$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json) Hash identifier: eKkbBkDee47Tc3OjNCyVMPOsOlqVp3o65htkK890e5k= Subject key identifier: C4:9A:E6:7D:D6:E0:E8:1D:F7:1F:AB:6C:60:55:13:29:8A:D3:C5:2E Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584EA78FF50EA49944ACD81B4EA0 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207645 IP address blocks: 209.240.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:f5:0e:a4:99:44:ac:d8:1b:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6f761a50-0653-40f4-9261-f3e7d6eca9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:2c:28:49:84:ea:d1:55:bb:f2:56:29:af: b8:a8:b0:cb:a9:e5:5f:fe:e4:da:12:44:b6:b5:98: b7:44:d9:1d:98:35:86:9c:bd:d8:45:c0:b5:69:6d: e4:90:e0:88:39:83:e9:d2:30:b0:ba:0b:77:14:05: 0d:1f:5d:bc:fa:02:10:d5:1a:d4:d2:0e:60:72:75: 84:f8:83:bf:7d:37:53:7a:2e:5f:a7:4e:8c:dd:14: 57:e8:ad:f4:6d:ae:ac:09:ae:cf:63:f2:52:e4:94: 15:3b:c9:87:bc:d5:16:ec:3e:d0:5b:f8:b9:48:78: 66:55:d6:9f:83:5d:d4:4f:97:79:7b:8b:42:bb:53: 18:f4:eb:59:e6:25:3b:30:9d:7f:81:60:4c:0f:e4: a5:48:27:45:86:dc:50:03:89:98:16:0e:09:32:45: 65:f8:54:59:a3:63:1f:e4:c8:b8:f6:cc:14:e1:2d: c8:45:4a:33:56:b4:68:7b:c3:2a:8d:49:09:55:6c: 60:fc:ad:78:ab:b9:6d:72:63:e0:82:26:1d:c0:35: 98:00:e1:d4:3e:50:2a:8b:74:73:6f:8e:55:96:f8: c2:40:c1:1c:39:c8:cc:95:b2:1f:54:d0:b5:2f:52: 70:79:f4:9c:9c:86:16:4f:5e:27:67:aa:4a:74:fc: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:E6:7D:D6:E0:E8:1D:F7:1F:AB:6C:60:55:13:29:8A:D3:C5:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a2:35:11:42:2d:db:ff:90:db:cf:59:c2:3c:b0:42:89:e4: 3c:d2:c6:75:b4:68:e3:db:11:d0:ff:b1:ad:f1:89:6c:d8:d1: 7e:6b:60:b6:09:b2:1d:9a:9c:f5:c4:05:c4:a3:9e:e0:9d:f7: 04:0c:70:c9:33:de:a3:a6:87:83:50:18:2b:90:f2:a3:4b:fb: f4:54:72:9e:07:bc:8e:7d:a0:89:76:78:57:3c:97:0a:d6:b0: 2c:d6:73:70:b5:d4:08:59:f1:31:8c:c5:92:3a:44:fe:87:14: 08:f5:0f:1d:9d:f9:cc:69:fc:a2:2c:c3:64:63:35:96:17:55: 3c:be:1a:a9:60:f7:83:bf:94:be:0c:ab:c7:f2:f7:56:c1:aa: 58:6b:72:f0:bb:35:bc:2f:41:5f:7b:c4:07:59:aa:db:67:35: 54:a9:7d:06:b9:93:01:fd:e3:5a:1a:0b:23:07:82:74:1b:59: 76:1b:e8:94:1b:6d:ad:a7:5a:36:68:90:bf:38:58:41:c0:3b: b9:f2:f1:f9:e6:24:e2:ea:d1:45:38:72:e8:1c:96:db:d7:a8: ee:0f:2c:4b:fb:12:f5:8b:84:bc:e9:97:c2:e2:a0:53:b0:d1: 97:5c:24:cc:18:fb:cf:e6:94:99:5f:01:fb:8c:dc:96:bb:c7: c8:63:04:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj/UOpJlErNgbTqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmY3NjFhNTAtMDY1My00MGY0LTkyNjEtZjNlN2Q2ZWNhOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN4sKEmE6tFVu/JWKa+4qLDLqeVf/uTaEkS2 tZi3RNkdmDWGnL3YRcC1aW3kkOCIOYPp0jCwugt3FAUNH128+gIQ1RrU0g5gcnWE +IO/fTdTei5fp06M3RRX6K30ba6sCa7PY/JS5JQVO8mHvNUW7D7QW/i5SHhmVdaf g13UT5d5e4tCu1MY9OtZ5iU7MJ1/gWBMD+SlSCdFhtxQA4mYFg4JMkVl+FRZo2Mf 5Mi49swU4S3IRUozVrRoe8MqjUkJVWxg/K14q7ltcmPggiYdwDWYAOHUPlAqi3Rz b45VlvjCQMEcOcjMlbIfVNC1L1JwefScnIYWT14nZ6pKdPxZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSa5n3W4Ogd9x+rbGBVEymK08UuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMTQyNmE2MzctMTNhYS0z NmQ3LTg3YzgtMmE4ODlkY2Q3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuiNRFCLdv/kNvPWcI8sEKJ5DzSxnW0aOPbEdD/sa3xiWzY0X5rYLYJ sh2anPXEBcSjnuCd9wQMcMkz3qOmh4NQGCuQ8qNL+/RUcp4HvI59oIl2eFc8lwrW sCzWc3C11AhZ8TGMxZI6RP6HFAj1Dx2d+cxp/KIsw2RjNZYXVTy+Gqlg94O/lL4M q8fy91bBqlhrcvC7NbwvQV97xAdZqttnNVSpfQa5kwH941oaCyMHgnQbWXYb6JQb ba2nWjZokL84WEHAO7ny8fnmJOLq0UU4cugcltvXqO4PLEv7EvWLhLzpl8LioFOw 0ZdcJMwY+8/mlJlfAfuM3Ja7x8hjBDc= -----END CERTIFICATE-----Generated at Thu Jul 30 07:00:58 2026 by rpki-client