$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa File: bf485a80-ca0b-337a-ab13-dda71416c121.roa (raw, json) Hash identifier: xjDSJBODPskq7l40gPAoDcrtu2WDWZGNrelXONazkTo= Subject key identifier: 28:87:D0:D5:04:E0:B8:45:59:48:63:B8:9A:40:C2:4C:9D:F0:29:1B Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E9384F8D655940337FF9DCC80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 9009 IP address blocks: 207.230.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f8:d6:55:94:03:37:ff:9d:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=8a6c0507-75cf-462e-8b1a-e8d7e74c52f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3d:b7:ca:34:08:d7:74:42:61:79:fb:3f:4a: 17:c2:f0:bd:61:ca:8b:14:6c:3d:f8:be:c9:43:85: b8:2c:9b:49:c5:e7:a9:ac:b4:6a:db:b4:7d:8b:ab: 00:22:28:03:63:9e:66:93:6b:72:49:79:ff:5e:a4: 3f:06:21:6b:ac:db:c0:b2:e9:b6:69:dd:37:91:e4: e4:91:47:e5:10:80:1b:6b:78:5c:ca:34:f9:f6:06: f0:03:03:45:2d:a2:e7:26:ca:06:aa:76:f7:5e:c9: fd:7c:71:5b:29:28:2b:0e:a3:23:2c:ed:7b:59:1d: b5:c0:c1:af:8e:d9:21:5a:33:2f:f4:b1:be:a5:38: cb:f6:47:91:30:17:e6:b4:82:64:6f:ea:00:5e:4e: 6a:12:87:87:6a:4a:48:7a:05:8c:d5:78:47:4c:4a: 90:bd:da:b4:23:46:02:31:31:38:7b:e5:27:23:3e: 06:c3:60:92:92:9c:f3:a8:19:8b:e8:57:e3:9f:72: 52:1e:25:69:61:06:c8:1e:82:fc:a4:84:36:d1:73: c9:af:de:cc:a7:e1:fd:b8:fe:77:f8:2e:c7:40:ed: fc:03:e5:c8:fd:62:10:87:a3:58:08:81:09:2b:46: 27:a0:23:ae:58:70:4a:54:ed:dc:cb:3c:c4:28:cd: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:D0:D5:04:E0:B8:45:59:48:63:B8:9A:40:C2:4C:9D:F0:29:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5a:f8:58:c7:19:ba:db:2a:fb:84:77:09:3a:31:4c:cd:5a: e0:01:f5:5c:62:7f:aa:97:d0:e0:ad:c7:67:ad:ea:1d:0e:c4: 5b:9d:31:e6:18:7a:d3:df:b1:80:67:b3:fc:ae:3e:9a:3c:2d: 98:43:71:09:9d:f5:55:78:da:12:89:5c:c6:cc:f7:42:be:42: 33:0c:6b:27:52:04:00:fd:01:00:0a:4f:27:31:ee:e3:f9:57: db:43:a4:f0:a3:ca:5e:2a:6e:15:dd:96:ba:ca:d7:02:bf:1f: 88:f2:84:36:5f:04:3d:8d:0d:7c:b4:14:d2:bb:b7:35:95:b9: 75:78:2e:cd:69:70:19:74:72:12:2f:14:c5:21:12:34:a7:b8: 25:a3:04:e3:15:c6:c0:3d:1b:a6:e8:a7:f4:cd:14:5a:b7:8a: 8d:96:59:79:fb:2b:a3:4a:6d:95:47:01:58:42:db:11:f0:ad: 9c:e2:d3:82:05:de:61:d9:b5:1e:03:14:b9:95:1c:1e:0d:1f: e5:d8:f5:22:7a:57:27:f0:17:b3:f3:80:8e:80:5a:ca:d1:ad: 08:58:82:c3:5c:af:f6:ce:4f:99:29:f1:a4:f2:44:63:78:4d: 80:30:6d:05:58:cd:69:65:99:11:b1:df:12:f9:b1:0d:31:29: e1:1c:32:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPjWVZQDN/+dzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk OGE2YzA1MDctNzVjZi00NjJlLThiMWEtZThkN2U3NGM1MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj23yjQI13RCYXn7P0oXwvC9YcqLFGw9+L7J Q4W4LJtJxeeprLRq27R9i6sAIigDY55mk2tySXn/XqQ/BiFrrNvAsum2ad03keTk kUflEIAba3hcyjT59gbwAwNFLaLnJsoGqnb3Xsn9fHFbKSgrDqMjLO17WR21wMGv jtkhWjMv9LG+pTjL9keRMBfmtIJkb+oAXk5qEoeHakpIegWM1XhHTEqQvdq0I0YC MTE4e+UnIz4Gw2CSkpzzqBmL6Ffjn3JSHiVpYQbIHoL8pIQ20XPJr97Mp+H9uP53 +C7HQO38A+XI/WIQh6NYCIEJK0YnoCOuWHBKVO3cyzzEKM1b5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiH0NUE4LhFWUhjuJpAwkyd8CkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmY0ODVhODAtY2EwYi0z MzdhLWFiMTMtZGRhNzE0MTZjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz+Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9a+FjHGbrbKvuEdwk6MUzNWuAB9Vxif6qX0OCtx2et6h0OxFudMeYY etPfsYBns/yuPpo8LZhDcQmd9VV42hKJXMbM90K+QjMMaydSBAD9AQAKTycx7uP5 V9tDpPCjyl4qbhXdlrrK1wK/H4jyhDZfBD2NDXy0FNK7tzWVuXV4Ls1pcBl0chIv FMUhEjSnuCWjBOMVxsA9G6bop/TNFFq3io2WWXn7K6NKbZVHAVhC2xHwrZzi04IF 3mHZtR4DFLmVHB4NH+XY9SJ6VyfwF7PzgI6AWsrRrQhYgsNcr/bOT5kp8aTyRGN4 TYAwbQVYzWllmRGx3xL5sQ0xKeEcMlQ= -----END CERTIFICATE-----Generated at Fri Jul 24 01:57:06 2026 by rpki-client