$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa File: aaf1c443-fe8e-397a-9abb-97486c685ca2.roa (raw, json) Hash identifier: srAhxc9KUbIKRdXvurT8WAWD8qZ76ojGGURWB2z7L8c= Subject key identifier: E2:5F:C2:6C:58:E3:E6:71:E4:81:77:FB:36:52:E7:A9:08:F1:51:65 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E90BA536C6898C9816D866A00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 21947 IP address blocks: 204.11.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:53:6c:68:98:c9:81:6d:86:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=8d582ded-0b41-4a32-bd9a-6575045fc021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:dd:83:36:f4:85:0d:06:06:88:4b:20:32: 97:68:a8:b4:74:86:6e:06:a4:60:51:62:d2:2d:96: 12:48:8c:6a:c0:a1:4f:ae:1c:0f:97:2e:72:f5:43: af:e0:2a:c7:71:ed:d3:11:94:0b:c9:e0:c9:d9:69: 94:e6:3b:69:07:5d:d2:8e:a0:43:23:0b:78:08:50: 40:a8:0b:ca:12:62:2d:9c:04:76:d2:57:25:9c:e4: e3:c7:64:99:85:67:07:3a:dc:96:d8:ec:69:3d:35: 97:a1:84:aa:60:fd:cd:43:e8:06:63:c5:1f:39:d0: ff:7c:e8:8f:5d:e6:40:10:79:7f:43:3d:33:96:57: b2:6f:4c:14:1d:02:ef:ae:de:e0:f7:35:ff:36:5b: de:d7:a4:16:8d:98:f5:48:d3:03:ac:09:4b:ea:27: 22:89:3e:01:ba:54:66:78:e6:0f:8c:fb:9e:2f:c7: 04:32:0b:62:05:16:32:22:1c:c6:42:f1:eb:b9:c1: e2:a1:ea:34:9f:67:43:9b:ad:59:c4:ac:4b:49:e3: b8:6a:99:e4:15:17:c1:56:ea:0a:94:bf:a4:5b:b2: 5d:75:33:97:da:d1:e0:fb:c6:b1:8a:c1:e7:61:99: a9:00:fd:0f:b8:dc:b7:8a:74:70:be:4e:b7:03:ce: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5F:C2:6C:58:E3:E6:71:E4:81:77:FB:36:52:E7:A9:08:F1:51:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9d:6a:5b:bc:5e:37:ef:67:79:06:ec:0d:cf:26:22:7a:55: 96:76:7a:c6:e6:db:b9:68:ea:46:5e:3c:97:93:7b:75:dc:2b: 38:e9:b1:d3:b0:43:f0:d5:66:84:d4:2b:0b:2c:3c:53:30:79: fb:f4:71:4b:9e:d4:28:ce:a8:f7:4e:22:b4:50:6f:49:88:e1: 26:2c:b5:70:23:63:04:7f:9d:1d:45:03:90:52:1b:81:fe:4e: 25:4a:7b:0f:27:12:90:aa:b0:5a:db:a7:c2:86:61:db:4c:44: 48:cd:7b:02:17:47:37:89:db:bc:7c:ed:e6:aa:fd:ec:19:45: 00:67:92:4f:09:27:b1:92:c6:24:9c:df:17:76:7a:3a:dc:6e: 5c:e9:d7:59:dd:e5:9d:7f:f7:bf:44:88:1b:59:a8:19:71:c6: d5:64:cc:e5:fb:47:46:ca:77:40:10:2e:68:6a:f2:55:b3:6f: 96:df:33:77:d8:4c:39:32:73:db:78:5b:fa:8c:4c:c3:0e:11: 61:be:50:83:f3:99:be:f5:fe:dc:9e:5b:7c:bb:a3:cb:62:f4: aa:48:75:38:a8:7d:eb:55:c6:b7:03:a6:4b:2f:78:9b:b7:e6: c7:a5:02:9e:94:0f:83:b9:88:ee:75:c2:dd:43:d1:58:5f:fb: 1c:9b:00:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulNsaJjJgW2GagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk OGQ1ODJkZWQtMGI0MS00YTMyLWJkOWEtNjU3NTA0NWZjMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikndgzb0hQ0GBohLIDKXaKi0dIZuBqRgUWLS LZYSSIxqwKFPrhwPly5y9UOv4CrHce3TEZQLyeDJ2WmU5jtpB13SjqBDIwt4CFBA qAvKEmItnAR20lclnOTjx2SZhWcHOtyW2OxpPTWXoYSqYP3NQ+gGY8UfOdD/fOiP XeZAEHl/Qz0zlleyb0wUHQLvrt7g9zX/Nlve16QWjZj1SNMDrAlL6iciiT4BulRm eOYPjPueL8cEMgtiBRYyIhzGQvHrucHioeo0n2dDm61ZxKxLSeO4apnkFRfBVuoK lL+kW7JddTOX2tHg+8axisHnYZmpAP0PuNy3inRwvk63A86NWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJfwmxY4+Zx5IF3+zZS56kI8VFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYWFmMWM0NDMtZmU4ZS0z OTdhLTlhYmItOTc0ODZjNjg1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmdalu8XjfvZ3kG7A3PJiJ6VZZ2esbm27lo6kZePJeTe3XcKzjpsdOw Q/DVZoTUKwssPFMwefv0cUue1CjOqPdOIrRQb0mI4SYstXAjYwR/nR1FA5BSG4H+ TiVKew8nEpCqsFrbp8KGYdtMREjNewIXRzeJ27x87eaq/ewZRQBnkk8JJ7GSxiSc 3xd2ejrcblzp11nd5Z1/979EiBtZqBlxxtVkzOX7R0bKd0AQLmhq8lWzb5bfM3fY TDkyc9t4W/qMTMMOEWG+UIPzmb71/tyeW3y7o8ti9KpIdTiofetVxrcDpksveJu3 5selAp6UD4O5iO51wt1D0Vhf+xybAPs= -----END CERTIFICATE-----Generated at Fri Jul 24 03:04:01 2026 by rpki-client