$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa File: 85936ab9-681e-3063-9c40-0a46025e36e9.roa (raw, json) Hash identifier: Gi+H/4aEOxwCGtazE0PiazGHsM8sAjFUKF1gG2spj7g= Subject key identifier: 12:57:3E:35:B4:30:1F:26:C5:1B:1C:C9:26:26:A3:49:AB:21:13:F6 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584E6C6F675A15E836F999A731C0 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 64243 IP address blocks: 205.213.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:67:5a:15:e8:36:f9:99:a7:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=482a491d-0efa-4ec0-9cf7-253f7d5d39dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:29:6a:19:ba:c7:77:d3:53:55:3b:cf:f6: 88:7b:75:76:5c:1d:17:52:95:09:4c:db:b7:89:37: 76:e6:2b:5b:91:c8:5a:7d:ca:2b:fe:58:f6:be:bd: f3:9f:5f:cf:c9:60:22:3f:54:6e:de:31:81:ef:01: 20:d2:57:dc:e7:73:8c:a6:fe:b2:d5:0a:d7:69:a5: 20:ce:68:1b:1b:6d:b8:cf:86:2f:a5:2c:af:98:c7: ec:d4:bc:ca:a1:35:32:6a:0e:2a:3a:db:09:5f:85: 17:97:aa:f8:44:25:e0:f7:e8:d1:dd:24:96:34:d1: a2:49:62:88:91:92:56:94:de:6a:6a:a6:2c:65:34: 33:0c:29:13:a2:43:e8:ff:80:18:6d:c2:58:ae:a3: 63:89:70:7a:09:48:de:af:e8:9b:3d:7e:fb:a7:bd: f7:e1:2a:18:81:6e:bc:f8:29:23:56:7e:18:59:ca: 81:6d:9a:8e:05:f3:0a:29:9d:b6:a2:e0:e7:68:3c: 6f:21:62:5e:5d:ac:35:75:07:fa:63:97:a0:90:9d: fa:d9:37:0a:fd:e4:12:23:2a:ff:6f:03:cd:b5:ce: a6:7c:26:30:4a:39:2b:9c:50:4d:b4:ab:62:33:c5: 14:3a:76:05:0d:53:41:51:af:99:57:59:31:e2:94: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:3E:35:B4:30:1F:26:C5:1B:1C:C9:26:26:A3:49:AB:21:13:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:99:b5:4b:cc:d7:6f:fb:18:c0:d9:3a:8d:d2:9b:d6:f7:bc: f7:f1:69:3b:7b:d4:c2:7c:ad:dc:a8:c6:88:f4:fa:4c:e8:e6: 81:0b:96:56:54:8d:2d:fb:d4:dc:de:d8:91:97:0b:b2:ef:4a: 09:89:3b:99:f5:44:28:d0:f3:05:92:eb:01:45:b1:92:0a:6c: 62:a8:72:45:b8:c8:98:9a:15:bf:a2:45:b1:ff:06:1e:0e:0c: 8b:59:53:f5:10:b5:2b:0f:86:c2:63:67:c1:30:ab:a2:d3:d5: 1c:b9:6e:f1:b8:f8:67:46:8a:f9:06:35:ad:b4:d5:80:5b:47: 28:e9:19:06:fb:46:ce:ba:5e:f0:19:a1:d5:b3:0f:9d:53:4d: d7:f7:1c:b9:03:38:74:23:1a:cc:5d:97:ee:2b:52:9a:fc:8a: fd:78:4c:b5:7f:39:9e:2f:0b:13:f8:4b:c5:b7:cc:6a:9d:27: 83:68:0b:17:bc:61:7b:8b:42:9e:b3:f7:31:c2:9b:a6:83:cd: cc:36:ac:63:e3:f8:dd:ff:1f:70:5f:3e:60:2f:3b:85:cf:dc: eb:c0:44:1f:af:d5:4d:d4:17:ea:79:24:2a:e4:4b:5b:31:3d: 27:d1:99:14:b1:c5:f1:cc:3a:dc:82:63:5a:05:c3:a7:8c:76: c3:5d:61:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2daFeg2+ZmnMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk NDgyYTQ5MWQtMGVmYS00ZWMwLTljZjctMjUzZjdkNWQzOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9wpahm6x3fTU1U7z/aIe3V2XB0XUpUJTNu3 iTd25itbkchafcor/lj2vr3zn1/PyWAiP1Ru3jGB7wEg0lfc53OMpv6y1QrXaaUg zmgbG224z4YvpSyvmMfs1LzKoTUyag4qOtsJX4UXl6r4RCXg9+jR3SSWNNGiSWKI kZJWlN5qaqYsZTQzDCkTokPo/4AYbcJYrqNjiXB6CUjer+ibPX77p7334SoYgW68 +CkjVn4YWcqBbZqOBfMKKZ22ouDnaDxvIWJeXaw1dQf6Y5egkJ362TcK/eQSIyr/ bwPNtc6mfCYwSjkrnFBNtKtiM8UUOnYFDVNBUa+ZV1kx4pS5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJXPjW0MB8mxRscySYmo0mrIRP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvODU5MzZhYjktNjgxZS0z MDYzLTljNDAtMGE0NjAyNWUzNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuZtUvM12/7GMDZOo3Sm9b3vPfxaTt71MJ8rdyoxoj0+kzo5oELllZU jS371Nze2JGXC7LvSgmJO5n1RCjQ8wWS6wFFsZIKbGKockW4yJiaFb+iRbH/Bh4O DItZU/UQtSsPhsJjZ8Ewq6LT1Ry5bvG4+GdGivkGNa201YBbRyjpGQb7Rs66XvAZ odWzD51TTdf3HLkDOHQjGsxdl+4rUpr8iv14TLV/OZ4vCxP4S8W3zGqdJ4NoCxe8 YXuLQp6z9zHCm6aDzcw2rGPj+N3/H3BfPmAvO4XP3OvARB+v1U3UF+p5JCrkS1sx PSfRmRSxxfHMOtyCY1oFw6eMdsNdYdY= -----END CERTIFICATE-----Generated at Fri Jul 24 16:37:29 2026 by rpki-client