$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa File: 0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa (raw, json) Hash identifier: p1rYXS+pbslx8CrY/N7O13NVR3+WmO6/eVWghJ6ZO08= Subject key identifier: BB:8D:78:AC:38:9C:49:A3:D1:41:F6:F6:A2:96:2D:A2:C8:AF:D7:10 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E90BA53FA645C288D2E7B6AF8 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 21947 IP address blocks: 209.200.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:53:fa:64:5c:28:8d:2e:7b:6a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=8a8367ad-979d-4028-a5a1-35491f479eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9f:81:a8:c2:65:46:f9:72:44:98:4a:8f:dd: 3f:a5:8d:97:02:05:89:42:04:3c:e0:66:8b:f1:2c: 16:f3:e3:c7:58:c9:19:ff:c5:75:46:1e:8b:d3:0b: 5f:18:69:c9:ec:8c:70:9e:9f:37:7a:dd:5a:1c:1a: 8b:28:12:2a:49:2c:54:fa:f6:4f:b2:08:16:d6:ba: be:c1:db:8f:58:8d:94:37:b0:b0:18:18:b7:95:01: bb:9f:82:2a:a5:01:00:10:57:95:91:7b:46:c8:ce: f0:81:71:f1:fd:0d:a2:5a:a4:69:f9:8b:3f:3c:14: 55:5e:be:01:57:93:43:ce:44:1c:c7:58:0c:51:84: df:ac:6e:ac:d8:06:4e:2d:81:bd:85:99:48:f5:70: 19:4b:ea:44:2a:58:26:38:28:7f:4d:4a:33:94:3d: d7:a5:1c:80:40:11:1f:f4:ce:a9:ab:fe:0d:68:a3: 3a:c9:4b:ca:60:bc:94:e6:77:4b:38:c4:eb:70:fb: 17:a8:6f:21:51:37:aa:ff:60:3c:83:1a:68:4f:a7: 81:f9:62:0e:d2:14:b3:4b:5c:db:f2:ad:c0:98:cb: 02:16:41:19:d7:1f:1d:48:3c:c2:92:e7:ff:fe:bc: 5d:40:8a:27:13:1e:d9:32:39:9c:e4:d6:f6:7f:98: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:78:AC:38:9C:49:A3:D1:41:F6:F6:A2:96:2D:A2:C8:AF:D7:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.200.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ec:30:f8:8b:75:78:0f:ae:10:f2:de:21:49:83:cb:46:d9: 32:f5:14:35:c0:ee:f0:8c:f4:02:2a:d0:f9:7e:28:cd:b5:2f: f0:9a:cf:94:ea:78:1a:38:9b:7c:81:83:e4:4e:9b:ad:09:21: ad:68:60:98:c4:98:ec:e2:ad:e6:fa:f2:45:39:c5:33:58:24: 22:c9:b8:b8:21:f5:02:6b:3d:46:56:72:43:9b:69:09:8c:82: e5:f7:67:68:27:0d:1c:7c:c4:2a:e3:4f:52:73:03:63:76:04: 68:c0:65:a0:3f:7b:54:76:14:7d:b6:2a:70:49:47:70:3e:49: 00:7a:80:d8:66:6a:38:80:c3:7b:ac:75:ec:1c:94:59:00:32: 78:f8:be:dc:5d:ca:1e:5c:93:59:1e:3a:60:a3:33:b8:c9:6c: 7e:4a:d7:b2:c2:47:aa:5e:b9:9e:aa:a9:88:85:bc:15:b1:05: 42:c9:f8:fa:b3:2e:88:0f:17:1c:68:c4:1e:26:b3:43:ff:00: e9:7c:44:d0:ad:cb:18:f4:cb:72:83:cf:fd:43:91:5f:55:2f: a2:9b:13:e7:5c:43:4d:ce:02:64:37:7a:f0:b7:bd:5d:16:d4: 99:ca:e6:4e:8c:3a:77:94:45:96:a5:b0:c3:db:3a:13:cf:7e: c9:4c:73:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulP6ZFwojS57avgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk OGE4MzY3YWQtOTc5ZC00MDI4LWE1YTEtMzU0OTFmNDc5ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85+BqMJlRvlyRJhKj90/pY2XAgWJQgQ84GaL 8SwW8+PHWMkZ/8V1Rh6L0wtfGGnJ7Ixwnp83et1aHBqLKBIqSSxU+vZPsggW1rq+ wduPWI2UN7CwGBi3lQG7n4IqpQEAEFeVkXtGyM7wgXHx/Q2iWqRp+Ys/PBRVXr4B V5NDzkQcx1gMUYTfrG6s2AZOLYG9hZlI9XAZS+pEKlgmOCh/TUozlD3XpRyAQBEf 9M6pq/4NaKM6yUvKYLyU5ndLOMTrcPsXqG8hUTeq/2A8gxpoT6eB+WIO0hSzS1zb 8q3AmMsCFkEZ1x8dSDzCkuf//rxdQIonEx7ZMjmc5Nb2f5hmoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuNeKw4nEmj0UH29qKWLaLIr9cQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMGEyZDU0NjEtZGFiMi0z YmQ3LWJiYWUtNGNmZjBmOTg2YmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0cjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPsMPiLdXgPrhDy3iFJg8tG2TL1FDXA7vCM9AIq0Pl+KM21L/Caz5Tq eBo4m3yBg+ROm60JIa1oYJjEmOzireb68kU5xTNYJCLJuLgh9QJrPUZWckObaQmM guX3Z2gnDRx8xCrjT1JzA2N2BGjAZaA/e1R2FH22KnBJR3A+SQB6gNhmajiAw3us dewclFkAMnj4vtxdyh5ck1keOmCjM7jJbH5K17LCR6peuZ6qqYiFvBWxBULJ+Pqz LogPFxxoxB4ms0P/AOl8RNCtyxj0y3KDz/1DkV9VL6KbE+dcQ03OAmQ3evC3vV0W 1JnK5k6MOneURZalsMPbOhPPfslMc0U= -----END CERTIFICATE-----Generated at Fri Jul 24 02:59:34 2026 by rpki-client