$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa File: 04220d33-aa94-3e2f-968e-e384d2bf91b3.roa (raw, json) Hash identifier: QY9+2trwV+arhyiX6YIoOU7RXAO7x8WKkjQyWbNufY8= Subject key identifier: 98:60:C9:78:93:42:86:FE:47:9E:4D:34:F1:51:19:7C:20:86:08:7A Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584E8DEF9F470A63E1EECDE7D0C0 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:9f:47:0a:63:e1:ee:cd:e7:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=17338f27-9bd2-4009-a453-38cc23538836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:6e:5d:c0:f7:dd:23:c4:b8:37:9a:cd:45: 91:06:1a:0f:cb:88:fa:c4:23:68:1a:29:b4:29:e9: a7:ed:b0:cd:e2:7e:a7:53:71:55:47:a1:89:9f:b6: a3:f2:67:e8:5b:f3:cf:96:13:e4:b5:2e:da:67:bc: 73:bb:42:2b:bd:39:c5:c1:4b:87:d5:5c:65:30:9a: 79:17:7e:32:4f:74:72:19:d0:92:07:57:f7:75:92: bc:85:c8:eb:75:c9:9e:93:d7:69:4f:12:39:70:80: 5b:aa:40:40:12:fc:96:5b:e5:11:db:24:2c:8a:7e: 20:aa:00:37:20:50:44:43:b3:5b:86:14:ea:87:84: b8:fa:56:51:82:f2:3a:6e:72:fe:6a:9a:94:54:5f: 2a:8f:2c:e2:ac:aa:bd:4a:b5:5f:9d:79:4d:8e:c4: a7:f0:53:63:9e:89:75:ba:0b:01:10:43:04:d1:bc: 5c:64:85:b2:5d:b4:a7:b8:22:70:b3:68:56:24:bf: 56:21:9e:51:c9:ea:10:59:dd:8b:a6:ca:9a:7c:7e: cc:1d:e4:48:32:a1:57:06:f1:9f:91:45:c5:b7:21: e7:dc:bf:f7:3f:92:62:cf:7f:e0:30:58:d2:ec:ab: 7e:b6:7d:7c:c9:b4:f3:60:83:4e:ed:12:cd:c3:86: dd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:60:C9:78:93:42:86:FE:47:9E:4D:34:F1:51:19:7C:20:86:08:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:41:a6:52:08:bf:1f:89:7e:22:b4:39:84:13:3b:e4:0b:e9: 51:f2:6c:b8:96:22:5f:85:3d:0c:cb:8b:a0:77:65:93:b0:67: 9f:d8:de:16:17:c2:c9:b1:65:5e:14:a3:7a:c8:5a:27:c9:98: 5e:17:91:c0:b0:bd:cf:d3:4d:bc:0f:84:11:32:88:65:a8:14: fd:ba:13:35:b5:ed:e9:50:c7:16:0d:56:ff:b7:41:7d:aa:07: 8f:14:0a:2b:bc:81:05:ea:d5:81:d6:b2:98:d7:c8:c6:55:11: b8:fb:f2:5b:42:b9:e2:d8:12:36:43:2b:9b:d8:63:a4:84:7a: 08:5f:5c:e7:09:72:05:28:af:ef:4e:6a:57:b2:fd:1d:9a:b4: 28:35:49:10:78:75:8b:d6:3b:c3:91:02:94:32:b8:55:d3:39: 47:8d:6e:41:5b:71:4e:ec:6d:4c:af:c9:a4:41:57:54:b9:19: b9:90:7e:cd:26:08:6f:2a:43:f6:95:76:c7:2f:55:bc:15:b5: 8c:84:90:d4:c0:6c:ef:62:70:37:09:21:52:22:b6:b6:5b:65: 70:01:c7:ac:19:3d:0e:ac:59:21:53:b3:20:68:72:1e:d0:8b: 99:a4:09:b1:52:71:af:84:08:24:27:65:ce:5e:3a:71:5f:41: 95:f8:e8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N759HCmPh7s3n0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MTczMzhmMjctOWJkMi00MDA5LWE0NTMtMzhjYzIzNTM4ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLBuXcD33SPEuDeazUWRBhoPy4j6xCNoGim0 Kemn7bDN4n6nU3FVR6GJn7aj8mfoW/PPlhPktS7aZ7xzu0IrvTnFwUuH1VxlMJp5 F34yT3RyGdCSB1f3dZK8hcjrdcmek9dpTxI5cIBbqkBAEvyWW+UR2yQsin4gqgA3 IFBEQ7NbhhTqh4S4+lZRgvI6bnL+apqUVF8qjyzirKq9SrVfnXlNjsSn8FNjnol1 ugsBEEME0bxcZIWyXbSnuCJws2hWJL9WIZ5RyeoQWd2LpsqafH7MHeRIMqFXBvGf kUXFtyHn3L/3P5Jiz3/gMFjS7Kt+tn18ybTzYINO7RLNw4bduwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhgyXiTQob+R55NNPFRGXwghgh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMDQyMjBkMzMtYWE5NC0z ZTJmLTk2OGUtZTM4NGQyYmY5MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxBplIIvx+JfiK0OYQTO+QL6VHybLiWIl+FPQzLi6B3ZZOwZ5/Y3hYX wsmxZV4Uo3rIWifJmF4XkcCwvc/TTbwPhBEyiGWoFP26EzW17elQxxYNVv+3QX2q B48UCiu8gQXq1YHWspjXyMZVEbj78ltCueLYEjZDK5vYY6SEeghfXOcJcgUor+9O aley/R2atCg1SRB4dYvWO8ORApQyuFXTOUeNbkFbcU7sbUyvyaRBV1S5GbmQfs0m CG8qQ/aVdscvVbwVtYyEkNTAbO9icDcJIVIitrZbZXABx6wZPQ6sWSFTsyBoch7Q i5mkCbFSca+ECCQnZc5eOnFfQZX46B8= -----END CERTIFICATE-----Generated at Fri Jul 24 19:50:16 2026 by rpki-client