$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa File: f666512f-be5f-3abc-95ac-f35622b56179.roa (raw, json) Hash identifier: 2uXaDmoXCszRSVbCDU3HeU8qhbMRT/FZxxQFgJZ7iPs= Subject key identifier: 7A:7D:4D:78:AB:1F:76:2D:F5:53:FC:06:E8:DB:A9:35:3C:68:7E:6D Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584E815F993F76124D1004C24440 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 2152 IP address blocks: 209.129.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:99:3f:76:12:4d:10:04:c2:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=6808159a-a7f1-40ee-8e81-5fe002cbbe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e5:a4:43:57:aa:26:e2:31:dc:db:56:77:59: 04:f5:46:7b:f3:5a:3c:5f:92:d4:93:46:15:ae:6e: f1:3f:66:a8:9e:21:6b:04:2e:ef:b3:48:f3:02:b5: d2:30:d7:c2:cb:be:9a:9f:8c:05:f8:13:9f:a0:01: 55:e7:55:53:35:02:8a:63:6f:87:ca:0b:02:2a:cc: b1:a8:a5:22:2e:80:6f:07:fb:e8:32:4a:d4:7d:c1: ad:bf:63:9b:67:c5:17:29:5b:23:92:67:45:ca:bb: cd:80:c5:d3:6c:70:f7:f6:52:03:c7:98:7e:22:08: 3f:08:d6:a7:7f:41:07:4b:be:16:f8:14:1c:e2:a5: 2f:d1:1f:2e:8e:62:e2:0b:4f:35:7d:98:54:88:8c: a7:88:fc:e6:5a:04:ed:32:f2:3c:95:52:f3:17:b2: b2:8c:bb:9a:96:6d:af:25:da:1b:d6:8a:36:af:3d: 69:fd:5d:e7:9a:27:4a:0d:75:2d:d1:73:dc:1b:62: 4d:cd:19:59:e5:72:71:62:78:61:1b:40:0c:00:f3: d1:78:13:0e:88:26:df:ef:28:b5:ba:dc:d3:be:84: 39:85:e8:14:86:c5:9f:ad:53:8f:40:04:44:a6:5c: b0:6e:7e:2b:d9:dc:de:74:80:44:67:0c:0c:0e:ad: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:4D:78:AB:1F:76:2D:F5:53:FC:06:E8:DB:A9:35:3C:68:7E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9a:33:5f:18:fe:b0:de:c9:f1:e9:18:ec:35:cd:cf:12:9c: e7:d0:11:cc:11:23:fd:1e:af:91:c3:26:27:c2:f4:74:96:ee: a8:c7:24:b5:00:70:f2:8d:03:b1:48:05:00:ed:a0:0e:1b:95: 7b:d9:78:fe:6c:17:f7:4e:be:5f:97:30:51:ab:c3:c3:80:76: ea:e4:ca:9f:9c:90:4e:1c:88:e1:5f:09:bc:b2:bf:67:8a:c9: 58:75:30:5c:27:01:16:ce:c4:b1:5d:ba:f6:3a:bb:eb:94:de: 22:cd:30:3c:c6:b0:93:01:ef:b5:4e:d1:ad:4e:8a:ce:95:1e: 90:d0:12:97:2b:8c:f0:31:1a:78:37:c7:73:eb:af:81:16:b2: 44:84:a8:06:15:5d:36:e0:85:5a:f2:87:db:ab:57:8f:d7:30: b0:c6:1e:cf:a3:21:9b:33:5a:db:e6:68:ab:4e:5c:7f:21:ae: 51:e6:3a:e0:23:6f:f4:98:01:d8:30:14:c0:1d:ec:b6:2b:d7: 5a:48:c6:ea:82:27:fa:ec:0a:85:9c:0c:20:97:44:98:09:c5: 0d:25:90:b4:aa:a9:fb:8a:c9:d9:0c:e1:45:a2:db:97:32:0a: 0d:7c:47:e5:a5:27:a5:ac:10:f6:51:a8:ea:0e:f9:ff:9d:93: 36:e7:99:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5k/dhJNEATCREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk NjgwODE1OWEtYTdmMS00MGVlLThlODEtNWZlMDAyY2JiZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOWkQ1eqJuIx3NtWd1kE9UZ781o8X5LUk0YV rm7xP2aoniFrBC7vs0jzArXSMNfCy76an4wF+BOfoAFV51VTNQKKY2+HygsCKsyx qKUiLoBvB/voMkrUfcGtv2ObZ8UXKVsjkmdFyrvNgMXTbHD39lIDx5h+Igg/CNan f0EHS74W+BQc4qUv0R8ujmLiC081fZhUiIyniPzmWgTtMvI8lVLzF7KyjLualm2v Jdob1oo2rz1p/V3nmidKDXUt0XPcG2JNzRlZ5XJxYnhhG0AMAPPReBMOiCbf7yi1 utzTvoQ5hegUhsWfrVOPQAREplywbn4r2dzedIBEZwwMDq19xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHp9TXirH3Yt9VP8BujbqTU8aH5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZjY2NjUxMmYtYmU1Zi0z YWJjLTk1YWMtZjM1NjIyYjU2MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyaM18Y/rDeyfHpGOw1zc8SnOfQEcwRI/0er5HDJifC9HSW7qjHJLUA cPKNA7FIBQDtoA4blXvZeP5sF/dOvl+XMFGrw8OAdurkyp+ckE4ciOFfCbyyv2eK yVh1MFwnARbOxLFduvY6u+uU3iLNMDzGsJMB77VO0a1Ois6VHpDQEpcrjPAxGng3 x3Prr4EWskSEqAYVXTbghVryh9urV4/XMLDGHs+jIZszWtvmaKtOXH8hrlHmOuAj b/SYAdgwFMAd7LYr11pIxuqCJ/rsCoWcDCCXRJgJxQ0lkLSqqfuKydkM4UWi25cy Cg18R+WlJ6WsEPZRqOoO+f+dkzbnme4= -----END CERTIFICATE-----Generated at Fri Jul 24 17:10:10 2026 by rpki-client