$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa File: 471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa (raw, json) Hash identifier: vLL/zO1oZsm6pkwSg9ANsHoC6ezjbUgyQNw4H+iyCHM= Subject key identifier: 28:B2:D8:A8:4D:94:91:86:BA:FE:E5:90:98:F0:BC:04:EF:01:21:92 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584E2D9F109FC5CDE712C01AC140 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 7782 IP address blocks: 162.218.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:10:9f:c5:cd:e7:12:c0:1a:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=9da23d43-be78-4b07-91e5-30597e96c403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:77:42:d1:36:62:88:57:f2:85:9f:98:06: 3e:ef:36:78:c0:35:cb:da:a6:4c:26:70:95:41:c4: 29:e8:6f:a0:c6:41:eb:98:e3:eb:d6:6b:d3:68:88: a2:e4:8e:17:2f:c9:7d:f2:6c:cc:17:2f:79:e8:8e: 20:5c:ae:e2:72:52:7b:69:b3:cf:6c:c4:d6:6a:a4: f8:2f:c6:fd:9e:f5:a3:2a:42:32:7e:e0:de:43:3b: 0f:dc:3c:72:70:b3:1a:18:1d:6e:ce:20:d6:0d:4d: da:d3:04:04:7c:e9:c0:3e:f1:4f:bd:8a:5e:6c:8a: 9d:18:1d:fc:40:1f:8b:b7:d0:8b:9e:0c:4b:95:b2: 7f:f0:a2:18:90:e5:6b:77:e1:5d:36:32:b5:9a:22: 55:69:32:6c:3a:ee:d5:fa:94:65:ef:56:89:36:e0: 3c:fb:40:98:a4:89:ec:c8:eb:42:35:95:60:fb:d1: 2d:10:0a:48:b0:94:bc:12:ee:c2:6a:87:b1:ea:98: 55:15:0b:da:3f:ce:40:56:c5:45:9c:4f:22:1c:2e: e5:2a:bb:ae:3f:fb:d1:c7:91:f1:2e:05:47:a1:61: 6a:a8:7e:3b:55:7c:e1:b2:91:08:75:36:eb:30:be: d9:ef:3f:1d:f2:3a:7a:bd:4e:2d:2b:23:90:e7:65: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B2:D8:A8:4D:94:91:86:BA:FE:E5:90:98:F0:BC:04:EF:01:21:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.218.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ec:a1:7f:84:56:0d:65:5b:fd:5f:2e:45:70:ba:66:6c:07: cc:7a:86:ab:ef:f0:ff:b7:08:02:79:25:83:fa:c1:72:ba:50: 0e:8b:fa:92:b2:a3:2f:78:f0:cc:74:ac:29:28:b3:9f:49:88: 76:1b:2c:01:aa:8c:ca:bb:df:31:dd:44:b9:fc:f4:8a:b8:85: 7e:05:37:7a:6c:e7:28:fe:54:e3:3c:b0:f4:61:18:86:ae:fd: b8:30:da:27:7f:c8:78:69:54:1a:8f:86:5d:c3:ec:0f:f0:41: f9:e7:75:e9:f1:7c:ab:84:2b:13:e6:62:58:ec:de:40:b2:bf: 6f:d7:1f:9c:f1:f6:78:6d:a8:da:80:f0:74:ea:d3:70:17:04: 5c:da:5a:a7:ce:ce:91:5b:07:06:0f:0a:f4:77:f8:60:c4:79: b7:90:75:10:74:c5:70:84:01:f9:4a:da:4c:bc:ff:a5:4c:6a: c1:ec:1c:cd:15:f7:dd:fb:b9:55:a5:0c:6e:c4:2a:8e:a8:62: 39:0d:83:e9:b6:9d:d5:fe:68:46:d1:2c:46:66:e2:6e:4e:bf: 2f:7e:01:f1:5c:8e:c3:cf:1e:a0:0d:4c:bc:2d:03:10:1d:6f: 13:f7:de:8e:48:d8:6b:6c:64:dc:36:d4:7f:e5:35:5b:ff:86: 9f:61:fb:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnxCfxc3nEsAawUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk OWRhMjNkNDMtYmU3OC00YjA3LTkxZTUtMzA1OTdlOTZjNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEZ3QtE2YohX8oWfmAY+7zZ4wDXL2qZMJnCV QcQp6G+gxkHrmOPr1mvTaIii5I4XL8l98mzMFy956I4gXK7iclJ7abPPbMTWaqT4 L8b9nvWjKkIyfuDeQzsP3DxycLMaGB1uziDWDU3a0wQEfOnAPvFPvYpebIqdGB38 QB+Lt9CLngxLlbJ/8KIYkOVrd+FdNjK1miJVaTJsOu7V+pRl71aJNuA8+0CYpIns yOtCNZVg+9EtEApIsJS8Eu7Caoex6phVFQvaP85AVsVFnE8iHC7lKruuP/vRx5Hx LgVHoWFqqH47VXzhspEIdTbrML7Z7z8d8jp6vU4tKyOQ52USwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiy2KhNlJGGuv7lkJjwvATvASGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNDcxNTM0YTQtOGU1NC0z ZDU2LWE4ZDgtY2ZjZTNmZmVkNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHsoX+EVg1lW/1fLkVwumZsB8x6hqvv8P+3CAJ5JYP6wXK6UA6L+pKy oy948Mx0rCkos59JiHYbLAGqjMq73zHdRLn89Iq4hX4FN3ps5yj+VOM8sPRhGIau /bgw2id/yHhpVBqPhl3D7A/wQfnndenxfKuEKxPmYljs3kCyv2/XH5zx9nhtqNqA 8HTq03AXBFzaWqfOzpFbBwYPCvR3+GDEebeQdRB0xXCEAflK2ky8/6VMasHsHM0V 9937uVWlDG7EKo6oYjkNg+m2ndX+aEbRLEZm4m5Ovy9+AfFcjsPPHqANTLwtAxAd bxP33o5I2GtsZNw21H/lNVv/hp9h+zk= -----END CERTIFICATE-----Generated at Fri Jul 24 08:03:43 2026 by rpki-client