$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/c586ccab-130f-3b75-83c3-c6a96397f2ca.roa File: c586ccab-130f-3b75-83c3-c6a96397f2ca.roa (raw, json) Hash identifier: ycXt8Fzfd/CoeJwciRMAmV1ZRZfNgknmy9jDsTVkq18= Subject key identifier: D8:A1:60:38:BE:8B:8D:B4:77:5E:9E:AD:1E:DC:24:F7:8E:5B:E8:0B Certificate issuer: /CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Certificate serial: 010D0C9F4328584E9384FD2356588DB3E3C180C0 Authority key identifier: FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/c586ccab-130f-3b75-83c3-c6a96397f2ca.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 20406 IP address blocks: 204.16.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:fd:23:56:58:8d:b3:e3:c1:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=a432e21b-7874-42c8-bfc6-eec37c892a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:42:2a:1f:b8:f5:ad:70:0e:ab:8f:e3:7a:2e: cc:05:cb:07:ea:80:01:ec:d2:d0:c3:a7:8c:99:ad: f7:b6:6d:d6:0b:a2:31:d1:3a:3a:f4:ea:ff:b4:2e: c0:2e:e0:6e:40:db:6d:cf:15:0d:8b:3b:30:b6:53: a9:8b:05:45:e8:ae:74:be:cc:0c:5f:85:9a:ba:27: c7:9e:59:44:30:c1:c9:c2:b3:5a:55:35:7b:81:c8: 28:41:28:bb:50:38:8c:38:5c:40:b7:77:47:92:09: 3b:7b:53:e2:2a:1c:a0:3d:be:4d:a0:5b:fe:5c:c6: c6:c9:38:76:77:03:f4:04:bd:e8:af:ad:74:dc:81: a7:97:8e:54:11:e9:c2:4b:12:37:f2:0d:be:60:c6: 88:a5:b3:65:82:21:ec:1f:da:92:a3:5f:76:a9:ca: 0e:38:09:f2:fb:b9:b2:e2:e7:33:8f:f7:5a:5b:a7: 23:46:46:e5:53:d8:da:62:ec:77:6b:84:8c:3c:a6: b9:ea:00:9d:14:5b:50:e1:46:c0:49:ae:1f:4d:d4: 6c:73:45:c8:61:9d:c4:22:dd:70:84:a9:fd:c3:0e: 65:1e:a9:22:76:08:7b:3a:d8:69:cc:91:34:31:a7: 29:15:de:09:90:0a:61:67:10:15:d6:f3:ab:05:bb: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A1:60:38:BE:8B:8D:B4:77:5E:9E:AD:1E:DC:24:F7:8E:5B:E8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/c586ccab-130f-3b75-83c3-c6a96397f2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl X509v3 Authority Key Identifier: keyid:FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer sbgp-ipAddrBlock: critical IPv4: 204.16.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:5c:69:74:32:f3:3a:de:a8:0b:f8:c8:17:6f:83:ab:1b:d1: 30:24:bc:6a:35:ec:1c:e0:cf:4a:01:90:d5:6a:91:95:2d:44: d6:a1:a8:bb:bd:c8:c4:ae:62:b9:a0:ba:aa:cd:f8:8b:2e:cf: 39:e3:42:6b:00:11:31:e2:14:02:1b:33:7e:d5:64:bd:df:12: 70:e1:3b:a0:93:d2:7c:ef:25:72:88:59:08:46:94:fa:d8:ab: dc:49:ab:d8:f2:94:98:9e:ef:39:0b:f7:b0:54:0e:62:ef:14: 6b:72:ca:9c:b3:69:cc:54:1c:62:a7:f3:bf:17:0f:64:71:11: 1a:5f:96:9c:5b:b0:fa:70:09:73:99:cf:c2:fe:cd:2b:a0:7f: 37:9d:9c:8c:01:ca:df:be:94:fd:97:5d:53:6f:8a:ca:45:38: 5c:3a:bd:45:d1:6c:b8:de:96:a0:34:9d:35:b5:a2:ee:72:b8: b2:a3:2a:bb:5a:44:3a:f7:18:29:23:fd:e5:54:19:21:51:5c: 24:c5:3b:43:fb:60:05:66:f9:28:12:55:ff:6d:64:0a:71:08: 3a:07:1e:46:8b:64:a2:6e:70:3f:a7:cf:da:75:65:eb:d3:8b: b3:67:78:27:df:29:71:8f:b5:ef:5c:25:fc:b5:7f:14:83:e7: 08:e6:97:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThP0jVliNs+PBgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmVkMjgzMDMtODRmOC00ZWEwLTgyNTItZjdlZTFmNDIw NjUyMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk YTQzMmUyMWItNzg3NC00MmM4LWJmYzYtZWVjMzdjODkyYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEIqH7j1rXAOq4/jei7MBcsH6oAB7NLQw6eM ma33tm3WC6Ix0To69Or/tC7ALuBuQNttzxUNizswtlOpiwVF6K50vswMX4WauifH nllEMMHJwrNaVTV7gcgoQSi7UDiMOFxAt3dHkgk7e1PiKhygPb5NoFv+XMbGyTh2 dwP0BL3or6103IGnl45UEenCSxI38g2+YMaIpbNlgiHsH9qSo192qcoOOAny+7my 4uczj/daW6cjRkblU9jaYux3a4SMPKa56gCdFFtQ4UbASa4fTdRsc0XIYZ3EIt1w hKn9ww5lHqkidgh7OthpzJE0MacpFd4JkAphZxAV1vOrBbsQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNihYDi+i420d16erR7cJPeOW+gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZWQy ODMwMy04NGY4LTRlYTAtODI1Mi1mN2VlMWY0MjA2NTIvYzU4NmNjYWItMTMwZi0z Yjc1LTgzYzMtYzZhOTYzOTdmMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmVkMjgzMDMtODRmOC00ZWEwLTgy NTItZjdlZTFmNDIwNjUyLzJlZDI4MzAzLTg0ZjgtNGVhMC04MjUyLWY3ZWUxZjQy MDY1Mi5jcmwwHwYDVR0jBBgwFoAU+3GIe86h0LFmM8LgJtyftxWxEDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZWQyODMwMy04NGY4LTRlYTAtODI1Mi1mN2Vl MWY0MjA2NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlcaXQy8zreqAv4yBdvg6sb0TAkvGo17Bzgz0oBkNVqkZUtRNahqLu9 yMSuYrmguqrN+IsuzznjQmsAETHiFAIbM37VZL3fEnDhO6CT0nzvJXKIWQhGlPrY q9xJq9jylJie7zkL97BUDmLvFGtyypyzacxUHGKn878XD2RxERpflpxbsPpwCXOZ z8L+zSugfzednIwByt++lP2XXVNvispFOFw6vUXRbLjelqA0nTW1ou5yuLKjKrta RDr3GCkj/eVUGSFRXCTFO0P7YAVm+SgSVf9tZApxCDoHHkaLZKJucD+nz9p1ZevT i7NneCffKXGPte9cJfy1fxSD5wjmlzc= -----END CERTIFICATE-----Generated at Fri Jul 24 22:03:19 2026 by rpki-client