$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa File: c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa (raw, json) Hash identifier: yTXR+CQgttncA1xczg/nK5EAonmlEDtS+gDmQgFB14Q= Subject key identifier: 8E:A7:92:88:C6:EF:09:90:D4:A5:A9:DE:88:E7:88:C5:ED:46:BC:12 Certificate issuer: /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed Certificate serial: 010D0C9F4328584E7204E45D3A4EFA2C06043960 Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 402239 IP address blocks: 209.204.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:e4:5d:3a:4e:fa:2c:06:04:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=bfd155dd-fbed-401b-8154-921bfcef5775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:ac:bb:9b:7a:98:b9:f4:f8:c9:ac:c7:b7: 4d:e2:c0:ec:af:e5:df:60:63:27:19:ab:34:05:29: f5:f6:d7:30:0f:f9:bd:05:b1:fa:7d:48:58:e0:cd: 4f:b8:16:27:20:0e:52:68:50:d4:cf:ee:dd:97:70: 4a:48:47:1d:b5:3b:df:f4:cd:f6:6d:7c:70:37:41: 9b:5c:87:38:e7:ca:cb:3e:8c:3f:d8:aa:12:aa:0d: ad:8c:9a:68:20:d7:41:d5:a8:17:ad:43:de:c6:64: 34:34:79:ee:18:98:61:47:a5:6a:e5:04:b2:e0:3b: d7:74:c0:1a:34:aa:28:69:aa:00:20:88:7e:17:9f: a4:9c:43:ca:7d:29:13:22:ac:e7:10:d0:68:e9:74: 2e:b4:dc:15:76:9a:f7:54:5f:0b:9f:c4:d6:9c:2b: 9c:b8:82:0b:74:5c:21:f9:75:46:17:0e:ed:b3:b9: 83:1e:4e:1b:61:d6:9b:38:6b:38:8c:c7:61:0e:ca: 99:6b:d1:61:eb:e1:27:17:c1:d5:f8:e5:5b:19:d2: 81:d7:be:dd:98:a5:f7:2e:07:fc:19:93:a4:d6:18: 12:70:f1:c9:7e:8d:e2:56:21:88:b6:da:45:df:e5: 57:5c:5e:c8:36:b3:4e:53:a4:de:74:c1:97:5b:00: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A7:92:88:C6:EF:09:90:D4:A5:A9:DE:88:E7:88:C5:ED:46:BC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/c3619aa8-33c0-3c50-a5fe-3f24868e280e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl X509v3 Authority Key Identifier: keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer sbgp-ipAddrBlock: critical IPv4: 209.204.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4c:68:72:ef:24:fa:75:93:70:7a:5b:53:17:2f:01:d6:89: 63:81:07:3a:2c:e5:55:81:2c:36:43:37:b0:93:ef:b7:76:69: 80:31:54:3f:32:60:22:7f:b6:3f:d0:8a:8e:c3:c4:75:c0:46: a3:e4:e3:6d:9f:be:fa:5f:5f:a4:e2:00:c0:26:0d:a4:68:96: 6c:91:fa:ae:2d:79:57:bc:91:7f:96:29:c5:fc:97:9d:0e:de: e7:ee:cb:6f:ba:88:0e:c7:4f:bc:eb:b5:63:d5:12:68:86:b0: d4:12:93:15:13:9d:ff:b2:cf:af:18:6c:d9:ad:01:6f:63:b2: ba:08:e4:7e:60:aa:e5:ed:ac:78:bd:13:43:ba:03:d5:70:51: ed:29:a6:52:97:62:37:1a:4f:a3:d1:f7:93:49:4b:49:ad:72: 0b:02:fd:5d:a9:fd:19:b3:11:57:03:fc:74:41:4c:c0:5f:c8: 97:1f:3a:9a:52:0e:be:05:24:da:15:86:dd:00:02:56:a6:79: 60:ec:61:6c:15:9c:72:7d:f1:68:00:51:15:10:4a:5e:1e:fd: 4f:0b:1d:5a:7b:b9:a2:ab:67:23:b4:61:93:04:78:6c:39:96: bc:71:8e:4d:9d:cd:f0:1d:bd:e4:85:04:39:9c:90:13:34:00: a1:8a:cb:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBORdOk76LAYEOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTQzNjctM2EwZC00NTBjLWFiMmUtOWI4Zjg0ZTQz NmVkMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YmZkMTU1ZGQtZmJlZC00MDFiLTgxNTQtOTIxYmZjZWY1Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcysu5t6mLn0+Mmsx7dN4sDsr+XfYGMnGas0 BSn19tcwD/m9BbH6fUhY4M1PuBYnIA5SaFDUz+7dl3BKSEcdtTvf9M32bXxwN0Gb XIc458rLPow/2KoSqg2tjJpoINdB1agXrUPexmQ0NHnuGJhhR6Vq5QSy4DvXdMAa NKooaaoAIIh+F5+knEPKfSkTIqznENBo6XQutNwVdpr3VF8Ln8TWnCucuIILdFwh +XVGFw7ts7mDHk4bYdabOGs4jMdhDsqZa9Fh6+EnF8HV+OVbGdKB177dmKX3Lgf8 GZOk1hgScPHJfo3iViGIttpF3+VXXF7INrNOU6TedMGXWwDs4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6nkojG7wmQ1KWp3ojniMXtRrwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZh NDM2Ny0zYTBkLTQ1MGMtYWIyZS05YjhmODRlNDM2ZWQvYzM2MTlhYTgtMzNjMC0z YzUwLWE1ZmUtM2YyNDg2OGUyODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTY2YTQzNjctM2EwZC00NTBjLWFi MmUtOWI4Zjg0ZTQzNmVkL2E2NmE0MzY3LTNhMGQtNDUwYy1hYjJlLTliOGY4NGU0 MzZlZC5jcmwwHwYDVR0jBBgwFoAUfPUMrnxr5if+Q4YV78nJWRe2CTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjZhNDM2Ny0zYTBkLTQ1MGMtYWIyZS05Yjhm ODRlNDM2ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFMaHLvJPp1k3B6W1MXLwHWiWOBBzos5VWBLDZDN7CT77d2aYAxVD8y YCJ/tj/Qio7DxHXARqPk422fvvpfX6TiAMAmDaRolmyR+q4teVe8kX+WKcX8l50O 3ufuy2+6iA7HT7zrtWPVEmiGsNQSkxUTnf+yz68YbNmtAW9jsroI5H5gquXtrHi9 E0O6A9VwUe0pplKXYjcaT6PR95NJS0mtcgsC/V2p/RmzEVcD/HRBTMBfyJcfOppS Dr4FJNoVht0AAlameWDsYWwVnHJ98WgAURUQSl4e/U8LHVp7uaKrZyO0YZMEeGw5 lrxxjk2dzfAdveSFBDmckBM0AKGKy/8= -----END CERTIFICATE-----Generated at Fri Jul 24 12:51:20 2026 by rpki-client