$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/30dd5aed-5c36-3405-a254-bd476d579117.roa File: 30dd5aed-5c36-3405-a254-bd476d579117.roa (raw, json) Hash identifier: S6/2hrGO+2BjQ2d3LemeIXdA8nrmNnFEY4hDeAnjGhA= Subject key identifier: A1:5D:37:E3:0A:55:2D:04:5D:CD:80:22:11:B1:C5:83:34:99:7D:B5 Certificate issuer: /CN=f509b96c-10eb-4731-ae65-8d698aade657 Certificate serial: 010D0C9F4328584E991A53A93E67DD20514E0B80 Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/30dd5aed-5c36-3405-a254-bd476d579117.roa Signing time: Thu 23 Jul 2026 21:00:11 +0000 ROA not before: Thu 23 Jul 2026 21:00:11 +0000 ROA not after: Wed 21 Oct 2026 21:00:11 +0000 asID: 39944 IP address blocks: 208.66.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:1a:53:a9:3e:67:dd:20:51:4e:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657 Validity Not Before: Jul 23 21:00:11 2026 GMT Not After : Oct 21 21:00:11 2026 GMT Subject: CN=5d6ab94d-78a7-49f9-a02a-00dea3bbb44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:e2:ed:2d:0d:79:c4:94:46:92:9b:fd:c4: 6e:78:91:2d:d6:56:8d:7c:16:45:67:6c:01:c9:69: 58:05:af:a7:76:f1:7d:1f:d1:87:c2:3a:d5:1d:2d: 34:05:71:d3:0a:b2:1f:69:32:c9:41:75:a7:b3:51: 6b:ba:91:8f:0b:40:21:88:f0:3a:a3:c2:7d:cb:63: 21:65:c5:90:aa:dd:37:7a:23:07:9b:3f:b9:ac:5a: 50:b7:a6:b4:39:18:c0:4b:93:ce:46:4a:4f:2b:d7: 7e:80:54:74:b3:5a:ae:c2:8e:03:b8:e4:6b:7f:2a: db:69:fb:5b:45:42:2c:b6:6b:17:39:bc:d5:0a:c9: 0c:4e:59:2d:28:22:13:fc:a9:bd:30:c8:6d:8e:dc: 11:c5:5a:9f:fc:24:71:30:35:aa:2c:1c:89:b5:65: ee:1b:e4:8c:ca:8d:29:e2:83:e0:5d:6d:bb:dc:58: 71:c8:e1:f1:20:69:65:d9:80:f9:d0:45:81:95:cf: 6f:a5:42:75:02:49:c6:75:07:dd:af:04:fe:ac:68: 6c:48:71:8b:c4:ab:69:c9:c8:06:4b:56:00:54:34: 06:cc:01:7a:9c:48:78:64:89:e4:18:97:e2:49:35: a5:bd:7c:8a:67:17:f4:a0:f3:0a:35:1e:16:f6:49: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:37:E3:0A:55:2D:04:5D:CD:80:22:11:B1:C5:83:34:99:7D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/30dd5aed-5c36-3405-a254-bd476d579117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl X509v3 Authority Key Identifier: keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer sbgp-ipAddrBlock: critical IPv4: 208.66.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1b:12:20:a6:02:5f:64:f3:a8:c9:af:2f:4e:39:7a:11:74: 66:66:f1:09:05:92:4e:36:e8:7c:04:08:7b:fb:0f:5e:de:23: 2d:da:88:ee:d3:f5:14:75:38:d1:28:1f:ab:55:3c:79:09:2f: 9c:8a:c9:3a:04:5e:7f:b5:dc:74:44:93:a6:ca:a6:3e:dd:41: 6f:f1:f2:32:dc:c9:df:6a:db:c5:b9:3a:35:95:2e:72:07:4c: 43:f9:8f:5c:9b:9f:16:3f:31:66:a6:dd:8a:64:c4:00:08:b5: 58:32:1e:cd:12:41:90:0f:c7:59:06:71:76:91:ae:ff:3f:0a: 66:f6:28:d4:50:cb:50:08:9a:cd:94:15:38:53:87:b8:77:a2: 00:e0:7f:73:4c:89:fd:f1:31:a0:5d:a3:44:3d:2b:18:3c:22: 97:4c:d4:a1:00:37:70:f5:48:5d:1c:2e:cc:c1:b0:e2:e2:83: 49:10:62:8d:2b:a6:b3:fc:62:74:a3:96:7e:9c:f9:ed:bd:4f: 77:f5:36:24:bf:9f:ea:f6:38:b8:39:46:00:38:b8:f6:ba:38: 08:80:c4:1c:94:c1:02:18:a4:f6:53:ab:72:bd:c5:c8:bb:c4: 7a:02:0f:6b:58:ab:2d:6c:03:37:22:b2:4e:46:95:4d:23:68: af:24:80:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ZGlOpPmfdIFFOC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUwOWI5NmMtMTBlYi00NzMxLWFlNjUtOGQ2OThhYWRl NjU3MB4XDTI2MDcyMzIxMDAxMVoXDTI2MTAyMTIxMDAxMVowLzEtMCsGA1UEAxMk NWQ2YWI5NGQtNzhhNy00OWY5LWEwMmEtMDBkZWEzYmJiNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIPi7S0NecSURpKb/cRueJEt1laNfBZFZ2wB yWlYBa+ndvF9H9GHwjrVHS00BXHTCrIfaTLJQXWns1FrupGPC0AhiPA6o8J9y2Mh ZcWQqt03eiMHmz+5rFpQt6a0ORjAS5PORkpPK9d+gFR0s1quwo4DuORrfyrbaftb RUIstmsXObzVCskMTlktKCIT/Km9MMhtjtwRxVqf/CRxMDWqLByJtWXuG+SMyo0p 4oPgXW273FhxyOHxIGll2YD50EWBlc9vpUJ1AknGdQfdrwT+rGhsSHGLxKtpycgG S1YAVDQGzAF6nEh4ZInkGJfiSTWlvXyKZxf0oPMKNR4W9knIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFdN+MKVS0EXc2AIhGxxYM0mX21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5 Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5OGFhZGU2NTcvMzBkZDVhZWQtNWMzNi0z NDA1LWEyNTQtYmQ0NzZkNTc5MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjUwOWI5NmMtMTBlYi00NzMxLWFl NjUtOGQ2OThhYWRlNjU3L2Y1MDliOTZjLTEwZWItNDczMS1hZTY1LThkNjk4YWFk ZTY1Ny5jcmwwHwYDVR0jBBgwFoAUiPEsKTw08jE1u7qyI9SATNUFYowwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5 OGFhZGU2NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ELmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYbEiCmAl9k86jJry9OOXoRdGZm8QkFkk426HwECHv7D17eIy3aiO7T 9RR1ONEoH6tVPHkJL5yKyToEXn+13HREk6bKpj7dQW/x8jLcyd9q28W5OjWVLnIH TEP5j1ybnxY/MWam3YpkxAAItVgyHs0SQZAPx1kGcXaRrv8/Cmb2KNRQy1AIms2U FThTh7h3ogDgf3NMif3xMaBdo0Q9Kxg8IpdM1KEAN3D1SF0cLszBsOLig0kQYo0r prP8YnSjln6c+e29T3f1NiS/n+r2OLg5RgA4uPa6OAiAxByUwQIYpPZTq3K9xci7 xHoCD2tYqy1sAzcisk5GlU0jaK8kgNM= -----END CERTIFICATE-----Generated at Fri Jul 24 16:28:22 2026 by rpki-client