$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa File: 0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa (raw, json) Hash identifier: BjC3OsMm3Q8CCvI0xu4dvjqPUwYbOtWHMabBgj0oiK8= Subject key identifier: 39:2C:01:40:95:CF:79:66:D4:98:7C:41:AC:7C:E8:86:59:88:59:B1 Certificate issuer: /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Certificate serial: 010D0C9F4328584E5A4A07386E0A992B4BDFBAA0 Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 40100 IP address blocks: 208.68.156.0/24 maxlen: 24 208.68.157.0/24 maxlen: 24 208.68.158.0/24 maxlen: 24 208.68.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:07:38:6e:0a:99:2b:4b:df:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=3b8d5d58-92f3-4de6-a1a3-1915550ddc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:6c:82:b6:a5:71:25:1a:22:3c:82:5d:33: 73:53:85:f1:20:5a:e2:3f:80:0b:3d:61:db:01:72: c1:3a:e7:3e:d5:23:7e:67:31:35:ff:92:20:f5:24: 95:f4:b6:5d:27:42:48:0c:0c:ae:79:7c:ea:7d:fc: bd:7e:f3:d4:27:ec:d4:64:39:e2:17:a7:12:1f:de: bc:28:d2:3a:d7:cd:22:83:bb:7f:dc:96:6d:cd:d2: 2d:49:ba:83:4d:5e:80:06:ce:38:34:5e:9f:2f:86: 7c:a8:90:11:a3:76:e4:a8:0c:05:12:9e:2d:72:5f: 80:45:3a:8f:ed:e3:d6:d6:de:2c:aa:dc:aa:b8:59: 25:a5:d4:16:03:e8:94:fa:b2:15:44:90:33:af:47: f3:d6:03:cc:53:b4:19:61:c0:1a:fb:57:65:7b:52: 29:d7:2f:e7:52:5e:12:31:5d:d9:64:83:c9:7a:e7: 54:3e:1b:e9:d0:e9:f3:f6:fb:c5:ec:0c:9f:cf:f8: 82:84:b8:c7:42:49:30:24:04:45:63:8d:a5:88:73: 42:64:d8:6a:77:a4:4a:bd:d0:1c:a9:5a:15:e7:0f: 86:8e:f1:38:b2:21:2a:02:71:0d:ef:39:0a:f1:c5: 0d:e7:de:8f:1a:e3:fe:eb:95:91:a2:7e:da:52:e4: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2C:01:40:95:CF:79:66:D4:98:7C:41:AC:7C:E8:86:59:88:59:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl X509v3 Authority Key Identifier: keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer sbgp-ipAddrBlock: critical IPv4: 208.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:28:35:eb:5f:e2:79:16:c0:0a:84:66:70:e2:38:a5:3b:c1: 86:3c:b1:25:ec:13:dc:a2:28:8f:98:92:b3:ae:06:d8:8f:fc: 8a:96:44:65:01:42:28:03:52:50:bd:63:e5:f8:6c:20:aa:66: c7:90:35:2f:24:6f:a8:6d:34:ce:3b:46:a7:48:7d:c9:89:26: fc:d8:27:91:d2:08:38:7b:4c:94:9d:c7:44:21:91:0c:73:76: bd:8f:ca:fc:50:e7:9f:ba:ea:d2:60:17:27:17:39:d5:b6:27: 44:1e:f0:b5:1d:f9:f3:42:11:ab:66:da:0b:6f:bc:4d:16:c8: 24:26:b3:53:8c:5e:d3:66:a4:e4:7e:10:23:6a:cd:98:52:ed: c9:e7:a0:03:3e:74:f5:8c:5a:a6:91:a8:bf:52:8b:45:cf:1d: 8c:ae:52:71:df:64:2b:e4:35:ac:87:61:b7:60:d3:77:69:78: da:61:2a:a0:29:ca:45:eb:73:f3:6f:e0:ae:20:5c:67:61:65: 5f:60:c5:42:66:19:47:0e:a6:93:9f:be:20:9c:8e:f9:f4:7c: 6d:8e:9d:17:d2:f2:7c:00:dc:42:2f:d9:34:41:49:9a:e0:c7: 26:cb:da:b2:7f:b5:95:12:f4:a6:d7:0a:b1:34:40:f3:51:ab: 2f:b9:59:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgc4bgqZK0vfuqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVhNGVmNjctM2VkMC00ZGU5LWFmYWItYWIxZWI0ZGMz YjBkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk M2I4ZDVkNTgtOTJmMy00ZGU2LWExYTMtMTkxNTU1MGRkYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJhsgralcSUaIjyCXTNzU4XxIFriP4ALPWHb AXLBOuc+1SN+ZzE1/5Ig9SSV9LZdJ0JIDAyueXzqffy9fvPUJ+zUZDniF6cSH968 KNI6180ig7t/3JZtzdItSbqDTV6ABs44NF6fL4Z8qJARo3bkqAwFEp4tcl+ARTqP 7ePW1t4sqtyquFklpdQWA+iU+rIVRJAzr0fz1gPMU7QZYcAa+1dle1Ip1y/nUl4S MV3ZZIPJeudUPhvp0Onz9vvF7Ayfz/iChLjHQkkwJARFY42liHNCZNhqd6RKvdAc qVoV5w+GjvE4siEqAnEN7zkK8cUN596PGuP+65WRon7aUuR2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDksAUCVz3lm1Jh8Qax86IZZiFmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80NWE0 ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFlYjRkYzNiMGQvMGYwZWFkZjAtN2FjZi0z Y2U3LTk5ZjgtODgzZTc2NGZhOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDVhNGVmNjctM2VkMC00ZGU5LWFm YWItYWIxZWI0ZGMzYjBkLzQ1YTRlZjY3LTNlZDAtNGRlOS1hZmFiLWFiMWViNGRj M2IwZC5jcmwwHwYDVR0jBBgwFoAUZHP0/sCp2Tpv5nmwPPeHGId5EX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80NWE0ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFl YjRkYzNiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwoNetf4nkWwAqEZnDiOKU7wYY8sSXsE9yiKI+YkrOuBtiP/IqWRGUB QigDUlC9Y+X4bCCqZseQNS8kb6htNM47RqdIfcmJJvzYJ5HSCDh7TJSdx0QhkQxz dr2PyvxQ55+66tJgFycXOdW2J0Qe8LUd+fNCEatm2gtvvE0WyCQms1OMXtNmpOR+ ECNqzZhS7cnnoAM+dPWMWqaRqL9Si0XPHYyuUnHfZCvkNayHYbdg03dpeNphKqAp ykXrc/Nv4K4gXGdhZV9gxUJmGUcOppOfviCcjvn0fG2OnRfS8nwA3EIv2TRBSZrg xybL2rJ/tZUS9KbXCrE0QPNRqy+5Wdo= -----END CERTIFICATE-----Generated at Fri Jul 24 03:14:09 2026 by rpki-client