$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa File: ca248d62-3f50-35a2-9999-0258d4f72f02.roa (raw, json) Hash identifier: HzNzYvF74otTDVxXR7dO74AN9Cli25zmyZhcLDQO1so= Subject key identifier: 47:BF:90:7D:BA:B8:A8:C4:38:57:5F:96:AD:CE:0A:F3:6C:85:0C:65 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584E3E5F427AC5DF54681F672280 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 8014 IP address blocks: 204.236.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:42:7a:c5:df:54:68:1f:67:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=64e6a50e-3d24-41af-bcfa-a91dd9423b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:12:3f:69:29:6a:7e:ee:db:3c:cb:8e:a7: 27:b0:57:cd:e8:30:31:bc:b9:76:2d:50:11:0f:70: 01:71:0f:5e:96:c7:cd:a8:62:0e:3d:a2:e6:0d:d2: 3a:3d:2c:ca:f0:68:c2:0b:4a:68:37:36:7d:88:f1: e6:da:56:1b:6a:d7:a5:c0:fc:44:8e:1c:10:fc:a5: cc:e6:a9:73:2a:81:da:7e:ff:7a:02:46:8d:08:f1: 50:89:c3:66:f5:0e:33:1b:71:30:df:70:3c:14:7a: 5c:6f:a8:97:ba:4d:67:0b:95:26:7b:9d:1e:fa:90: 16:1f:b1:29:9e:3f:ea:4d:08:3e:d0:0f:17:14:ef: ac:35:a9:80:1c:78:81:46:fb:20:45:8d:0b:05:51: 3a:c2:ac:c7:d1:cc:85:9d:81:48:78:48:3e:f2:96: 8d:85:29:b0:85:3d:2d:30:89:77:60:c9:3f:b8:a8: aa:8a:49:99:47:f2:61:21:28:5e:e1:7f:f0:c5:20: e8:e2:b7:1f:5c:32:76:62:3c:50:39:36:3d:ff:11: 71:77:4b:19:cc:11:f6:59:58:e4:c4:d3:36:3a:9a: cf:f1:ba:cc:87:9c:59:2a:de:9d:2f:ab:f9:84:14: ef:fd:22:d3:7a:3e:ad:c6:1d:34:69:be:5a:98:3f: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:90:7D:BA:B8:A8:C4:38:57:5F:96:AD:CE:0A:F3:6C:85:0C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:98:f5:5e:c2:12:01:61:01:a2:80:f4:e2:5d:b5:20:fc:29: f6:51:c1:c8:2c:e8:51:c0:32:88:0b:22:2d:0f:33:5b:a9:1b: 78:5f:07:f5:8e:2f:5d:6f:98:1e:b3:ba:ec:9a:88:06:73:fe: 7d:2c:1d:12:3b:5e:1f:9d:a0:b4:fd:bc:5e:40:41:47:13:57: c6:9f:72:d1:b6:a8:6d:09:a4:c2:43:28:55:da:24:93:ac:75: 2e:4d:2a:aa:77:71:e9:73:a4:af:99:91:91:59:1c:d8:69:9f: 12:84:55:34:91:a5:1d:18:95:b3:77:e4:1e:61:26:0d:6e:09: 8e:04:4a:52:61:eb:de:c9:f5:aa:c7:5a:58:ce:ee:98:73:14: 25:25:9d:7b:bd:b1:e7:d1:e2:3c:97:2a:53:b9:4d:07:76:96: 0f:e3:9f:f6:0b:5a:79:64:aa:b5:15:c0:9d:d6:0b:40:87:e0: b9:1b:28:24:dc:b3:f1:dc:1c:7f:60:f5:3e:ea:ee:ca:cc:47: aa:89:53:50:69:d1:b2:02:7a:e2:a0:c4:43:a7:83:31:cc:00: 27:b8:79:e8:60:a0:4c:4f:22:e5:a8:2b:22:69:4e:2f:44:b4: c6:6f:a2:ca:bf:ab:a0:47:db:57:ed:86:79:c8:16:b1:c6:de: 14:ed:41:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X0J6xd9UaB9nIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk NjRlNmE1MGUtM2QyNC00MWFmLWJjZmEtYTkxZGQ5NDIzYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGgSP2kpan7u2zzLjqcnsFfN6DAxvLl2LVAR D3ABcQ9elsfNqGIOPaLmDdI6PSzK8GjCC0poNzZ9iPHm2lYbatelwPxEjhwQ/KXM 5qlzKoHafv96AkaNCPFQicNm9Q4zG3Ew33A8FHpcb6iXuk1nC5Ume50e+pAWH7Ep nj/qTQg+0A8XFO+sNamAHHiBRvsgRY0LBVE6wqzH0cyFnYFIeEg+8paNhSmwhT0t MIl3YMk/uKiqikmZR/JhIShe4X/wxSDo4rcfXDJ2YjxQOTY9/xFxd0sZzBH2WVjk xNM2OprP8brMh5xZKt6dL6v5hBTv/SLTej6txh00ab5amD9ZJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe/kH26uKjEOFdflq3OCvNshQxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvY2EyNDhkNjItM2Y1MC0z NWEyLTk5OTktMDI1OGQ0ZjcyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOY9V7CEgFhAaKA9OJdtSD8KfZRwcgs6FHAMogLIi0PM1upG3hfB/WO L11vmB6zuuyaiAZz/n0sHRI7Xh+doLT9vF5AQUcTV8afctG2qG0JpMJDKFXaJJOs dS5NKqp3celzpK+ZkZFZHNhpnxKEVTSRpR0YlbN35B5hJg1uCY4ESlJh697J9arH WljO7phzFCUlnXu9sefR4jyXKlO5TQd2lg/jn/YLWnlkqrUVwJ3WC0CH4LkbKCTc s/HcHH9g9T7q7srMR6qJU1Bp0bICeuKgxEOngzHMACe4eehgoExPIuWoKyJpTi9E tMZvosq/q6BH21fthnnIFrHG3hTtQdk= -----END CERTIFICATE-----Generated at Fri Jul 24 11:30:25 2026 by rpki-client