$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa File: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json) Hash identifier: hk9HTThl4z3QNBqSG9LrJnyzTAS0O1BQzZuxANuHTDE= Subject key identifier: 60:B5:BC:EF:6C:C5:12:BE:F1:03:15:4F:2D:D9:31:F3:28:47:82:98 Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584E94EA4E798FC20C922CC134C0 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 13347 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:4e:79:8f:c2:0c:92:2c:c1:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=d043301e-b5f2-4453-9d08-54e6237aa81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:ef:ce:d9:f7:0b:19:e4:ca:b4:8d:e9:b2: 88:6e:df:d9:52:82:5f:29:93:74:e4:65:3e:1a:46: d6:da:3f:3c:1c:bd:96:1f:58:84:86:7a:d8:fd:fe: 53:07:fe:8a:2c:1b:17:a0:7e:4d:49:de:dc:0c:5c: fd:ac:58:81:2d:d0:95:88:a2:02:7d:af:62:ed:25: e6:0b:4d:1c:ed:77:98:55:01:2f:ee:44:81:74:eb: 18:0d:1f:f2:05:8a:85:b2:54:e9:d5:9c:2a:b5:3b: 47:fd:4e:c8:25:75:ce:f8:b4:1a:81:20:e7:d8:24: fd:19:9e:7c:4f:12:f1:6d:03:e8:df:44:bd:e9:f7: 8b:67:5d:19:19:8b:0d:4c:fc:3c:2a:81:da:e5:c3: 7c:a0:d6:bd:85:7e:8b:e3:3e:22:fa:84:a8:f5:90: 9b:8a:7f:78:df:6d:46:dc:e1:4f:8c:b4:b9:ef:9f: 07:17:2e:9e:a9:19:73:53:e5:d5:3c:fa:aa:bb:14: 54:92:f4:25:09:7e:c3:f7:0b:10:95:7c:98:24:6f: fb:3c:ad:43:f5:7c:37:0c:d6:b5:ec:c8:3b:73:de: 19:e9:f8:0e:95:ff:bc:e7:92:f8:bf:b0:00:b3:93: 15:20:1e:c7:ee:80:d5:cc:65:18:eb:09:48:fc:da: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:BC:EF:6C:C5:12:BE:F1:03:15:4F:2D:D9:31:F3:28:47:82:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a1:b0:38:63:7a:c2:bc:eb:c9:5c:9d:31:77:01:13:09:13: ed:82:f2:07:6f:0d:2d:32:69:b2:7a:26:69:b2:7b:a4:30:ed: 6a:23:28:41:a9:ec:0e:df:6d:26:03:e1:8f:8c:5d:9b:6f:30: 6a:b4:5c:46:be:72:92:a4:fb:f0:ae:74:54:b6:61:7e:28:d1: 67:7e:0d:d8:79:7e:1c:97:08:e8:42:70:ee:a4:18:f9:64:2d: ab:70:1e:9e:1e:d0:fc:c3:ca:61:2d:74:36:cd:f4:99:1e:47: 13:f6:08:80:19:d7:45:19:36:53:29:55:ba:c1:89:84:4d:49: 24:29:e7:08:a9:67:38:44:a0:21:21:6f:f1:99:91:ec:98:66: 84:6c:a0:92:43:ac:a9:18:5b:d2:be:5e:38:7b:8c:8f:22:4e: 80:d1:c4:12:88:e3:cb:ef:16:98:de:1d:9e:e8:7f:e5:89:f1: 37:49:15:b9:29:59:fe:0e:ec:70:e3:c4:2e:47:8b:98:c6:43: 90:b5:37:c4:3b:f6:eb:9f:56:aa:c2:3f:77:ea:cf:ba:96:f7: 2d:d6:0d:21:68:e5:c2:be:49:8a:35:50:4e:ce:bb:90:f3:1a: c9:e5:8a:f3:e7:e7:b0:39:13:10:7e:62:18:56:c3:4e:38:1c: 5b:d0:c9:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6k55j8IMkizBNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZDA0MzMwMWUtYjVmMi00NDUzLTlkMDgtNTRlNjIzN2FhODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj87vztn3CxnkyrSN6bKIbt/ZUoJfKZN05GU+ GkbW2j88HL2WH1iEhnrY/f5TB/6KLBsXoH5NSd7cDFz9rFiBLdCViKICfa9i7SXm C00c7XeYVQEv7kSBdOsYDR/yBYqFslTp1ZwqtTtH/U7IJXXO+LQagSDn2CT9GZ58 TxLxbQPo30S96feLZ10ZGYsNTPw8KoHa5cN8oNa9hX6L4z4i+oSo9ZCbin94321G 3OFPjLS5758HFy6eqRlzU+XVPPqquxRUkvQlCX7D9wsQlXyYJG/7PK1D9Xw3DNa1 7Mg7c94Z6fgOlf+855L4v7AAs5MVIB7H7oDVzGUY6wlI/NqbMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC1vO9sxRK+8QMVTy3ZMfMoR4KYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvZDg1OTU1MGEtNDU4Zi0z ZTM3LWJmOTctZTZjZDUyZWY4NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGhsDhjesK868lcnTF3ARMJE+2C8gdvDS0yabJ6Jmmye6Qw7WojKEGp 7A7fbSYD4Y+MXZtvMGq0XEa+cpKk+/CudFS2YX4o0Wd+Ddh5fhyXCOhCcO6kGPlk LatwHp4e0PzDymEtdDbN9JkeRxP2CIAZ10UZNlMpVbrBiYRNSSQp5wipZzhEoCEh b/GZkeyYZoRsoJJDrKkYW9K+Xjh7jI8iToDRxBKI48vvFpjeHZ7of+WJ8TdJFbkp Wf4O7HDjxC5Hi5jGQ5C1N8Q79uufVqrCP3fqz7qW9y3WDSFo5cK+SYo1UE7Ou5Dz GsnlivPn57A5ExB+YhhWw044HFvQyb0= -----END CERTIFICATE-----Generated at Thu Jul 23 19:11:21 2026 by rpki-client