$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa File: afb5daae-194e-3c70-a1c7-61e5faf147c0.roa (raw, json) Hash identifier: tP+R5JOw4r2ShW+MOqHATXtdLMdkAaujQzKexdETliI= Subject key identifier: 0C:EE:BC:44:38:10:3F:17:56:F0:79:FE:F6:A8:2E:F4:88:57:49:9E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B946D15DEDBCA8B3D776420 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 209.55.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:6d:15:de:db:ca:8b:3d:77:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=a1810485-4c75-4942-890b-96b6a38ae2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:73:ff:ea:eb:95:26:1f:81:c1:15:c9:9e: 8f:e6:85:3b:5a:45:aa:d9:1d:01:25:c7:7a:e3:6c: ff:f6:c0:46:a8:da:b7:d7:70:9c:5a:33:05:0f:78: 78:1b:37:ad:8f:df:f0:9b:f4:56:11:21:43:31:c6: cd:ae:dd:aa:f0:64:3b:20:25:a4:f9:fd:df:69:34: 86:40:f8:dd:49:46:f5:d6:37:97:7f:8e:0a:f9:9c: 57:3e:2e:28:57:0b:4a:17:ae:ec:77:69:49:6c:b8: 4d:e2:cf:37:3a:6a:54:4d:f2:02:ba:bf:68:08:76: ae:89:34:59:14:ba:5f:0f:4e:25:26:ea:29:f5:a0: 62:3e:a4:c7:26:dc:60:51:5d:97:f1:c3:11:ac:e1: 72:af:5a:7f:15:15:c1:b9:63:f2:db:ae:07:4d:26: a3:21:03:db:c2:e7:dd:62:7c:7e:29:b8:32:c9:c8: 62:cb:f7:15:be:f8:48:1c:57:62:e5:4d:a2:1c:c3: 26:78:18:ce:05:3c:1f:c9:5e:df:92:db:15:f2:d8: 86:16:66:3a:6c:33:6f:cc:8e:fe:6a:82:8d:6b:31: 51:d3:35:fe:82:24:05:ac:29:97:48:98:7c:fc:61: 98:9a:5a:52:66:c9:ae:58:e6:1e:ca:94:9d:56:c7: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:BC:44:38:10:3F:17:56:F0:79:FE:F6:A8:2E:F4:88:57:49:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:20:9d:4f:5c:f7:f4:de:16:4b:d2:b8:77:49:5b:c4:bd:5f: bb:2b:ac:c7:cc:28:02:da:6c:98:a8:1a:de:4d:bd:e5:f9:30: 1c:52:bc:d6:9e:b2:25:e5:de:41:90:52:cb:fd:7b:a7:f4:d0: d4:93:5e:45:75:39:cd:76:05:03:cc:8b:6d:c0:4f:9c:bc:72: 7a:b0:8d:48:42:8f:6e:97:4e:b9:d3:3c:e2:6d:67:db:e6:71: d9:00:e8:53:d4:b3:9d:a9:d9:3b:5d:48:29:e3:77:53:4d:e9: dd:8f:6e:2f:bf:f1:54:bc:b7:91:9b:6d:12:da:c2:bb:c5:f1: ce:ed:b3:35:a8:62:c2:05:47:2f:9b:df:78:44:e8:10:8f:d5: 86:f3:35:70:11:f2:a8:92:bd:2e:ee:62:07:8e:18:f2:9b:a1: 99:d5:aa:a8:95:64:0c:3b:fa:86:be:a3:c2:7d:c1:e9:b0:1e: 8e:c3:19:46:8b:de:40:35:2e:6b:9e:7b:f9:c7:74:4d:63:63: 15:7f:f5:83:fd:d0:be:4e:d2:6e:99:35:32:87:24:34:dc:41: 1f:3f:24:bc:47:8c:ae:b9:22:ff:8a:98:7e:f9:3b:2c:f9:37: 2b:d0:9c:20:47:fb:5b:0d:ec:db:bb:90:32:34:3d:33:60:02: b8:d2:38:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lG0V3tvKiz13ZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk YTE4MTA0ODUtNGM3NS00OTQyLTg5MGItOTZiNmEzOGFlMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla1z/+rrlSYfgcEVyZ6P5oU7WkWq2R0BJcd6 42z/9sBGqNq313CcWjMFD3h4Gzetj9/wm/RWESFDMcbNrt2q8GQ7ICWk+f3faTSG QPjdSUb11jeXf44K+ZxXPi4oVwtKF67sd2lJbLhN4s83OmpUTfICur9oCHauiTRZ FLpfD04lJuop9aBiPqTHJtxgUV2X8cMRrOFyr1p/FRXBuWPy264HTSajIQPbwufd Ynx+Kbgyychiy/cVvvhIHFdi5U2iHMMmeBjOBTwfyV7fktsV8tiGFmY6bDNvzI7+ aoKNazFR0zX+giQFrCmXSJh8/GGYmlpSZsmuWOYeypSdVsf6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzuvEQ4ED8XVvB5/vaoLvSIV0meMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWZiNWRhYWUtMTk0ZS0z YzcwLWExYzctNjFlNWZhZjE0N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcgnU9c9/TeFkvSuHdJW8S9X7srrMfMKALabJioGt5NveX5MBxSvNae siXl3kGQUsv9e6f00NSTXkV1Oc12BQPMi23AT5y8cnqwjUhCj26XTrnTPOJtZ9vm cdkA6FPUs52p2TtdSCnjd1NN6d2Pbi+/8VS8t5GbbRLawrvF8c7tszWoYsIFRy+b 33hE6BCP1YbzNXAR8qiSvS7uYgeOGPKboZnVqqiVZAw7+oa+o8J9wemwHo7DGUaL 3kA1Lmuee/nHdE1jYxV/9YP90L5O0m6ZNTKHJDTcQR8/JLxHjK65Iv+KmH75Oyz5 NyvQnCBH+1sN7Nu7kDI0PTNgArjSOH4= -----END CERTIFICATE-----Generated at Fri Jul 24 16:19:45 2026 by rpki-client