$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa File: d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa (raw, json) Hash identifier: QctIA7altsrCKyGvzR/aGFcgm7nZZzkqQXNHNvFgKpE= Subject key identifier: 31:85:3B:5A:41:7A:C5:E6:50:DD:F7:A6:50:7A:37:71:5F:77:55:99 Certificate issuer: /CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Certificate serial: 010D0C9F4328584E7E94F58B033B9D1119B83480 Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14907 IP address blocks: 208.80.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f5:8b:03:3b:9d:11:19:b8:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=64888377-cde5-4484-82d2-2c2e55baf970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:ea:06:b3:04:85:ee:0b:a2:06:be:80:55: ad:88:ed:a6:99:2d:01:d4:c1:a9:46:e5:a0:3c:3e: ba:23:d1:df:93:83:59:af:d4:32:b9:f0:28:99:12: e0:01:b7:23:80:58:91:72:2a:24:f6:f8:d7:ec:5a: 38:63:ae:6b:7a:48:74:2b:4b:13:97:58:bb:71:90: 87:c5:5c:bf:89:7c:6f:56:00:ab:b2:3c:df:84:b2: 9c:8f:fc:c7:05:8a:38:b7:62:b3:45:f3:1b:e2:9f: b9:8e:0d:7b:0c:a2:ba:07:2d:d7:c0:82:90:32:43: 9b:07:75:c8:a8:c5:f2:04:de:47:cc:96:27:57:db: a1:33:d1:11:3f:37:d3:39:2e:be:ec:28:42:27:b7: 0b:cb:5d:12:00:c4:e9:43:00:4d:e7:b4:71:37:29: 08:10:53:51:1d:11:f3:00:01:94:84:80:70:9f:99: 60:3d:ca:da:2f:e3:1d:5b:d0:d1:63:b6:fe:09:b0: 68:22:af:40:01:46:09:f1:03:16:61:c7:53:82:95: 54:a2:ed:6c:42:ee:a5:26:05:60:eb:4e:89:ba:73: e6:2f:e5:11:c0:7c:62:ef:46:6b:ef:d7:d7:ca:a2: 6d:82:40:87:65:e0:e2:81:3e:53:82:e5:0c:e3:a9: a3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:85:3B:5A:41:7A:C5:E6:50:DD:F7:A6:50:7A:37:71:5F:77:55:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl X509v3 Authority Key Identifier: keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer sbgp-ipAddrBlock: critical IPv4: 208.80.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6f:1b:2d:5b:45:8f:f5:74:b0:d0:0b:cd:3a:8f:43:58:db: be:cb:c7:b3:7f:06:b9:2f:64:8e:35:8b:5a:9c:d2:3b:04:c6: 32:11:67:b6:8a:93:14:ab:30:86:8f:f1:86:8d:41:e9:0c:a4: 36:3b:ef:33:bb:17:da:3c:b5:c6:7d:d9:23:e9:83:81:59:ef: 13:c4:13:59:ab:15:c7:ac:b9:de:66:a1:f7:57:d4:07:1f:44: f8:f6:bf:e2:ed:14:d5:8e:6b:6a:da:85:1a:59:f8:80:86:eb: 70:64:94:74:17:a0:a5:ad:45:58:72:51:31:df:50:82:d3:75: 60:59:4b:65:03:d4:ca:1a:51:16:5c:23:a1:fc:ea:fd:8e:50: e7:cc:05:df:4b:e9:d0:cf:4b:cf:42:34:03:16:77:ce:e0:1e: b1:89:59:c0:19:57:8b:1b:ca:12:2d:8f:83:4f:b7:44:f9:c5: 38:1a:26:54:87:38:80:e3:e0:83:88:12:f0:76:03:59:b2:5c: 85:3b:41:78:bb:b4:cb:ed:9f:9a:6b:1e:99:45:85:72:8c:3e: b8:ff:04:d8:2a:7c:f0:c4:a9:2d:75:1b:97:04:5e:36:83:7f: 6e:ef:47:e5:e6:4e:31:97:19:83:80:3d:ea:a8:bb:3f:68:33: 8a:68:84:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPWLAzudERm4NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBhZTFjZmYtMzA5Yy00MGQxLTk3NjAtM2E4OWE0ODFl OTk4MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NjQ4ODgzNzctY2RlNS00NDg0LTgyZDItMmMyZTU1YmFmOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwbqBrMEhe4Loga+gFWtiO2mmS0B1MGpRuWg PD66I9Hfk4NZr9QyufAomRLgAbcjgFiRciok9vjX7Fo4Y65rekh0K0sTl1i7cZCH xVy/iXxvVgCrsjzfhLKcj/zHBYo4t2KzRfMb4p+5jg17DKK6By3XwIKQMkObB3XI qMXyBN5HzJYnV9uhM9ERPzfTOS6+7ChCJ7cLy10SAMTpQwBN57RxNykIEFNRHRHz AAGUhIBwn5lgPcraL+MdW9DRY7b+CbBoIq9AAUYJ8QMWYcdTgpVUou1sQu6lJgVg 606JunPmL+URwHxi70Zr79fXyqJtgkCHZeDigT5TguUM46mj/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGFO1pBesXmUN33plB6N3Ffd1WZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFl MWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5YTQ4MWU5OTgvZDY4YzJmZDAtY2RlNi0z Y2QyLThhZmQtYjUwNzgzYTIyMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzBhZTFjZmYtMzA5Yy00MGQxLTk3 NjAtM2E4OWE0ODFlOTk4L2MwYWUxY2ZmLTMwOWMtNDBkMS05NzYwLTNhODlhNDgx ZTk5OC5jcmwwHwYDVR0jBBgwFoAUPVzJ0t/g8RJOCVm/vnWnyTm7EwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFlMWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5 YTQ4MWU5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZvGy1bRY/1dLDQC806j0NY277Lx7N/BrkvZI41i1qc0jsExjIRZ7aK kxSrMIaP8YaNQekMpDY77zO7F9o8tcZ92SPpg4FZ7xPEE1mrFcesud5mofdX1Acf RPj2v+LtFNWOa2rahRpZ+ICG63BklHQXoKWtRVhyUTHfUILTdWBZS2UD1MoaURZc I6H86v2OUOfMBd9L6dDPS89CNAMWd87gHrGJWcAZV4sbyhItj4NPt0T5xTgaJlSH OIDj4IOIEvB2A1myXIU7QXi7tMvtn5prHplFhXKMPrj/BNgqfPDEqS11G5cEXjaD f27vR+XmTjGXGYOAPeqouz9oM4pohCA= -----END CERTIFICATE-----Generated at Fri Jul 24 08:00:39 2026 by rpki-client