$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa File: 409dcb1b-8e11-32f3-b345-ba1e33a44598.roa (raw, json) Hash identifier: W2JOw7BRx4lOmjHFW/Hv3FgWXUZcgKZ4qICEGmdSkkc= Subject key identifier: 26:85:89:66:16:F8:ED:A1:02:A8:8A:04:FE:41:3B:73:5D:59:AC:5D Certificate issuer: /CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Certificate serial: 010D0C9F4328584E48249332D473BE1E6528E020 Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 32746 IP address blocks: 204.8.88.0/22 maxlen: 24 208.86.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:93:32:d4:73:be:1e:65:28:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=a756eb26-90d6-4a75-8583-bf07eb06059e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:e8:6a:a8:2e:df:09:f1:fd:1d:ae:b0:74: e2:89:01:db:47:6f:d1:43:cc:00:78:5f:75:c7:b6: 0a:e1:1b:09:ac:3b:c6:ff:3f:8a:cd:fe:1a:61:08: f7:b6:92:9c:a9:90:0a:7f:96:f3:b3:29:26:1e:29: dd:23:2c:d5:6b:4d:1c:27:f6:c2:5b:18:ac:af:32: 9b:1f:26:8a:2d:69:13:15:79:30:46:85:f6:86:21: 3d:5d:c7:9e:cd:c4:d3:84:6e:4d:90:87:84:31:c5: 65:26:11:a0:3e:29:cd:db:61:1a:82:6d:6d:d3:42: 9b:31:2b:9d:5f:d4:97:00:78:33:3a:ca:d8:ff:18: 70:c4:3d:9a:56:e2:50:a0:b6:8d:51:b7:29:a7:c6: be:2e:f3:08:a8:8f:c5:00:ac:dd:65:b7:f2:86:ad: a5:83:88:11:0a:ce:98:2e:76:ff:22:e6:1e:51:57: 44:a8:7b:b0:c7:d1:c6:fe:bb:56:d8:ce:e4:37:c1: a2:5b:f7:f4:25:4c:46:cd:22:1a:3b:15:b5:02:0e: 77:ee:f1:48:64:6d:e2:0b:0f:aa:75:ce:5a:8e:78: 4b:09:5a:0d:3b:99:df:c5:75:03:5d:3d:13:4c:1e: 07:00:6e:3a:a2:09:14:9c:4c:75:cf:bd:7a:b5:58: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:85:89:66:16:F8:ED:A1:02:A8:8A:04:FE:41:3B:73:5D:59:AC:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl X509v3 Authority Key Identifier: keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer sbgp-ipAddrBlock: critical IPv4: 204.8.88.0/22 208.86.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5a:3d:1e:40:a8:ae:1b:2f:5a:99:c7:49:5a:78:c6:6f:15: ef:d3:76:c6:0f:62:2f:fd:c4:78:7f:99:35:14:f9:25:75:95: 50:ef:2c:ba:35:74:2f:c7:69:ec:3c:82:f4:fd:33:34:51:75: b5:85:d4:f0:62:00:32:15:14:e4:0a:39:1f:71:5c:e4:dd:0c: a0:89:65:d1:49:59:70:7d:5f:b7:0b:89:1a:ef:f5:6c:f6:e6: 2f:19:bb:65:1b:3f:70:21:b6:93:9c:20:98:1b:0c:d7:81:41: 06:23:80:84:74:a5:98:31:66:38:05:0c:72:27:09:99:97:85: 7f:b1:d6:56:db:97:e2:bf:b4:12:5c:ca:ab:5c:ed:5c:c6:55: 0b:c2:e1:6f:27:af:89:d8:24:60:ab:67:36:10:25:09:49:42: 3b:86:a0:ea:39:f9:3b:70:0a:63:81:37:db:1a:0b:e4:83:7f: ac:0f:03:fd:41:f6:7f:c3:29:bb:8e:97:63:29:b0:56:3b:20: 8f:c7:1e:f3:7e:62:e2:d4:6c:71:96:5e:57:a8:23:96:a7:26: b4:f2:e3:f9:e0:d4:a5:8e:39:1f:11:43:7e:07:67:93:64:5e: 53:af:78:ab:5e:ea:82:a8:ff:d1:49:bd:e2:40:2c:00:97:b0: b0:03:ec:97 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5IJJMy1HO+HmUo4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNm ODUwMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YTc1NmViMjYtOTBkNi00YTc1LTg1ODMtYmYwN2ViMDYwNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8zoaqgu3wnx/R2usHTiiQHbR2/RQ8wAeF91 x7YK4RsJrDvG/z+Kzf4aYQj3tpKcqZAKf5bzsykmHindIyzVa00cJ/bCWxisrzKb HyaKLWkTFXkwRoX2hiE9XceezcTThG5NkIeEMcVlJhGgPinN22Eagm1t00KbMSud X9SXAHgzOsrY/xhwxD2aVuJQoLaNUbcpp8a+LvMIqI/FAKzdZbfyhq2lg4gRCs6Y Lnb/IuYeUVdEqHuwx9HG/rtW2M7kN8GiW/f0JUxGzSIaOxW1Ag537vFIZG3iCw+q dc5ajnhLCVoNO5nfxXUDXT0TTB4HAG46ogkUnEx1z716tViKqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCaFiWYW+O2hAqiKBP5BO3NdWaxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kM2Jm OTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvNDA5ZGNiMWItOGUxMS0z MmYzLWIzNDUtYmExZTMzYTQ0NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDNiZjkyM2QtNmM5ZC00NzEzLTg4 N2YtMWYzMDA3NWNmODUwL2QzYmY5MjNkLTZjOWQtNDcxMy04ODdmLTFmMzAwNzVj Zjg1MC5jcmwwHwYDVR0jBBgwFoAUW36UafuPFj/MySVSVEX7bbvaxbswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMw MDc1Y2Y4NTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAhYAwQC 0FYoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIZaPR5AqK4bL1qZx0laeMZvFe/TdsYPYi/9xHh/mTUU+SV1 lVDvLLo1dC/Haew8gvT9MzRRdbWF1PBiADIVFOQKOR9xXOTdDKCJZdFJWXB9X7cL iRrv9Wz25i8Zu2UbP3AhtpOcIJgbDNeBQQYjgIR0pZgxZjgFDHInCZmXhX+x1lbb l+K/tBJcyqtc7VzGVQvC4W8nr4nYJGCrZzYQJQlJQjuGoOo5+TtwCmOBN9saC+SD f6wPA/1B9n/DKbuOl2MpsFY7II/HHvN+YuLUbHGWXleoI5anJrTy4/ng1KWOOR8R Q34HZ5NkXlOveKte6oKo/9FJveJALACXsLAD7Jc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:47:10 2026 by rpki-client