$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa File: 9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa (raw, json) Hash identifier: Qk+oxZQQc4sBs6FMhLMWpB5aoRc8QlZHhkzCd0HWdLA= Subject key identifier: B5:35:A8:29:93:CB:D3:93:CE:D2:11:83:0C:DF:B5:07:3E:51:E6:75 Certificate issuer: /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Certificate serial: 010D0C9F4328584E6F3A4CE25395A8DDEDA9CD80 Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 32604 IP address blocks: 208.91.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:4c:e2:53:95:a8:dd:ed:a9:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=6945bcad-eb09-43f1-8bbe-51feb5d5234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c7:e0:ba:26:e8:9a:7b:1b:8e:51:25:f2:89: ba:63:07:78:ed:6f:09:ac:b8:a4:90:44:cd:39:72: bc:20:1a:13:96:98:8b:6e:69:fd:43:66:4c:89:d8: 2a:cd:42:6f:df:7a:25:98:87:17:f0:09:f0:78:97: 55:d1:b3:30:05:02:15:c2:1d:b2:ee:5f:8a:f6:7c: 48:a7:2c:db:87:0e:0f:f6:3e:22:64:28:80:46:ed: dc:39:b0:89:ed:c3:26:d3:8c:90:85:eb:38:cd:04: 56:d8:ab:b4:83:37:5d:ec:9e:a5:a3:3f:78:b6:20: 5e:6d:e2:76:b3:d5:e6:50:00:d8:36:b4:79:d6:27: fa:85:aa:e9:95:ef:ae:e7:2e:b3:e6:db:96:bb:f2: f4:ce:ea:64:08:f2:3e:1f:11:fd:1d:56:b2:36:c8: f5:bc:ff:d9:3b:43:bf:2f:28:fc:4b:ed:9e:53:c2: e3:49:e7:72:95:81:32:62:62:bc:2d:b7:63:8e:a5: f4:08:07:73:1b:8f:40:78:ac:d7:c7:fd:79:73:fd: f4:9d:7e:62:e1:0a:a1:9b:a6:f0:9a:29:f2:2d:82: 4a:27:53:be:c5:38:d3:1a:7d:23:78:21:2b:87:c4: a9:be:d8:c4:da:5e:c4:12:bb:dd:57:1f:5a:68:29: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:A8:29:93:CB:D3:93:CE:D2:11:83:0C:DF:B5:07:3E:51:E6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/9f4d11d9-8296-3ce8-94fa-7aa94f2f5b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl X509v3 Authority Key Identifier: keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer sbgp-ipAddrBlock: critical IPv4: 208.91.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ff:21:53:87:58:9e:6b:15:e6:ed:0f:ce:2a:ed:15:d1:ea: d1:c7:d5:3c:f6:b0:c2:e0:3d:69:b9:86:5e:dd:6c:53:e5:0c: 12:7c:68:f4:08:ca:44:0e:b9:fc:e8:d0:c8:25:b0:79:c4:99: af:51:5c:77:e4:36:94:1e:9e:4a:1a:a7:f4:bb:1d:f7:1e:8d: e4:21:d7:e5:e2:3b:e4:fd:b4:bb:90:18:0c:31:13:71:71:49: d1:35:38:96:93:8d:17:18:0f:1d:1a:18:cc:b9:c9:a8:7c:58: 10:e9:8e:e0:e0:5f:b5:4d:64:11:92:43:d3:1d:32:73:95:1e: bc:2c:e7:bb:76:c8:3b:b1:68:3c:4a:5b:c2:e8:d3:dd:ac:5b: 35:93:a7:70:9f:f8:d7:a2:66:69:01:6a:37:b3:0a:1d:f6:06: f8:37:35:1c:93:ff:5e:68:a0:22:43:99:45:4a:53:e0:a6:e6: f7:fe:e6:94:0f:51:28:b1:ee:31:11:a2:f7:26:47:a9:dd:9f: 96:d6:c0:ed:6c:0b:19:6e:02:90:9b:48:f8:79:84:9d:1e:9b: 6b:b7:83:91:a8:f4:04:d8:b4:02:dc:59:c5:de:5d:9a:99:41: 74:19:42:57:5d:3c:db:33:b6:93:af:3e:7f:de:ea:fd:46:4c: 2a:6c:e1:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOkziU5Wo3e2pzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm MTg4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk Njk0NWJjYWQtZWIwOS00M2YxLThiYmUtNTFmZWI1ZDUyMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cfguibomnsbjlEl8om6Ywd47W8JrLikkETN OXK8IBoTlpiLbmn9Q2ZMidgqzUJv33olmIcX8AnweJdV0bMwBQIVwh2y7l+K9nxI pyzbhw4P9j4iZCiARu3cObCJ7cMm04yQhes4zQRW2Ku0gzdd7J6loz94tiBebeJ2 s9XmUADYNrR51if6harple+u5y6z5tuWu/L0zupkCPI+HxH9HVayNsj1vP/ZO0O/ Lyj8S+2eU8LjSedylYEyYmK8LbdjjqX0CAdzG49AeKzXx/15c/30nX5i4Qqhm6bw minyLYJKJ1O+xTjTGn0jeCErh8SpvtjE2l7EErvdVx9aaCkz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU1qCmTy9OTztIRgwzftQc+UeZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvOWY0ZDExZDktODI5Ni0z Y2U4LTk0ZmEtN2FhOTRmMmY1YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw N2QyYmYxODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz/IVOHWJ5rFebtD84q7RXR6tHH1Tz2sMLgPWm5hl7dbFPlDBJ8aPQI ykQOufzo0MglsHnEma9RXHfkNpQenkoap/S7HfcejeQh1+XiO+T9tLuQGAwxE3Fx SdE1OJaTjRcYDx0aGMy5yah8WBDpjuDgX7VNZBGSQ9MdMnOVHrws57t2yDuxaDxK W8Lo092sWzWTp3Cf+NeiZmkBajezCh32Bvg3NRyT/15ooCJDmUVKU+Cm5vf+5pQP USix7jERovcmR6ndn5bWwO1sCxluApCbSPh5hJ0em2u3g5Go9ATYtALcWcXeXZqZ QXQZQlddPNsztpOvPn/e6v1GTCps4as= -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:29 2026 by rpki-client