$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json) Hash identifier: x3Nlo5DSTitJ+fGho5Dlallv+Zk9rN1LI+ZuUv7xfqo= Subject key identifier: 1C:D2:04:8B:5F:44:80:52:BE:5D:2B:24:2C:E8:28:9E:72:96:07:7C Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f Certificate serial: 010D0C9F4328584E842A3889A3DD4D8D626AAD00 Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 4393 IP address blocks: 209.251.198.0/23 maxlen: 23 209.251.200.0/21 maxlen: 21 209.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:38:89:a3:dd:4d:8d:62:6a:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=d6d00e4e-dc77-44f1-b787-7f5b61ffc1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:e2:97:03:b8:6c:be:3e:12:70:dd:9e:01: 75:6d:ae:16:4f:e1:72:af:1c:68:3e:2c:b3:e0:c9: 1a:1c:01:56:6d:4a:73:6b:81:e2:b7:6d:10:8f:70: 02:45:60:4c:59:c4:73:be:9f:69:87:d7:6e:4c:84: e8:eb:6f:44:90:66:8d:02:f7:fb:07:43:65:21:8d: 8c:3b:c5:84:88:1a:ef:87:7b:2c:47:73:91:8d:dd: 77:90:18:f3:4c:bf:d3:31:2f:b8:65:56:cd:af:7d: 12:85:63:f7:de:50:94:8e:70:c8:97:ee:38:69:83: 86:ac:6b:17:78:20:e6:61:fd:d4:09:62:98:34:9c: ff:aa:8f:c4:16:8e:dc:43:0d:1e:b1:4b:29:3b:fa: 61:f0:97:10:0a:c9:09:63:85:2b:2f:f7:02:9b:d6: 78:fe:49:fb:df:ce:ac:da:53:f1:52:e1:73:a3:00: 65:fd:19:cf:22:eb:14:97:3d:be:e2:51:00:e9:a6: fe:39:bf:98:33:30:92:c8:1c:43:4b:8f:21:fe:20: b7:db:6e:18:45:a5:cf:28:d2:d1:c0:87:e0:6c:8e: 7a:61:91:03:42:07:45:d0:d1:29:28:c2:b9:f3:bf: 19:d5:e9:78:68:f6:99:6f:26:fe:be:40:74:70:e9: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D2:04:8B:5F:44:80:52:BE:5D:2B:24:2C:E8:28:9E:72:96:07:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl X509v3 Authority Key Identifier: keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer sbgp-ipAddrBlock: critical IPv4: 209.251.198.0-209.251.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ad:5e:76:28:49:03:56:ad:f9:80:78:1c:bd:bc:08:c1:84: 84:58:ef:09:7c:94:53:80:a2:78:95:09:60:ef:3d:b0:e0:57: d4:58:d6:58:d4:17:80:d9:e0:7e:7f:70:74:d8:e0:2e:51:0b: 17:3f:8d:b0:d6:b7:9f:87:27:83:1d:b1:27:d6:7b:96:34:c4: 99:2b:80:bd:8d:e7:6b:6d:69:bf:4f:e3:cf:d1:19:d9:34:b3: 33:7a:69:4d:5e:67:ec:67:09:9d:17:3f:81:a5:9c:f7:e9:80: 0e:16:ca:f7:61:7f:d2:ec:0a:8d:9e:39:66:92:93:b9:47:cf: d7:63:34:87:6e:46:7b:aa:bf:af:96:6a:40:7b:e1:a0:e6:ed: 83:ba:32:2e:65:e8:19:2c:f8:e6:78:b9:8c:73:fe:44:da:14: 47:1c:5f:91:b9:22:ec:9e:96:d8:55:5d:08:bb:8b:d4:2d:88: 3a:25:4f:35:b1:5a:86:04:e3:3a:a8:ad:be:9b:fa:66:d4:39: 3a:43:8b:e9:54:12:15:a4:84:e4:d2:72:a4:34:f7:a4:9c:01: 06:0d:00:f6:12:16:7b:d4:cd:33:00:59:ac:74:84:52:bc:9e: 57:bf:1e:76:14:cb:59:5c:f8:8a:68:2c:c5:82:a2:52:af:cc: e9:2f:97:dd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6EKjiJo91NjWJqrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0 NTlmMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk ZDZkMDBlNGUtZGM3Ny00NGYxLWI3ODctN2Y1YjYxZmZjMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uHilwO4bL4+EnDdngF1ba4WT+FyrxxoPiyz 4MkaHAFWbUpza4Hit20Qj3ACRWBMWcRzvp9ph9duTITo629EkGaNAvf7B0NlIY2M O8WEiBrvh3ssR3ORjd13kBjzTL/TMS+4ZVbNr30ShWP33lCUjnDIl+44aYOGrGsX eCDmYf3UCWKYNJz/qo/EFo7cQw0esUspO/ph8JcQCskJY4UrL/cCm9Z4/kn7386s 2lPxUuFzowBl/RnPIusUlz2+4lEA6ab+Ob+YMzCSyBxDS48h/iC3224YRaXPKNLR wIfgbI56YZEDQgdF0NEpKMK5878Z1el4aPaZbyb+vkB0cOkIIQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBzSBItfRIBSvl0rJCzoKJ5ylgd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3 MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvNWM4MGEwOGMtZTQ5ZC0z M2Y0LWI2MTctNWFkYTVmMmFmODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTMzNzBhOGMtN2UzOS00OTBkLTk4 NWEtYTQ3OGNlNTQ0NTlmL2UzMzcwYThjLTdlMzktNDkwZC05ODVhLWE0NzhjZTU0 NDU5Zi5jcmwwHwYDVR0jBBgwFoAU4uoLRS/p/vRebN8XfsgDYlxFUiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4 Y2U1NDQ1OWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHR+8YD BAXR+8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHa1edihJA1at+YB4HL28CMGEhFjvCXyUU4CieJUJYO89 sOBX1FjWWNQXgNngfn9wdNjgLlELFz+NsNa3n4cngx2xJ9Z7ljTEmSuAvY3na21p v0/jz9EZ2TSzM3ppTV5n7GcJnRc/gaWc9+mADhbK92F/0uwKjZ45ZpKTuUfP12M0 h25Ge6q/r5ZqQHvhoObtg7oyLmXoGSz45ni5jHP+RNoURxxfkbki7J6W2FVdCLuL 1C2IOiVPNbFahgTjOqitvpv6ZtQ5OkOL6VQSFaSE5NJypDT3pJwBBg0A9hIWe9TN MwBZrHSEUryeV78edhTLWVz4imgsxYKiUq/M6S+X3Q== -----END CERTIFICATE-----Generated at Fri Jul 24 19:15:26 2026 by rpki-client