$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa File: 87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa (raw, json) Hash identifier: YCgPOgf3h6ceAdCUtOeJx+wVLXUcnG3XXUpFZrUPXzc= Subject key identifier: 6C:09:E7:0C:7E:BA:AC:DF:CA:87:26:FD:CB:83:CB:70:9F:5F:1F:46 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584E66DA0CB316F141530F9AD6C0 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 55 IP address blocks: 192.84.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0c:b3:16:f1:41:53:0f:9a:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=cbe09c9b-1e87-4c8b-bb21-cee68257db7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:11:4a:60:e5:43:79:f5:5d:83:37:6d:ad: 2e:b1:cc:8d:74:cf:00:f4:47:97:c1:12:35:48:1b: b0:1c:53:a3:d4:56:2a:1b:76:a3:3d:9f:2f:2b:26: 4b:3a:19:f0:81:25:a6:4e:4a:8a:42:9e:51:4c:d0: ee:19:fa:ab:e2:21:aa:2b:0f:68:bf:85:cb:2e:9a: 3f:5e:2b:97:08:df:e2:03:20:58:dd:32:e1:67:ba: 23:4c:3f:d0:d8:31:51:81:07:25:13:9a:6e:0c:86: d6:3b:8a:8e:ae:31:83:bf:34:2e:e8:58:b9:ff:4f: cd:6b:3d:22:57:86:ab:85:95:c3:f9:60:b5:20:c1: 06:f2:ea:b7:e6:0c:99:17:f0:be:da:2e:9a:68:a6: fe:30:c4:2f:86:c1:fb:e3:7b:8c:8f:20:1e:87:42: b4:58:c6:19:83:39:bc:9a:fd:c1:bd:1d:02:de:cd: 43:51:3a:c8:04:37:01:85:f5:03:a2:3b:f6:5b:1d: cc:92:97:12:df:30:a1:25:2a:cd:8c:8b:87:4d:68: 3d:46:ff:95:e8:8d:f6:e1:ab:cb:c7:90:94:d4:e7: f7:f1:25:49:b4:a2:94:04:31:e1:30:e6:93:cd:45: 7a:9b:d7:5b:48:36:c3:98:67:11:df:ea:f7:bd:6c: e7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:09:E7:0C:7E:BA:AC:DF:CA:87:26:FD:CB:83:CB:70:9F:5F:1F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/87f5be57-4fb6-326f-a7a7-31888f0e6a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 192.84.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4b:ac:09:ed:7d:36:62:da:6c:85:95:94:11:af:4c:8e:44: e7:1f:31:0c:65:da:d1:49:2a:f3:4d:bc:19:e5:b6:a2:58:95: 01:3e:74:83:74:ad:0e:e9:77:d3:d8:72:8c:b5:3c:06:79:e5: 84:fd:3a:0c:7a:7e:94:6d:eb:e9:77:15:3f:ca:ab:eb:c6:c7: 85:10:d3:76:79:b8:49:55:a6:9c:a1:3a:45:35:31:fe:e2:11: 81:a1:57:7d:ca:6a:99:81:8a:d8:ae:3a:7d:90:df:96:65:e4: ab:25:84:75:4c:52:f6:db:89:3d:26:06:c8:92:3e:66:40:f0: 6a:f7:2b:cd:fe:df:e4:6e:cc:f8:82:31:05:a5:b0:3d:40:60: ba:29:c7:42:44:76:3f:b9:6a:80:d2:98:08:67:16:50:b7:f5: 3d:2d:11:c4:d8:fb:72:71:99:96:3b:03:be:fc:73:31:2a:9e: 00:7b:58:ea:fb:55:60:ce:1b:18:c9:fa:44:a6:c0:0c:3c:61: 17:8c:7a:0a:8c:5a:c3:37:d1:28:da:f6:1e:6d:38:08:73:d8: ae:09:be:9f:87:45:7c:34:06:1f:f9:8c:00:46:72:f0:ed:5e: 21:c7:7b:d3:13:b8:c7:a4:b3:c0:29:10:88:1b:10:85:15:70: c8:00:3b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gyzFvFBUw+a1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk Y2JlMDljOWItMWU4Ny00YzhiLWJiMjEtY2VlNjgyNTdkYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpQRSmDlQ3n1XYM3ba0uscyNdM8A9EeXwRI1 SBuwHFOj1FYqG3ajPZ8vKyZLOhnwgSWmTkqKQp5RTNDuGfqr4iGqKw9ov4XLLpo/ XiuXCN/iAyBY3TLhZ7ojTD/Q2DFRgQclE5puDIbWO4qOrjGDvzQu6Fi5/0/Naz0i V4arhZXD+WC1IMEG8uq35gyZF/C+2i6aaKb+MMQvhsH743uMjyAeh0K0WMYZgzm8 mv3BvR0C3s1DUTrIBDcBhfUDojv2Wx3MkpcS3zChJSrNjIuHTWg9Rv+V6I324avL x5CU1Of38SVJtKKUBDHhMOaTzUV6m9dbSDbDmGcR3+r3vWznhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwJ5wx+uqzfyocm/cuDy3CfXx9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvODdmNWJlNTctNGZiNi0z MjZmLWE3YTctMzE4ODhmMGU2YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxLrAntfTZi2myFlZQRr0yOROcfMQxl2tFJKvNNvBnltqJYlQE+dIN0 rQ7pd9PYcoy1PAZ55YT9Ogx6fpRt6+l3FT/Kq+vGx4UQ03Z5uElVppyhOkU1Mf7i EYGhV33KapmBitiuOn2Q35Zl5KslhHVMUvbbiT0mBsiSPmZA8Gr3K83+3+RuzPiC MQWlsD1AYLopx0JEdj+5aoDSmAhnFlC39T0tEcTY+3JxmZY7A778czEqngB7WOr7 VWDOGxjJ+kSmwAw8YReMegqMWsM30Sja9h5tOAhz2K4Jvp+HRXw0Bh/5jABGcvDt XiHHe9MTuMeks8ApEIgbEIUVcMgAO5Q= -----END CERTIFICATE-----Generated at Fri Jul 24 00:58:16 2026 by rpki-client