$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa File: d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (raw, json) Hash identifier: 90HRd7gAK4ZmS+G5cHWr24xMqYSp7DB65XxuxaCeC38= Subject key identifier: DE:41:5A:2E:8D:6D:C5:C2:85:97:B2:3B:E3:A1:76:62:B1:58:5F:20 Certificate issuer: /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Certificate serial: 010D0C9F4328584E8DEFA3B74341FAD4AE2D1B00 Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 208.71.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:a3:b7:43:41:fa:d4:ae:2d:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=a8bb5ea2-2e97-4ca3-a281-209d0e54c522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:d2:af:c9:5d:1d:14:6c:a6:21:06:56:3d: 91:42:fb:33:4a:45:15:f2:30:65:9e:60:91:4f:81: e6:99:54:fc:db:4f:19:71:36:c2:3c:50:7d:70:1f: 36:f9:11:bc:1b:2e:fd:74:fa:41:12:83:3b:36:d3: a2:02:82:62:01:bc:58:6e:94:f8:de:14:ed:e8:60: df:51:90:6b:dc:31:46:ee:ea:ff:76:ad:ae:f9:2e: 59:87:97:6e:6a:67:27:e0:11:09:b4:cc:56:5c:f0: b2:73:af:a0:f6:bd:43:e1:7a:eb:88:c4:37:1f:20: 18:1a:6f:b5:83:3f:0e:51:83:ef:e1:74:b1:c5:63: 64:c0:99:a7:20:2b:6f:1a:ff:44:e2:59:30:61:f7: e8:63:98:9b:8a:e1:d6:eb:92:bf:6b:d9:2b:f3:0f: db:4b:9b:d9:cd:f8:3c:1f:86:23:c3:b5:36:7c:fe: ca:d8:c0:9b:4c:73:6a:cd:35:21:a2:e1:1a:bb:dd: 25:54:60:e2:d0:96:f0:5f:3b:d4:9c:03:6c:74:0c: 3e:e3:a3:d9:c3:2e:00:c3:a2:7d:52:3d:6f:55:4e: 82:c8:e0:57:5b:90:2a:6d:f3:45:53:e3:85:4d:ce: bb:6b:58:c6:7b:bd:21:ef:e0:d4:46:38:17:97:0d: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:41:5A:2E:8D:6D:C5:C2:85:97:B2:3B:E3:A1:76:62:B1:58:5F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl X509v3 Authority Key Identifier: keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer sbgp-ipAddrBlock: critical IPv4: 208.71.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:33:03:1a:34:2a:a7:69:75:e8:5b:11:13:b8:82:4a:31:05: 16:6d:c5:d9:4d:ae:a5:02:34:33:bc:32:8f:8d:ab:e3:d9:ba: a0:fa:4c:08:a2:5c:12:b6:e8:52:6e:16:01:e2:e0:c0:82:ee: 2f:30:c5:2c:35:c6:2c:15:3e:90:ef:25:03:21:c8:90:7d:59: 5e:bd:8c:36:87:2e:77:2d:58:ea:ee:ca:08:9d:48:6f:34:40: db:1b:50:31:75:f5:ae:cd:b5:f5:2c:81:7e:16:02:bc:dc:be: 45:48:4b:2c:19:75:a9:74:3e:d9:1f:ea:3b:43:f5:dd:d3:56: 74:0c:1f:4d:f9:37:e4:2b:be:b8:15:61:ed:4b:62:3b:77:91: f7:17:3b:3c:3e:3d:35:9f:72:38:84:92:25:4a:62:eb:40:aa: 18:db:fa:e2:bb:dc:75:1a:52:c5:f5:76:86:d9:2a:2b:1a:0a: 41:0a:40:45:0b:85:1d:88:a8:5a:eb:20:0b:bb:21:3f:0c:ea: 89:3d:2c:e7:90:d6:35:52:83:5a:10:0d:0e:38:92:6a:b8:c1: 2b:81:a3:1e:02:ac:b0:df:bf:7b:ae:3d:cf:ef:65:79:89:49: 98:c0:9c:2c:33:b9:0e:20:76:c6:40:67:6a:73:c8:a4:0a:ee: a3:d4:05:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N76O3Q0H61K4tGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5 MWUzMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YThiYjVlYTItMmU5Ny00Y2EzLWEyODEtMjA5ZDBlNTRjNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLLSr8ldHRRspiEGVj2RQvszSkUV8jBlnmCR T4HmmVT8208ZcTbCPFB9cB82+RG8Gy79dPpBEoM7NtOiAoJiAbxYbpT43hTt6GDf UZBr3DFG7ur/dq2u+S5Zh5duamcn4BEJtMxWXPCyc6+g9r1D4XrriMQ3HyAYGm+1 gz8OUYPv4XSxxWNkwJmnICtvGv9E4lkwYffoY5ibiuHW65K/a9kr8w/bS5vZzfg8 H4Yjw7U2fP7K2MCbTHNqzTUhouEau90lVGDi0JbwXzvUnANsdAw+46PZwy4Aw6J9 Uj1vVU6CyOBXW5AqbfNFU+OFTc67a1jGe70h7+DURjgXlw33NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5BWi6NbcXChZeyO+OhdmKxWF8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWFh MTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvZDVkYmMzYjktYTQ3Yi0z ZGMwLTlkOTQtZTY2ZDE5NjI2OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzlhYTE1NjctODlhOS00Y2U0LThi ZDctZTYyNDk5OTA5MWUzL2M5YWExNTY3LTg5YTktNGNlNC04YmQ3LWU2MjQ5OTkw OTFlMy5jcmwwHwYDVR0jBBgwFoAU9uKd3POYaXwTuehSHUAHiB0hTQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0 OTk5MDkxZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0zAxo0KqdpdehbERO4gkoxBRZtxdlNrqUCNDO8Mo+Nq+PZuqD6TAii XBK26FJuFgHi4MCC7i8wxSw1xiwVPpDvJQMhyJB9WV69jDaHLnctWOruygidSG80 QNsbUDF19a7NtfUsgX4WArzcvkVISywZdal0Ptkf6jtD9d3TVnQMH035N+QrvrgV Ye1LYjt3kfcXOzw+PTWfcjiEkiVKYutAqhjb+uK73HUaUsX1dobZKisaCkEKQEUL hR2IqFrrIAu7IT8M6ok9LOeQ1jVSg1oQDQ44kmq4wSuBox4CrLDfv3uuPc/vZXmJ SZjAnCwzuQ4gdsZAZ2pzyKQK7qPUBRQ= -----END CERTIFICATE-----Generated at Fri Jul 24 16:57:27 2026 by rpki-client