$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa File: c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa (raw, json) Hash identifier: C3xTSlLNrdIXpwMV0HCGCtw/GXFalLJIyrRbQKGhcY0= Subject key identifier: BD:61:76:65:3F:34:5F:00:8A:D8:61:4F:18:DA:7A:6F:AF:97:71:24 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584E736A1E004C3B735EFBC81A80 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 88 IP address blocks: 204.153.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1e:00:4c:3b:73:5e:fb:c8:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=b8209568-feec-4126-a521-6d34604c83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:2d:52:20:d5:47:b1:55:24:ae:9f:2f:16: 35:92:b3:09:eb:ed:9e:6f:a1:23:39:ce:32:16:9b: d3:16:42:a8:f8:7e:8d:44:30:e7:95:8c:2a:6e:86: 45:be:a8:9a:3d:d9:f8:7f:43:76:50:bc:f5:1f:ff: e6:40:c6:d5:3f:07:53:69:2e:1b:53:6c:17:43:94: 38:fa:2e:56:cb:26:8a:d0:d2:14:0c:80:32:1a:17: d9:ab:38:60:42:44:43:54:73:3e:c3:69:d2:fc:85: 43:c9:81:21:30:62:f9:30:3f:c3:fe:38:16:db:05: b7:2c:54:00:f8:d0:ea:7e:6a:b1:2f:3f:14:25:41: 2b:7a:02:e8:51:5b:48:6d:30:90:e7:77:ee:d8:89: ae:9f:9c:22:43:a5:85:e1:b9:37:ee:75:84:3c:f4: 03:bf:d7:52:9d:4e:52:12:8a:7f:3c:fa:1b:c8:02: d3:20:23:38:c6:51:86:92:d4:66:c1:77:01:07:f6: 91:2d:f6:f8:c6:14:c1:9a:ac:80:9f:39:0c:ee:2a: df:0d:61:df:0b:bf:07:e1:e7:9a:cb:b7:24:3e:0b: c1:56:c3:a4:60:88:a3:ed:6f:37:e0:7b:ce:af:6b: 03:06:33:34:ab:4c:67:61:05:dc:6f:90:c4:52:36: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:76:65:3F:34:5F:00:8A:D8:61:4F:18:DA:7A:6F:AF:97:71:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e9:18:f5:e8:af:10:f6:67:01:bb:03:c5:b7:df:6d:d5:65: 70:6b:05:cd:48:fe:cc:fa:06:28:c4:ff:03:8b:8f:1e:28:65: a4:ed:b1:7d:09:6f:fe:b3:63:5a:11:97:43:9b:2f:1d:14:41: 23:72:78:31:47:94:4a:c6:08:d9:fc:b1:52:24:e1:11:1f:99: 83:b7:ff:c8:4c:e6:e3:a8:c8:9f:50:fe:fb:03:74:d2:cd:a9: 21:66:20:c8:1c:6e:41:8e:3a:7f:41:e0:01:51:ee:ac:13:42: 02:c2:1b:41:9d:f0:38:96:af:9b:3b:86:26:19:c9:a3:1d:58: 70:fa:ba:10:ae:60:13:b9:4c:03:a9:20:d2:1a:91:e6:bc:4a: 8a:16:ce:ca:7b:1f:80:e0:48:fd:0d:76:06:f6:34:e0:99:ea: 83:db:c9:69:4e:3e:c3:28:9d:9f:1f:3e:a3:b4:e1:a8:ee:28: 5e:a8:88:6b:e1:1e:da:4f:08:ed:02:50:ed:d6:2d:ab:78:26: b7:6d:4a:07:4c:89:98:dc:90:2d:50:60:46:a8:38:3a:17:b4: c4:82:85:9c:02:6d:57:dd:1f:c1:b3:ac:d8:27:61:38:e9:f1: 9c:6b:e2:0a:5a:93:06:71:b9:49:97:31:a7:74:6c:58:ae:a0: 36:78:40:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zah4ATDtzXvvIGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk YjgyMDk1NjgtZmVlYy00MTI2LWE1MjEtNmQzNDYwNGM4M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDctUiDVR7FVJK6fLxY1krMJ6+2eb6EjOc4y FpvTFkKo+H6NRDDnlYwqboZFvqiaPdn4f0N2ULz1H//mQMbVPwdTaS4bU2wXQ5Q4 +i5WyyaK0NIUDIAyGhfZqzhgQkRDVHM+w2nS/IVDyYEhMGL5MD/D/jgW2wW3LFQA +NDqfmqxLz8UJUEregLoUVtIbTCQ53fu2Imun5wiQ6WF4bk37nWEPPQDv9dSnU5S Eop/PPobyALTICM4xlGGktRmwXcBB/aRLfb4xhTBmqyAnzkM7irfDWHfC78H4eea y7ckPgvBVsOkYIij7W834HvOr2sDBjM0q0xnYQXcb5DEUja+hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1hdmU/NF8AithhTxjaem+vl3EkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYzJkOWY2ZDktMWZjNi0z NDgyLWEzNjMtOGUzYTA1N2NiZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/pGPXorxD2ZwG7A8W3323VZXBrBc1I/sz6BijE/wOLjx4oZaTtsX0J b/6zY1oRl0ObLx0UQSNyeDFHlErGCNn8sVIk4REfmYO3/8hM5uOoyJ9Q/vsDdNLN qSFmIMgcbkGOOn9B4AFR7qwTQgLCG0Gd8DiWr5s7hiYZyaMdWHD6uhCuYBO5TAOp INIakea8SooWzsp7H4DgSP0Ndgb2NOCZ6oPbyWlOPsMonZ8fPqO04ajuKF6oiGvh HtpPCO0CUO3WLat4JrdtSgdMiZjckC1QYEaoODoXtMSChZwCbVfdH8GzrNgnYTjp 8Zxr4gpakwZxuUmXMad0bFiuoDZ4QL0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:52 2026 by rpki-client