$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa File: ac545d8c-567f-3bd2-9de4-897132765b2a.roa (raw, json) Hash identifier: XtgxHo+773rRQpb2mmOLPwfvYuBk6FMnjy9UUlVOiQ8= Subject key identifier: 2C:E8:D7:0E:E2:72:29:30:0A:E5:D5:8E:77:1A:6A:BF:D1:5D:E5:2D Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F4328584E5BAF56C74D7CDE2F11774A20 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 22135 IP address blocks: 173.242.8.0/24 maxlen: 24 173.242.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:56:c7:4d:7c:de:2f:11:77:4a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=b0293b9f-d3de-4de7-a107-0192b9335be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9a:c1:a9:13:c1:cc:50:c1:06:b6:3e:80:f0: 85:42:5c:0f:7d:fe:46:f1:b0:2a:fb:7a:b7:ba:53: c1:79:02:d5:32:17:ee:8e:b8:fa:4c:15:74:b0:67: 01:e8:b8:3c:c6:ce:80:cd:0b:1f:b2:c8:4d:70:21: 45:37:c0:8b:f2:c7:10:47:61:7a:78:2a:bc:22:99: 58:07:10:58:e2:25:70:fb:79:18:e9:24:80:2b:03: d7:a1:11:05:ea:47:34:a0:95:a8:cd:bd:60:c4:ab: 69:d1:de:6b:04:1d:db:79:8e:e8:19:4e:75:00:83: f0:e7:fe:1b:c0:7c:28:74:6a:d3:6f:9c:0a:30:50: be:43:7a:e3:35:13:55:f5:df:64:8d:18:09:43:10: 19:00:69:a5:61:7e:b9:47:33:a0:a9:28:c0:00:4c: be:3d:5a:fc:71:c5:fb:f6:f0:c1:b7:8c:ce:ad:ff: 36:39:e9:35:38:9e:2a:8b:af:32:49:ed:5d:5a:82: 25:de:77:bb:14:58:9c:1f:93:74:6f:4b:5d:7e:8e: 51:db:e3:78:b1:46:e0:f3:89:c7:8f:80:31:3c:cc: 19:b3:8b:25:d9:42:5b:78:c4:d9:74:2d:91:b5:e0: 45:d5:a3:2b:c2:2d:e8:6c:97:17:92:63:db:71:ee: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E8:D7:0E:E2:72:29:30:0A:E5:D5:8E:77:1A:6A:BF:D1:5D:E5:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a9:ee:44:2c:f9:44:7a:74:b0:0b:0f:81:3b:cc:e7:cf:47: e4:bf:e5:b1:d1:d7:2d:82:29:fd:2a:f7:d7:bd:82:66:cf:64: d1:7b:65:60:f2:3c:f8:ae:03:a2:a4:24:87:53:bc:b7:7f:66: 34:79:3d:11:6d:88:a5:01:95:7a:2c:c9:b0:1e:94:5d:02:f7: 17:ee:da:c7:cf:cc:b8:fa:3b:e3:79:80:5a:c6:c2:31:83:40: bf:c2:af:a8:ca:16:86:e5:27:fb:a6:c5:64:90:dc:43:49:45: c2:db:dc:0e:b0:8d:f0:69:74:a2:d8:8d:38:ef:cb:da:92:1d: fd:81:94:47:fe:e4:89:8d:37:72:a6:eb:ad:f2:a3:96:a5:81: d5:3e:d6:87:40:73:33:07:3d:55:d0:d2:0e:fa:12:82:69:e3: d2:5c:0b:13:54:03:08:fc:6a:e5:59:4b:e1:da:09:b0:ea:41: 30:f6:2d:6b:54:0f:cc:2a:ed:ea:be:8d:96:45:d7:f0:53:53: fc:0f:0f:2e:8c:c1:66:5b:26:52:50:51:50:a5:f8:70:50:70: 11:4a:66:c5:f9:e1:8b:0e:2d:53:dd:16:a6:e9:ab:7f:81:b1: 5a:a6:9a:ac:b6:4e:f8:df:53:50:a4:3d:ce:91:cb:04:14:a0: eb:d1:36:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br1bHTXzeLxF3SiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk YjAyOTNiOWYtZDNkZS00ZGU3LWExMDctMDE5MmI5MzM1YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JrBqRPBzFDBBrY+gPCFQlwPff5G8bAq+3q3 ulPBeQLVMhfujrj6TBV0sGcB6Lg8xs6AzQsfsshNcCFFN8CL8scQR2F6eCq8IplY BxBY4iVw+3kY6SSAKwPXoREF6kc0oJWozb1gxKtp0d5rBB3beY7oGU51AIPw5/4b wHwodGrTb5wKMFC+Q3rjNRNV9d9kjRgJQxAZAGmlYX65RzOgqSjAAEy+PVr8ccX7 9vDBt4zOrf82Oek1OJ4qi68ySe1dWoIl3ne7FFicH5N0b0tdfo5R2+N4sUbg84nH j4AxPMwZs4sl2UJbeMTZdC2RteBF1aMrwi3obJcXkmPbce67kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzo1w7icikwCuXVjncaar/RXeUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvYWM1NDVkOGMtNTY3Zi0z YmQyLTlkZTQtODk3MTMyNzY1YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJap7kQs+UR6dLALD4E7zOfPR+S/5bHR1y2CKf0q99e9gmbPZNF7ZWDy PPiuA6KkJIdTvLd/ZjR5PRFtiKUBlXosybAelF0C9xfu2sfPzLj6O+N5gFrGwjGD QL/Cr6jKFoblJ/umxWSQ3ENJRcLb3A6wjfBpdKLYjTjvy9qSHf2BlEf+5ImNN3Km 663yo5algdU+1odAczMHPVXQ0g76EoJp49JcCxNUAwj8auVZS+HaCbDqQTD2LWtU D8wq7eq+jZZF1/BTU/wPDy6MwWZbJlJQUVCl+HBQcBFKZsX54YsOLVPdFqbpq3+B sVqmmqy2TvjfU1CkPc6RywQUoOvRNj8= -----END CERTIFICATE-----Generated at Fri Jul 24 07:54:23 2026 by rpki-client