$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa File: d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa (raw, json) Hash identifier: czthzwvqkqIuDm6E2R1ho1XP7X540H5AIhoS0F3Cjco= Subject key identifier: CF:76:8C:19:B1:17:4A:DA:CF:38:E7:1D:3E:8D:11:2B:87:D2:CA:E0 Certificate issuer: /CN=b2d9b16a-e15f-46c2-a578-0677307787a3 Certificate serial: 010D0C9F4328584E815F8D8C5DD66857FD7D0580 Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 399686 IP address blocks: 172.111.0.0/22 maxlen: 24 172.111.0.0/24 maxlen: 24 172.111.1.0/24 maxlen: 24 172.111.2.0/24 maxlen: 24 172.111.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:8d:8c:5d:d6:68:57:fd:7d:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=3b2bd204-8e54-400b-a80f-b77254007c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:5c:74:05:1e:1f:5f:e3:73:d5:33:32:4a: 1b:b5:d7:1c:69:83:78:a0:50:a8:e2:66:ab:c6:38: 72:52:fb:80:0b:a6:66:f1:e3:f0:e9:c8:ec:c1:a3: a3:79:52:3b:17:7f:7c:96:f3:34:78:ac:fa:83:98: d3:e1:a8:c1:21:3d:b5:e3:0d:e4:b2:80:7a:82:88: 96:8f:8a:fb:f4:15:c6:95:cd:bc:ca:0e:3e:9d:08: 8d:48:84:cf:14:be:ef:96:04:69:32:13:bc:55:8a: c5:9d:7a:e8:4a:cd:53:8e:de:1f:94:24:ae:8b:67: 13:99:b4:88:a2:16:05:0b:d4:1d:a8:b4:9f:e4:a4: de:01:45:4b:e5:03:a8:68:ef:e0:1a:17:87:6b:a6: fe:67:fd:1e:36:7d:92:10:32:f1:00:2d:d1:8c:fb: 52:58:7a:58:d7:53:2f:75:be:7d:8e:9a:f9:36:92: a7:2f:c3:96:82:4c:ae:da:96:32:e7:36:1b:8d:b0: ff:4f:3e:a7:08:92:90:95:c5:b7:79:1f:06:3b:69: e8:94:49:38:47:a8:81:7a:82:37:94:37:04:b4:59: 70:ab:87:82:17:af:df:f1:42:f6:12:81:cb:36:01: f0:14:63:58:4b:6a:5d:d7:74:2d:fa:9b:f1:e9:50: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:76:8C:19:B1:17:4A:DA:CF:38:E7:1D:3E:8D:11:2B:87:D2:CA:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl X509v3 Authority Key Identifier: keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e9:b3:94:36:b6:1c:94:fe:c1:ae:52:61:44:f1:64:b6:a1: 2a:22:7a:d7:54:36:30:c2:d4:44:c0:ec:93:9f:ae:15:03:b6: 9f:12:47:1c:58:dd:26:db:3f:35:b5:f1:81:e2:40:a8:0d:5c: 69:80:ad:de:a0:20:91:8d:1e:c2:6b:f2:44:0f:fa:b2:c7:b7: 6f:85:2e:ee:ac:c8:66:b2:f7:43:ab:aa:51:62:e5:0e:40:7d: 76:0b:df:8f:a5:97:90:52:fd:64:26:6d:5a:5a:83:96:c4:ef: 9a:7c:18:b7:3c:43:a1:64:c7:63:a1:a8:17:6d:6d:c9:c4:a1: c7:00:5c:d0:96:bc:9c:ef:ae:6c:d2:8b:3a:9b:31:1c:28:60: 0e:2f:57:f7:b2:ab:78:2a:65:98:b9:fa:e1:c5:fd:83:7a:0d: dc:b8:ab:5c:c3:69:e3:53:77:61:91:1a:d9:bf:9e:85:e2:af: b3:d0:70:52:01:43:fa:eb:a2:39:1b:5c:00:10:aa:96:8b:7f: 69:95:02:6e:e6:23:bd:31:e5:64:5a:5a:4f:9a:23:40:9c:dd: ca:83:15:1b:38:58:18:66:9b:0e:8d:ad:d0:9f:f4:2c:ed:f9: 9d:cd:f8:3f:fb:ca:5f:62:ee:68:95:4a:34:df:ea:c4:77:79: 10:37:2e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX42MXdZoV/19BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkOWIxNmEtZTE1Zi00NmMyLWE1NzgtMDY3NzMwNzc4 N2EzMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk M2IyYmQyMDQtOGU1NC00MDBiLWE4MGYtYjc3MjU0MDA3YzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCBcdAUeH1/jc9UzMkobtdccaYN4oFCo4mar xjhyUvuAC6Zm8ePw6cjswaOjeVI7F398lvM0eKz6g5jT4ajBIT214w3ksoB6goiW j4r79BXGlc28yg4+nQiNSITPFL7vlgRpMhO8VYrFnXroSs1Tjt4flCSui2cTmbSI ohYFC9QdqLSf5KTeAUVL5QOoaO/gGheHa6b+Z/0eNn2SEDLxAC3RjPtSWHpY11Mv db59jpr5NpKnL8OWgkyu2pYy5zYbjbD/Tz6nCJKQlcW3eR8GO2nolEk4R6iBeoI3 lDcEtFlwq4eCF6/f8UL2EoHLNgHwFGNYS2pd13Qt+pvx6VD8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM92jBmxF0razzjnHT6NESuH0srgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5 YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3MzA3Nzg3YTMvZDdlZTRlNWMtODY1NS0z NmRlLWFjNTMtYzlkOWM5MjA4M2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjJkOWIxNmEtZTE1Zi00NmMyLWE1 NzgtMDY3NzMwNzc4N2EzL2IyZDliMTZhLWUxNWYtNDZjMi1hNTc4LTA2NzczMDc3 ODdhMy5jcmwwHwYDVR0jBBgwFoAUIEpA4zG5OEM/CEYzRRAWpoSxg2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3 MzA3Nzg3YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/ps5Q2thyU/sGuUmFE8WS2oSoietdUNjDC1ETA7JOfrhUDtp8SRxxY 3SbbPzW18YHiQKgNXGmArd6gIJGNHsJr8kQP+rLHt2+FLu6syGay90OrqlFi5Q5A fXYL34+ll5BS/WQmbVpag5bE75p8GLc8Q6Fkx2OhqBdtbcnEoccAXNCWvJzvrmzS izqbMRwoYA4vV/eyq3gqZZi5+uHF/YN6Ddy4q1zDaeNTd2GRGtm/noXir7PQcFIB Q/rrojkbXAAQqpaLf2mVAm7mI70x5WRaWk+aI0Cc3cqDFRs4WBhmmw6NrdCf9Czt +Z3N+D/7yl9i7miVSjTf6sR3eRA3LgI= -----END CERTIFICATE-----Generated at Fri Jul 24 12:16:39 2026 by rpki-client