$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/860b2f2f-9923-356c-9ec9-b029a80aba79.roa File: 860b2f2f-9923-356c-9ec9-b029a80aba79.roa (raw, json) Hash identifier: ifGCXVhqFIWG/kV9utjFKjC68OriDXyDzLQTLfRp06g= Subject key identifier: 3B:F6:BD:C5:86:2B:1C:EE:5C:BC:7E:A9:CE:C4:F9:09:1C:B5:EB:9D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E8C8A42A882241646E9A1E500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/860b2f2f-9923-356c-9ec9-b029a80aba79.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 11404 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:42:a8:82:24:16:46:e9:a1:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=de5e25a4-821e-4112-bd99-8309fc3fd8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:e7:b9:de:ba:17:f0:af:d8:0b:1d:fe:8d: 8f:f7:e6:e0:16:49:ed:4b:a4:63:44:ea:d2:3e:90: 84:11:59:a6:1e:eb:71:5e:f4:42:8f:38:32:d6:b3: 23:29:1d:64:b1:51:ac:7a:85:16:cf:07:88:0d:63: 52:ea:2e:b7:ca:78:c4:c1:af:b3:2f:34:eb:de:c0: 57:1d:64:78:54:a2:5c:3e:c6:9e:6b:ec:ae:58:26: aa:35:f3:74:f8:b8:cc:a2:62:fa:8e:1a:b5:ae:e6: 65:10:d1:a1:89:d4:e2:4b:94:24:c7:51:25:50:d4: 53:3c:c9:9c:55:25:0c:ff:ad:ea:45:24:f2:b0:0f: 6f:63:5a:12:3c:86:98:2b:6a:de:e3:fa:9e:37:18: d6:9b:fa:34:5b:58:84:d1:64:80:ab:12:f1:6e:ca: 0e:cd:69:c6:3c:37:5f:cd:10:f3:27:e0:c2:fe:9d: 03:9d:c4:33:0f:41:e4:14:6a:fa:bf:65:eb:35:6c: cb:f9:7c:ee:6f:3b:81:14:bc:b2:91:20:d1:c1:f8: 6e:bc:e9:eb:bf:32:04:24:7f:93:81:6f:75:73:bd: 5e:94:fe:32:d8:41:d8:a5:cf:d7:f0:d8:14:9c:24: 15:e3:a3:fa:cb:d8:d1:92:9f:11:b7:89:8f:ef:bf: 3d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F6:BD:C5:86:2B:1C:EE:5C:BC:7E:A9:CE:C4:F9:09:1C:B5:EB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/860b2f2f-9923-356c-9ec9-b029a80aba79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f4:3f:f7:3f:cc:f9:43:de:c1:cd:e7:c4:41:d1:fd:72:ef: 94:e0:5f:da:23:7b:b8:29:ab:e2:58:d7:2f:bf:c2:8b:09:de: 05:10:28:e0:44:e7:08:8f:9c:ca:fa:5f:08:b4:82:16:37:30: 7f:93:34:5a:7b:87:e9:a9:85:35:d5:d7:43:ec:bd:52:8f:d1: 49:ec:f4:b4:dc:66:53:05:d5:c2:68:8d:88:85:16:ba:7d:71: 20:50:92:ea:1f:08:1f:29:b4:50:b0:78:89:07:0f:e4:eb:4b: 52:39:3b:3f:a5:02:93:9b:68:00:bd:e8:8d:d7:09:d2:b7:d3: 24:24:77:a6:29:cd:dc:e8:d7:fe:5b:96:30:52:c7:bc:36:68: d3:97:3e:d7:30:a8:77:ff:42:f2:ea:1f:6e:4c:4d:c7:90:86: 62:72:65:aa:5e:2b:68:6f:87:14:9a:00:32:00:ad:31:c5:32: 80:35:28:4a:9b:9f:27:5d:bb:d5:93:ae:d2:23:68:d9:b9:f6: b1:ac:75:83:d2:94:c0:d3:2c:66:09:6a:04:57:7d:5d:15:27: dc:fc:10:1c:1e:98:0a:24:9d:4f:de:38:ba:ab:35:81:97:e2: b2:c9:f4:a6:83:f5:c3:01:69:2e:e5:ea:3c:0e:95:90:94:90: 5c:38:ae:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikKogiQWRumh5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk ZGU1ZTI1YTQtODIxZS00MTEyLWJkOTktODMwOWZjM2ZkOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrDnud66F/Cv2Asd/o2P9+bgFkntS6RjROrS PpCEEVmmHutxXvRCjzgy1rMjKR1ksVGseoUWzweIDWNS6i63ynjEwa+zLzTr3sBX HWR4VKJcPsaea+yuWCaqNfN0+LjMomL6jhq1ruZlENGhidTiS5Qkx1ElUNRTPMmc VSUM/63qRSTysA9vY1oSPIaYK2re4/qeNxjWm/o0W1iE0WSAqxLxbsoOzWnGPDdf zRDzJ+DC/p0DncQzD0HkFGr6v2XrNWzL+XzubzuBFLyykSDRwfhuvOnrvzIEJH+T gW91c71elP4y2EHYpc/X8NgUnCQV46P6y9jRkp8Rt4mP7789+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv2vcWGKxzuXLx+qc7E+QkcteudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODYwYjJmMmYtOTkyMy0z NTZjLTllYzktYjAyOWE4MGFiYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH70P/c/zPlD3sHN58RB0f1y75TgX9oje7gpq+JY1y+/wosJ3gUQKOBE 5wiPnMr6Xwi0ghY3MH+TNFp7h+mphTXV10PsvVKP0Uns9LTcZlMF1cJojYiFFrp9 cSBQkuofCB8ptFCweIkHD+TrS1I5Oz+lApObaAC96I3XCdK30yQkd6Ypzdzo1/5b ljBSx7w2aNOXPtcwqHf/QvLqH25MTceQhmJyZapeK2hvhxSaADIArTHFMoA1KEqb nyddu9WTrtIjaNm59rGsdYPSlMDTLGYJagRXfV0VJ9z8EBwemAoknU/eOLqrNYGX 4rLJ9KaD9cMBaS7l6jwOlZCUkFw4rpo= -----END CERTIFICATE-----Generated at Fri Jul 24 00:44:35 2026 by rpki-client