$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa File: 150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa (raw, json) Hash identifier: sAC/MuR2jPC7RcIa54ZevjVqtDGWDuHfxzt2Iet+/JI= Subject key identifier: A0:78:3B:52:9A:D8:88:64:1E:49:F5:02:B5:31:5A:06:29:9C:39:0C Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401 Certificate serial: 010D0C9F4328584E69C06267A93202B74C143680 Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa Signing time: Mon 06 Jul 2026 21:56:01 +0000 ROA not before: Mon 06 Jul 2026 21:56:01 +0000 ROA not after: Sun 04 Oct 2026 21:56:01 +0000 asID: 399892 IP address blocks: 170.39.172.0/22 maxlen: 24 216.73.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:c0:62:67:a9:32:02:b7:4c:14:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401 Validity Not Before: Jul 6 21:56:01 2026 GMT Not After : Oct 4 21:56:01 2026 GMT Subject: CN=084b38d2-7265-4aed-9490-193822792f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:70:44:7a:5d:b2:79:e6:56:d1:42:e6:15:e9: af:0e:2a:87:d3:0a:8d:28:42:7a:e8:dc:1b:d9:e6: c5:45:2d:45:6d:78:07:0d:6e:8b:0b:f3:f6:36:bd: 10:0d:4f:30:2f:65:69:d8:bd:b3:dc:8d:ac:b9:b5: f6:a4:09:fd:c0:73:95:17:4e:7a:47:c5:c6:3f:91: 21:d0:b6:a5:eb:6e:6a:ca:c9:4c:5d:6a:5c:3c:8e: 96:fb:53:b9:84:d2:32:34:54:b4:e0:74:57:f4:3d: 41:15:71:32:40:db:68:b3:a7:95:76:08:4a:94:89: 61:eb:2a:4d:a3:0c:04:04:4d:e1:20:35:d5:63:90: 57:ae:3c:db:5a:4e:c2:56:a8:97:0a:36:12:4c:2e: c6:c5:53:8c:06:b2:6a:5f:99:87:7f:bc:c0:27:d5: a3:86:20:b2:51:8c:d0:f5:97:bc:de:f8:0f:84:55: 23:51:d1:c8:20:bf:8c:ab:14:a7:8c:37:88:59:3c: 36:2b:b1:94:16:5d:43:4f:3b:0c:e2:27:14:bc:c7: 37:c9:9f:6e:02:25:38:43:0b:74:e2:75:5b:c2:58: e1:e0:d1:2d:13:23:d6:ac:1d:54:d4:f9:a3:b9:12: 0c:e2:ee:23:19:30:b7:97:b0:94:8a:c6:a4:44:24: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:78:3B:52:9A:D8:88:64:1E:49:F5:02:B5:31:5A:06:29:9C:39:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl X509v3 Authority Key Identifier: keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer sbgp-ipAddrBlock: critical IPv4: 170.39.172.0/22 216.73.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:e2:8d:6c:e3:48:f2:94:22:f1:ec:e8:30:7d:e9:6a:9e:7f: 46:c1:ca:4a:58:84:7b:28:89:97:a1:23:52:53:a7:26:86:a4: bb:a4:b9:f7:42:d7:2a:a8:42:a9:6a:6b:07:a0:9a:3d:1a:09: 34:b7:a0:57:d1:00:d1:c9:0a:52:96:5a:83:d2:57:e3:26:67: aa:16:1a:01:44:5c:f4:84:89:b8:ff:25:b4:54:ba:b0:99:05: 2a:84:c0:33:7d:8b:03:84:2d:a5:59:b2:16:f9:36:2d:b9:b9: 3f:70:6f:a4:d1:87:92:ec:5a:fc:1d:4e:8f:9b:de:6a:ed:10: e4:69:16:7d:b1:40:59:5d:5c:21:76:28:96:f0:64:33:de:80: 4d:c2:b0:43:b2:42:07:f4:d4:77:73:97:6f:99:cf:0e:f0:4a: 94:32:90:a3:0e:ae:eb:c0:ab:b5:f8:28:a1:2b:88:9d:94:06: 3f:67:fc:bc:0b:38:7b:88:8d:fa:ab:ff:7b:57:ac:a3:2e:3b: 6b:8b:14:53:cd:87:fc:dc:e7:c6:d5:ba:e6:ca:1c:05:0f:82: f6:35:b1:67:d1:86:06:55:66:25:86:c8:d6:84:4a:8d:ed:d4: ff:45:6b:ff:1c:56:b6:1b:54:e9:a2:01:8f:ac:9e:fc:6f:7f: 21:91:06:d2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5pwGJnqTICt0wUNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMyMzc0MDgtMDg4OC00YjFmLWJlZDUtYTQ1ODg2NjU2 NDAxMB4XDTI2MDcwNjIxNTYwMVoXDTI2MTAwNDIxNTYwMVowLzEtMCsGA1UEAxMk MDg0YjM4ZDItNzI2NS00YWVkLTk0OTAtMTkzODIyNzkyZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XBEel2yeeZW0ULmFemvDiqH0wqNKEJ66Nwb 2ebFRS1FbXgHDW6LC/P2Nr0QDU8wL2Vp2L2z3I2subX2pAn9wHOVF056R8XGP5Eh 0Lal625qyslMXWpcPI6W+1O5hNIyNFS04HRX9D1BFXEyQNtos6eVdghKlIlh6ypN owwEBE3hIDXVY5BXrjzbWk7CVqiXCjYSTC7GxVOMBrJqX5mHf7zAJ9WjhiCyUYzQ 9Ze83vgPhFUjUdHIIL+MqxSnjDeIWTw2K7GUFl1DTzsM4icUvMc3yZ9uAiU4Qwt0 4nVbwljh4NEtEyPWrB1U1PmjuRIM4u4jGTC3l7CUisakRCS7IwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKB4O1Ka2IhkHkn1ArUxWgYpnDkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIz NzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4ODY2NTY0MDEvMTUwZjFjMGQtOGM2YS0z MTc0LWI4MGEtOTg5MDQyYmY5ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyMzc0MDgtMDg4OC00YjFmLWJl ZDUtYTQ1ODg2NjU2NDAxL2QzMjM3NDA4LTA4ODgtNGIxZi1iZWQ1LWE0NTg4NjY1 NjQwMS5jcmwwHwYDVR0jBBgwFoAU6NdV2XoY+vnTrgS31DEuvEX9JEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIzNzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4 ODY2NTY0MDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqiesAwQC 2EmYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANvijWzjSPKUIvHs6DB96Wqef0bBykpYhHsoiZehI1JTpyaG pLukufdC1yqoQqlqawegmj0aCTS3oFfRANHJClKWWoPSV+MmZ6oWGgFEXPSEibj/ JbRUurCZBSqEwDN9iwOELaVZshb5Ni25uT9wb6TRh5LsWvwdTo+b3mrtEORpFn2x QFldXCF2KJbwZDPegE3CsEOyQgf01Hdzl2+Zzw7wSpQykKMOruvAq7X4KKEriJ2U Bj9n/LwLOHuIjfqr/3tXrKMuO2uLFFPNh/zc58bVuubKHAUPgvY1sWfRhgZVZiWG yNaESo3t1P9Fa/8cVrYbVOmiAY+snvxvfyGRBtI= -----END CERTIFICATE-----Generated at Fri Jul 24 17:39:47 2026 by rpki-client