$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa File: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (raw, json) Hash identifier: qqg5OqwiVXzye4TP4N5qS1CK+A5g40pJ4qNZ9n1Obsc= Subject key identifier: EE:74:72:91:66:45:59:23:4B:4A:A7:9C:25:63:CE:30:0B:95:A7:9F Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584E86F4EE98806726E619B7C3C0 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 198949 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:ee:98:80:67:26:e6:19:b7:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=6ef68e55-391f-4635-86a1-87a70537b61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:29:37:95:bf:a8:cd:58:dc:10:de:38:a5: d2:ba:0f:4d:11:df:d1:bc:ff:71:a1:69:a4:5c:70: ab:17:ff:45:fb:9f:c9:c1:af:b2:db:eb:7f:3a:88: 72:ac:b4:b9:dd:a8:2a:05:8f:a3:c9:19:39:df:4c: ac:3d:46:49:2e:29:7f:b4:fa:e9:9c:51:57:08:41: 73:e8:c7:f9:45:bf:44:35:ff:7d:60:7b:24:80:e5: 60:74:0a:1e:3f:e4:90:1e:68:a7:14:39:dc:dc:1c: bb:be:9b:ad:cf:bf:42:8a:0b:3e:40:d5:88:e8:10: 71:a1:2c:94:3b:08:9c:b9:64:bf:fa:e7:a0:22:ef: 73:35:c2:4a:12:79:6d:5f:da:d8:32:d9:bc:bc:49: cd:46:6f:37:36:df:92:7f:92:0e:ba:8c:ca:43:15: ee:19:ee:b9:24:3b:e3:10:b4:8f:f1:43:84:d4:36: 53:2a:be:6f:a5:a3:6b:2a:f4:a5:6d:11:3a:11:94: e6:71:d0:9c:09:de:25:9b:3b:2f:c5:fa:6f:04:52: 86:81:09:35:4e:77:e4:93:70:df:fe:60:ee:43:60: ca:a5:75:bf:d5:32:65:26:7b:f6:9e:a8:35:ea:ac: 17:4a:98:53:1a:cb:f7:d3:76:bd:e3:4f:61:56:f3: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:74:72:91:66:45:59:23:4B:4A:A7:9C:25:63:CE:30:0B:95:A7:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:30:98:4c:d8:01:e1:2a:84:1b:b3:a8:91:5f:2d:64:4f:ad: d9:18:26:68:95:b3:52:42:a2:3b:e6:3c:89:a2:66:13:34:b1: bb:4c:3f:50:c9:56:2f:65:02:3c:02:80:82:ae:96:6f:2c:fa: 75:3d:77:95:5a:80:4c:aa:ea:1c:ee:0e:3b:42:6c:8b:be:26: 2a:f7:09:ac:26:1b:f0:58:99:e4:b1:bc:e9:80:85:ba:ae:7a: 06:12:50:0a:e4:17:b6:57:98:16:43:a3:8e:29:1a:79:64:67: d8:ca:ea:b1:e0:e4:6d:ca:ef:12:f5:c4:36:64:66:d9:72:20: 04:46:05:b4:5e:2b:d4:f2:cc:fa:d5:32:de:78:78:32:ac:fb: 6b:96:81:81:74:15:81:cc:55:8e:7c:52:e4:47:ba:1a:bc:78: a7:25:de:99:12:17:89:c9:1a:ea:9a:d8:de:9d:0c:e7:8d:52: 09:9c:d7:5c:33:ff:9a:d6:ef:0c:b4:fb:d6:0e:bd:e1:c6:ff: 0d:57:39:57:eb:3a:55:16:52:5e:75:18:e9:46:74:8f:1d:ef: 89:ec:4a:fe:62:b6:c4:d2:ab:b5:bc:35:75:5e:74:e8:4c:50: b3:ee:65:b3:5d:b3:d9:47:9d:eb:d7:88:6b:6b:95:38:e5:e3: 84:3b:c1:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9O6YgGcm5hm3w8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NmVmNjhlNTUtMzkxZi00NjM1LTg2YTEtODdhNzA1MzdiNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowIpN5W/qM1Y3BDeOKXSug9NEd/RvP9xoWmk XHCrF/9F+5/Jwa+y2+t/OohyrLS53agqBY+jyRk530ysPUZJLil/tPrpnFFXCEFz 6Mf5Rb9ENf99YHskgOVgdAoeP+SQHminFDnc3By7vputz79Cigs+QNWI6BBxoSyU OwicuWS/+uegIu9zNcJKEnltX9rYMtm8vEnNRm83Nt+Sf5IOuozKQxXuGe65JDvj ELSP8UOE1DZTKr5vpaNrKvSlbRE6EZTmcdCcCd4lmzsvxfpvBFKGgQk1Tnfkk3Df /mDuQ2DKpXW/1TJlJnv2nqg16qwXSphTGsv303a9409hVvOdzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO50cpFmRVkjS0qnnCVjzjALlaefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvOTAwOTc0ZDctODk4OS0z MDdmLWE4ZGQtZjI3ZmJlNTczZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcwmEzYAeEqhBuzqJFfLWRPrdkYJmiVs1JCojvmPImiZhM0sbtMP1DJ Vi9lAjwCgIKulm8s+nU9d5VagEyq6hzuDjtCbIu+Jir3CawmG/BYmeSxvOmAhbqu egYSUArkF7ZXmBZDo44pGnlkZ9jK6rHg5G3K7xL1xDZkZtlyIARGBbReK9TyzPrV Mt54eDKs+2uWgYF0FYHMVY58UuRHuhq8eKcl3pkSF4nJGuqa2N6dDOeNUgmc11wz /5rW7wy0+9YOveHG/w1XOVfrOlUWUl51GOlGdI8d74nsSv5itsTSq7W8NXVedOhM ULPuZbNds9lHnevXiGtrlTjl44Q7wZo= -----END CERTIFICATE-----Generated at Fri Jul 24 22:20:08 2026 by rpki-client