$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa File: f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa (raw, json) Hash identifier: yUU7NmZuoxWBWtSR3aB8PAIq/0av0zR4BX2wXD3UNZ0= Subject key identifier: 6E:AF:8E:44:86:7B:69:F9:42:3C:C7:BE:E3:08:DA:C1:92:A3:99:D7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E86F4E3924FE92EFA326EBBA0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 834 IP address blocks: 65.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:e3:92:4f:e9:2e:fa:32:6e:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=ff7455b7-31ff-4941-b778-24ecde3e9913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:7c:99:c0:c2:b2:2f:ea:04:ca:62:2a:4f: 2a:9a:a9:5f:ec:3e:38:53:00:d9:62:d6:81:21:fb: 84:fe:32:ca:28:dc:c7:c4:cc:cb:9e:f2:a3:7f:36: 0f:9c:32:bc:b8:cf:3f:81:7c:3d:a0:54:c5:f5:be: 2e:8c:53:39:4e:b7:58:59:d1:f1:d7:59:52:11:d2: 07:43:6a:7c:86:b0:c3:07:b8:65:67:9c:2d:ba:ee: 0f:00:c5:0f:fb:72:dd:dc:f1:b9:bd:c1:b3:81:99: 61:66:5c:1f:43:03:91:6e:66:50:c8:76:d9:ea:4b: fd:3a:43:eb:cd:7f:b0:cd:95:35:30:38:27:b0:cb: aa:1c:eb:6c:73:12:d0:10:a4:0e:22:a1:8c:b7:4c: ee:4b:f8:cd:48:1a:99:c4:78:e7:38:f2:fc:35:17: 55:86:8b:d7:97:86:23:c1:73:61:6d:2e:89:6a:32: 92:43:4c:b5:66:ab:57:c0:13:4f:88:98:bd:80:3e: be:81:f7:3b:f6:11:41:14:21:0b:63:68:d4:7b:1d: 80:17:2b:dd:71:52:02:90:61:31:79:77:db:28:ed: 8c:1f:ec:6c:14:a3:ef:9f:2f:91:a0:83:03:90:57: e3:b2:53:8f:22:3b:33:97:00:95:a0:4d:34:f1:13: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:8E:44:86:7B:69:F9:42:3C:C7:BE:E3:08:DA:C1:92:A3:99:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a5:6a:96:5a:26:2c:c4:8d:fe:0a:9d:8d:91:9b:69:41:9d: e5:ef:3c:ad:d9:af:83:22:4d:6f:09:bc:38:43:0d:f6:e4:58: 0c:50:51:00:05:66:3f:7a:35:fb:d3:3d:ae:b1:0a:77:00:5b: 61:87:06:5a:17:34:92:da:43:e6:be:da:07:6c:92:a1:97:76: 15:9e:15:0e:0e:03:d7:2d:b8:b4:52:6d:aa:2e:7d:a3:dc:24: 46:ed:94:25:a2:3e:91:5f:74:4d:39:f5:45:f5:25:a8:72:08: 0b:ae:6e:f0:9d:77:23:a6:54:27:70:cd:13:23:94:b4:ed:6c: c8:bd:e9:62:ca:64:f2:43:ce:a8:2a:fb:28:6f:98:f3:5a:88: 9c:a0:7c:b7:e9:ac:24:5e:07:d5:d1:a4:30:89:a8:d0:39:28: 38:e3:c6:12:da:21:f7:e3:24:81:44:a4:61:fc:e4:09:2c:b4: 91:d0:8f:e6:17:60:aa:b8:88:3f:a5:6f:08:90:48:cb:e7:25: e3:c4:21:d7:fd:37:46:92:68:4e:a7:cf:41:3b:a4:1e:56:55: db:70:cd:08:f9:28:85:fe:37:1e:9d:1e:6a:58:c3:ad:e6:f5: 77:b6:7a:1d:31:49:64:43:56:d9:6e:6a:b8:85:5e:db:c8:22: 59:a7:9a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9OOST+ku+jJuu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZmY3NDU1YjctMzFmZi00OTQxLWI3NzgtMjRlY2RlM2U5OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk118mcDCsi/qBMpiKk8qmqlf7D44UwDZYtaB IfuE/jLKKNzHxMzLnvKjfzYPnDK8uM8/gXw9oFTF9b4ujFM5TrdYWdHx11lSEdIH Q2p8hrDDB7hlZ5wtuu4PAMUP+3Ld3PG5vcGzgZlhZlwfQwORbmZQyHbZ6kv9OkPr zX+wzZU1MDgnsMuqHOtscxLQEKQOIqGMt0zuS/jNSBqZxHjnOPL8NRdVhovXl4Yj wXNhbS6JajKSQ0y1ZqtXwBNPiJi9gD6+gfc79hFBFCELY2jUex2AFyvdcVICkGEx eXfbKO2MH+xsFKPvny+RoIMDkFfjslOPIjszlwCVoE008RMCLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6vjkSGe2n5QjzHvuMI2sGSo5nXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjI4NDViZGQtODVlYi0z M2Y5LTkwMDktNmZmOGRlYmY0YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFalapZaJizEjf4KnY2Rm2lBneXvPK3Zr4MiTW8JvDhDDfbkWAxQUQAF Zj96NfvTPa6xCncAW2GHBloXNJLaQ+a+2gdskqGXdhWeFQ4OA9ctuLRSbaoufaPc JEbtlCWiPpFfdE059UX1JahyCAuubvCddyOmVCdwzRMjlLTtbMi96WLKZPJDzqgq +yhvmPNaiJygfLfprCReB9XRpDCJqNA5KDjjxhLaIffjJIFEpGH85AkstJHQj+YX YKq4iD+lbwiQSMvnJePEIdf9N0aSaE6nz0E7pB5WVdtwzQj5KIX+Nx6dHmpYw63m 9Xe2eh0xSWRDVtluariFXtvIIlmnmjE= -----END CERTIFICATE-----Generated at Thu Jul 23 21:58:09 2026 by rpki-client