$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff4256e2-4b7e-314c-aa7f-9b9178f649c3.roa File: ff4256e2-4b7e-314c-aa7f-9b9178f649c3.roa (raw, json) Hash identifier: DWIw0nFlSkpNVVaN8+ZdyWtPxdn9V+RkvQXMdlHBCvw= Subject key identifier: 77:B7:24:5A:20:59:A7:90:E5:BB:29:D4:15:AF:DE:40:E1:3A:86:AE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E89C44453362AFD4DA92B2110 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff4256e2-4b7e-314c-aa7f-9b9178f649c3.roa Signing time: Sat 18 Jul 2026 09:09:43 +0000 ROA not before: Sat 18 Jul 2026 09:09:43 +0000 ROA not after: Fri 16 Oct 2026 09:09:43 +0000 asID: 834 IP address blocks: 65.86.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:c4:44:53:36:2a:fd:4d:a9:2b:21:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 18 09:09:43 2026 GMT Not After : Oct 16 09:09:43 2026 GMT Subject: CN=530be843-df6c-4a62-97fd-c6c66f609597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:73:11:a3:a6:6c:bd:39:4b:1e:fd:b3:fb:12: 61:c1:92:ab:9c:ad:33:9d:1c:41:1a:57:46:8c:4a: bd:13:f2:22:84:d9:0b:87:43:40:f8:6e:3e:e9:22: c3:59:6c:e4:66:d0:0a:73:26:ad:56:06:55:d8:cd: da:ad:7b:33:16:53:dc:5c:e7:3a:8a:00:d2:43:37: 1f:7f:f6:24:1e:8f:4f:b2:6b:8f:c9:7d:21:74:eb: 3c:83:f7:cb:64:38:f4:eb:51:13:63:52:33:2c:8a: 9f:0c:ec:35:2b:f6:2e:3a:71:0d:d1:50:9a:10:0c: 8d:ab:1f:d5:d5:a3:fc:0e:02:0a:2d:9b:40:c3:78: b6:cc:ea:b7:5a:ef:a5:e2:48:15:15:40:64:5b:76: 03:e6:f9:82:98:2b:af:97:04:e2:2d:13:f4:a2:56: 6a:e9:3e:44:94:37:5a:86:55:0d:62:c1:4d:d6:cc: 64:fc:52:7d:46:f2:96:f6:bb:c1:2f:fa:81:42:56: 75:7e:b4:65:f2:f8:07:94:29:62:4c:35:c8:d7:41: 14:aa:26:d8:d9:00:5a:89:4d:3f:b8:ba:83:30:78: d0:14:f8:f8:af:f2:66:6f:c5:1d:40:dd:cc:d6:ec: 6b:d9:df:ef:0f:9b:bc:91:31:68:e0:b5:26:a0:aa: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B7:24:5A:20:59:A7:90:E5:BB:29:D4:15:AF:DE:40:E1:3A:86:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff4256e2-4b7e-314c-aa7f-9b9178f649c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:02:65:42:1e:48:82:bf:60:6b:dd:2e:fb:f7:12:d4:78:7f: 6e:b5:75:24:0f:b3:cd:40:52:c1:c6:f8:c0:fc:30:78:13:d5: d8:c9:c6:c3:2d:6d:ea:8f:3c:74:bd:3c:c1:84:97:c9:79:a7: 06:56:da:27:43:2d:bf:1c:38:6b:d0:7b:2e:21:a7:e3:3d:c6: fd:fe:b7:ae:36:dc:aa:35:20:69:65:c7:fa:60:39:53:3e:0a: 80:7b:8b:e1:6d:51:8b:b9:6f:36:6c:d3:9a:66:a5:fb:ff:ac: 2f:e2:d0:5c:65:87:de:b7:07:e4:fc:67:e1:db:b2:30:7c:f7: a9:94:c0:fa:5d:0c:ac:02:a5:60:32:5b:6f:2d:c8:9f:c0:8a: f4:c6:a7:93:34:34:bf:72:ed:8a:e6:19:a7:73:7f:e2:e4:c2: 7e:fc:bd:47:ff:95:c1:eb:ac:eb:7a:97:02:d1:f8:05:f8:af: 86:c0:eb:84:e5:3c:46:4d:8f:ae:47:d2:40:15:91:6b:6a:58: f9:10:28:77:09:23:7f:22:53:0c:73:4e:6a:fc:d2:80:2f:ed: a9:26:b6:38:69:ba:da:89:b3:90:c4:8a:9e:ba:84:fa:5f:f6: 11:f0:46:ba:52:c6:93:96:07:1b:66:c7:da:2f:b5:ed:9f:71: 67:fe:76:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6JxERTNir9TakrIRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxODA5MDk0M1oXDTI2MTAxNjA5MDk0M1owLzEtMCsGA1UEAxMk NTMwYmU4NDMtZGY2Yy00YTYyLTk3ZmQtYzZjNjZmNjA5NTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknMRo6ZsvTlLHv2z+xJhwZKrnK0znRxBGldG jEq9E/IihNkLh0NA+G4+6SLDWWzkZtAKcyatVgZV2M3arXszFlPcXOc6igDSQzcf f/YkHo9PsmuPyX0hdOs8g/fLZDj061ETY1IzLIqfDOw1K/YuOnEN0VCaEAyNqx/V 1aP8DgIKLZtAw3i2zOq3Wu+l4kgVFUBkW3YD5vmCmCuvlwTiLRP0olZq6T5ElDda hlUNYsFN1sxk/FJ9RvKW9rvBL/qBQlZ1frRl8vgHlCliTDXI10EUqibY2QBaiU0/ uLqDMHjQFPj4r/Jmb8UdQN3M1uxr2d/vD5u8kTFo4LUmoKpOBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe3JFogWaeQ5bsp1BWv3kDhOoauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmY0MjU2ZTItNGI3ZS0z MTRjLWFhN2YtOWI5MTc4ZjY0OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8CZUIeSIK/YGvdLvv3EtR4f261dSQPs81AUsHG+MD8MHgT1djJxsMt beqPPHS9PMGEl8l5pwZW2idDLb8cOGvQey4hp+M9xv3+t6423Ko1IGllx/pgOVM+ CoB7i+FtUYu5bzZs05pmpfv/rC/i0Fxlh963B+T8Z+HbsjB896mUwPpdDKwCpWAy W28tyJ/AivTGp5M0NL9y7YrmGadzf+Lkwn78vUf/lcHrrOt6lwLR+AX4r4bA64Tl PEZNj65H0kAVkWtqWPkQKHcJI38iUwxzTmr80oAv7akmtjhputqJs5DEip66hPpf 9hHwRrpSxpOWBxtmx9ovte2fcWf+dns= -----END CERTIFICATE-----Generated at Thu Jul 23 21:34:22 2026 by rpki-client