$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/afbd1391-0645-3d4b-9707-bfd2274b0116.roa File: afbd1391-0645-3d4b-9707-bfd2274b0116.roa (raw, json) Hash identifier: 1Tcw83uDWfj2+7vB4rVskfPAKt4L5knxzR0w7H7X8eI= Subject key identifier: 43:E5:9D:13:30:A8:AF:FF:EB:11:0E:A8:06:15:8D:3E:A1:54:E7:50 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584E74CF805F2AD71CD7370EA540 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/afbd1391-0645-3d4b-9707-bfd2274b0116.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 174 IP address blocks: 209.236.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:80:5f:2a:d7:1c:d7:37:0e:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=65a565f7-1ff5-4eb6-b677-5a4b3a396bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:07:de:1f:e2:ed:44:c4:5b:05:85:c7:f8: 65:82:a5:e1:c4:fb:37:19:90:9e:16:3c:95:68:7d: d6:a7:52:ab:0d:2a:b1:41:6f:69:1b:ca:e7:ec:28: ce:bd:f1:38:75:9a:cf:c1:0a:3b:29:db:3d:1f:80: b4:9a:1b:8f:22:be:81:75:65:2a:7c:d2:33:7f:95: 0a:57:2f:61:f7:3b:fa:4e:f9:52:1f:d7:81:cb:13: 6b:12:62:d9:5b:c9:00:01:3f:14:ca:a6:ee:3f:67: 12:da:73:e9:58:b9:d9:04:2e:d4:3f:45:ea:63:77: cc:e8:a2:c8:d7:4f:db:e6:98:96:d1:d9:9e:07:45: a7:41:d2:92:39:71:5d:8c:0b:73:da:5b:1c:20:cd: 35:79:cd:56:b9:6c:87:dd:36:64:19:ec:6d:73:66: 8f:83:ec:ab:39:e8:9f:4e:24:5e:97:20:c4:69:f1: c8:7a:73:50:fd:7b:e7:a8:ea:b7:0c:63:0f:93:7a: 80:f5:61:a4:2f:ba:64:8d:22:74:c0:6e:60:da:87: 5d:f2:c4:45:84:94:ce:42:10:7a:80:50:01:cc:50: 9c:32:37:36:60:39:30:38:e6:a0:6c:13:9d:9f:c7: 0d:fb:d4:01:fc:27:e3:62:11:a8:c6:da:b3:a0:0a: 11:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E5:9D:13:30:A8:AF:FF:EB:11:0E:A8:06:15:8D:3E:A1:54:E7:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/afbd1391-0645-3d4b-9707-bfd2274b0116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.236.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a5:50:34:3b:ac:e7:ba:66:9f:53:a4:6f:58:d4:81:57:9c: f1:79:45:9c:56:b6:ba:71:2f:01:16:2f:15:22:58:18:c8:5e: 57:2c:f3:d0:7a:a7:c0:cf:97:91:51:e3:80:90:f0:47:82:88: 71:5e:87:4d:21:2b:b6:ce:32:84:35:51:94:69:17:07:49:cc: db:15:e9:02:65:4d:9e:1c:5a:bb:ef:82:f2:e4:c2:37:73:f8: 8a:45:c1:7d:36:cc:e1:4b:a6:3e:67:83:29:3e:23:1c:da:7f: 06:64:8a:ce:1c:56:1e:98:c9:a3:e4:56:ae:df:10:06:80:a9: cd:1c:66:91:dc:19:53:c5:22:64:10:32:c7:79:4b:45:62:9b: d8:64:2e:bf:98:4f:56:c2:bc:8b:b1:e3:72:da:4e:5f:74:85: 84:a2:c9:af:4b:75:9b:69:d1:a7:e2:ff:a3:dd:d8:90:a3:25: bb:d6:bf:bf:c8:56:1c:f6:bc:e3:dc:b9:38:3a:0d:31:96:b6: b6:1e:ae:a5:56:65:0c:7f:8e:ac:08:18:1d:d2:88:52:05:09: d1:5f:00:10:e4:7b:75:51:ff:f7:8c:34:28:f7:11:7a:e4:ab: f9:c1:11:c4:52:86:7e:14:26:60:de:95:fd:f7:72:73:a1:de: 92:1c:b7:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z4BfKtcc1zcOpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk NjVhNTY1ZjctMWZmNS00ZWI2LWI2NzctNWE0YjNhMzk2YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vQH3h/i7UTEWwWFx/hlgqXhxPs3GZCeFjyV aH3Wp1KrDSqxQW9pG8rn7CjOvfE4dZrPwQo7Kds9H4C0mhuPIr6BdWUqfNIzf5UK Vy9h9zv6TvlSH9eByxNrEmLZW8kAAT8UyqbuP2cS2nPpWLnZBC7UP0XqY3fM6KLI 10/b5piW0dmeB0WnQdKSOXFdjAtz2lscIM01ec1WuWyH3TZkGextc2aPg+yrOeif TiRelyDEafHIenNQ/XvnqOq3DGMPk3qA9WGkL7pkjSJ0wG5g2odd8sRFhJTOQhB6 gFABzFCcMjc2YDkwOOagbBOdn8cN+9QB/CfjYhGoxtqzoAoRzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPlnRMwqK//6xEOqAYVjT6hVOdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYWZiZDEzOTEtMDY0NS0z ZDRiLTk3MDctYmZkMjI3NGIwMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOlUDQ7rOe6Zp9TpG9Y1IFXnPF5RZxWtrpxLwEWLxUiWBjIXlcs89B6 p8DPl5FR44CQ8EeCiHFeh00hK7bOMoQ1UZRpFwdJzNsV6QJlTZ4cWrvvgvLkwjdz +IpFwX02zOFLpj5ngyk+IxzafwZkis4cVh6YyaPkVq7fEAaAqc0cZpHcGVPFImQQ Msd5S0Vim9hkLr+YT1bCvIux43LaTl90hYSiya9LdZtp0afi/6Pd2JCjJbvWv7/I Vhz2vOPcuTg6DTGWtrYerqVWZQx/jqwIGB3SiFIFCdFfABDke3VR//eMNCj3EXrk q/nBEcRShn4UJmDelf33cnOh3pIct3o= -----END CERTIFICATE-----Generated at Fri Jul 24 21:09:07 2026 by rpki-client