$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa File: 2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa (raw, json) Hash identifier: LMZDBl4fhv9RwWPe28c3wK+Oyx9fWyKl9o4FThFfcYE= Subject key identifier: CD:66:29:0D:FB:64:26:EC:AA:50:8C:50:7A:13:7E:BC:05:F1:AB:99 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584E640F636D765A8A69E210BE80 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 21928 IP address blocks: 168.73.0.0/16 maxlen: 24 170.206.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:63:6d:76:5a:8a:69:e2:10:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=9b4ec3f2-9032-4352-b499-c3b67186f919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:fa:03:e9:1a:1b:dc:34:eb:44:8a:e9:73: 1e:f9:60:94:82:98:92:d3:86:21:1b:4f:56:2f:85: ac:22:16:f1:b8:49:5e:e7:13:f3:7c:f0:42:90:4d: 18:ae:0e:89:48:d6:a3:6a:9f:4e:2c:b3:b5:7d:79: 72:47:b5:77:aa:f7:0f:0d:5a:77:d1:e5:aa:b6:5c: e7:99:e1:5d:d8:4a:75:6a:7a:23:f2:27:5e:e8:97: 4c:1d:e4:ff:c7:92:dc:2b:0d:48:41:b5:53:8f:0d: 53:09:8f:59:cf:37:0c:88:63:77:57:44:a8:6b:4a: d6:48:fe:b2:f1:ba:09:d9:d5:43:5d:4a:49:42:13: 23:a4:ed:18:c6:24:90:03:18:b5:e0:d9:03:1e:32: f4:9a:ea:85:95:72:d5:c6:64:9b:4f:51:06:49:24: f9:eb:11:35:30:1e:48:09:dc:32:8e:2d:9a:84:5a: db:32:f1:65:1d:e5:f7:d4:ef:d6:ec:53:a5:91:73: 35:2c:33:ac:ad:7e:1d:2b:2a:a8:1f:23:61:b1:b5: 44:20:d7:e8:74:74:06:41:61:cc:9d:65:73:09:f7: 0c:37:20:ba:6d:f4:34:bb:8a:e1:4f:f0:e6:47:32: 5f:88:61:e4:75:01:4e:f6:bf:58:22:46:76:81:f7: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:66:29:0D:FB:64:26:EC:AA:50:8C:50:7A:13:7E:BC:05:F1:AB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2990e8c8-23ad-3fe2-a4c6-de7072c1fa54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 168.73.0.0/16 170.206.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6b:f7:ff:eb:fc:38:a0:80:95:84:7c:56:8d:76:b9:05:93: 77:19:9b:43:56:89:77:72:b8:72:44:2f:1d:71:e1:db:b7:ac: 21:eb:c1:90:30:44:53:91:85:f2:da:57:07:38:8e:30:10:50: 9f:77:05:ad:ea:81:13:a3:1e:77:33:2b:31:ef:37:5c:0d:80: b8:da:01:b0:b1:09:ab:e1:a7:95:0e:fb:2b:2a:4d:6b:85:89: 79:da:e6:24:7c:09:b3:ac:cb:9d:d2:84:14:a6:d1:ee:aa:c0: 6e:ad:e0:12:81:9c:4d:7e:1c:39:ee:47:e8:c4:2e:c4:91:50: a0:8f:55:32:0d:1c:21:ec:29:78:a6:8f:cb:00:5d:ae:64:8b: 34:06:ba:53:60:23:1d:50:1c:2a:34:78:f5:e0:09:77:57:d6: 3f:76:c0:06:a3:0e:93:c5:46:21:2e:53:b0:35:43:91:c2:dc: e6:b9:12:2d:65:80:7b:51:b2:36:c7:4d:58:f7:ff:68:d7:fd: 51:b6:19:04:38:ed:3a:ae:7a:15:ba:6a:f4:a6:a9:d7:e6:9c: 8b:02:e9:a9:e8:21:f3:57:e2:51:9c:f1:64:90:b6:75:1d:0b: d2:0f:0b:46:67:c8:9b:04:3a:f5:03:61:bf:fa:a8:81:91:fc: 05:da:8c:71 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE5kD2NtdlqKaeIQvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk OWI0ZWMzZjItOTAzMi00MzUyLWI0OTktYzNiNjcxODZmOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltr6A+kaG9w060SK6XMe+WCUgpiS04YhG09W L4WsIhbxuEle5xPzfPBCkE0Yrg6JSNajap9OLLO1fXlyR7V3qvcPDVp30eWqtlzn meFd2Ep1anoj8ide6JdMHeT/x5LcKw1IQbVTjw1TCY9ZzzcMiGN3V0Soa0rWSP6y 8boJ2dVDXUpJQhMjpO0YxiSQAxi14NkDHjL0muqFlXLVxmSbT1EGSST56xE1MB5I Cdwyji2ahFrbMvFlHeX31O/W7FOlkXM1LDOsrX4dKyqoHyNhsbVEINfodHQGQWHM nWVzCfcMNyC6bfQ0u4rhT/DmRzJfiGHkdQFO9r9YIkZ2gfeoSwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFM1mKQ37ZCbsqlCMUHoTfrwF8auZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMjk5MGU4YzgtMjNhZC0z ZmUyLWE0YzYtZGU3MDcyYzFmYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAqEkDAwCq zjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCHa/f/6/w4oICVhHxWjXa5BZN3GZtDVol3crhyRC8dceHbt6wh 68GQMERTkYXy2lcHOI4wEFCfdwWt6oETox53Mysx7zdcDYC42gGwsQmr4aeVDvsr Kk1rhYl52uYkfAmzrMud0oQUptHuqsBureASgZxNfhw57kfoxC7EkVCgj1UyDRwh 7Cl4po/LAF2uZIs0BrpTYCMdUBwqNHj14Al3V9Y/dsAGow6TxUYhLlOwNUORwtzm uRItZYB7UbI2x01Y9/9o1/1RthkEOO06rnoVumr0pqnX5pyLAump6CHzV+JRnPFk kLZ1HQvSDwtGZ8ibBDr1A2G/+qiBkfwF2oxx -----END CERTIFICATE-----Generated at Fri Jul 24 13:59:59 2026 by rpki-client