE1+cI4l7crbd/9dW3Mcm mCi3aNniPAKeX+Xgy46TkiOY0AQm+kguHdt7a2CLnijyUv7ZHsjVt9TMA+0OOjvj jcF8ZGJnAx90omgiqzIq+LUpf78VZoDNXysJo5l7xk7W/JVGHwudH3yJa6GTLvsp PMD0511B0/nYvOWTbxPjjRBR/3m/yij7K6RqbywQ3lwEPVElqcwuMAA6S4pGgyfz pPqHWQyHkBvqNdBX3FUtEnAXUwa+ySL0gO+dTkYD3e6ORgEojm1dxKELdNprTOMb YX7WW2lHHixtnp5iz/lxfBlubZPxOCw= -----END CERTIFICATE-----Generated at Fri Jul 24 14:25:37 2026 by rpki-client