$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa File: b200cd9b-0122-35f6-8a2f-e37f12807899.roa (raw, json) Hash identifier: G4gj27X6i4uZ+WHv/y62cdxQKoIn5B1SF7BeqH2fMpE= Subject key identifier: 30:B1:71:73:39:A4:93:DB:B8:31:42:A1:CB:BE:08:DD:D6:A3:FE:B1 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584EA786E1CC609A7D0A2A03DD00 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54098 IP address blocks: 209.222.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e1:cc:60:9a:7d:0a:2a:03:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3091aaac-c2c9-4a53-9714-c4ca0ce6c4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:58:0a:0a:c2:71:52:02:ea:ce:8a:f0:b3: 37:0b:ee:16:e8:86:c4:dc:77:fb:48:16:24:44:e3: f1:50:24:f8:97:fa:b5:ef:ec:e3:d1:29:d4:1b:08: b1:1b:3f:23:01:ac:9e:8b:bb:9b:0a:a5:28:9c:82: 7b:28:67:d6:c4:04:01:b3:6d:24:19:7e:dd:41:82: e7:2e:d3:28:8d:9f:10:73:26:46:ac:08:3c:c0:d4: 3d:32:6a:31:ff:c1:8f:98:43:ae:15:d7:a5:49:81: d6:aa:0c:a5:a6:63:2f:38:41:82:e2:77:17:0b:f5: c1:14:9d:77:cc:d9:42:8a:4d:ed:f7:85:b0:47:93: ee:32:73:b6:e0:ce:3a:09:55:80:81:a9:bc:8e:b7: 3a:3e:9d:ca:19:d9:45:e5:77:a5:92:b2:f0:eb:81: 78:73:97:07:86:f7:ac:aa:95:24:41:0f:e3:17:34: 84:1d:a8:01:f1:ec:5d:0c:ec:7e:af:a7:02:6e:5c: 53:9d:1a:06:97:aa:1d:6a:9f:0f:a0:25:ed:7e:d8: e4:88:ca:af:39:69:f5:c8:55:cd:34:81:eb:ad:2d: ea:d0:b3:ed:9a:ab:ce:24:87:fc:24:57:d9:9b:0f: d7:74:92:95:1f:92:3b:62:e1:94:b3:64:aa:33:02: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B1:71:73:39:A4:93:DB:B8:31:42:A1:CB:BE:08:DD:D6:A3:FE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/b200cd9b-0122-35f6-8a2f-e37f12807899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:36:86:ad:93:e3:bf:15:be:80:64:bb:44:76:e4:68:2e:da: 18:99:cf:7d:56:3b:c6:96:fa:a5:63:56:21:99:2f:27:29:de: d7:38:ae:19:07:61:fb:93:2c:e4:9a:65:67:46:02:f6:86:18: 93:c0:39:37:3c:3d:49:9a:85:ea:81:fe:72:26:05:f1:1b:0d: d1:ad:4c:5c:15:cd:c4:ef:8b:31:c4:ff:89:f7:a9:2f:93:bb: 91:3e:1e:79:88:c6:c4:da:5c:25:56:2d:52:cb:f6:79:cf:c6: 00:6e:d7:04:2f:38:b9:c1:31:2a:bb:87:35:5f:14:1c:17:ba: 87:36:e3:ec:36:83:c8:d1:33:2f:5a:62:bc:b3:76:dc:e8:46: 62:73:4b:42:1f:f2:39:cf:be:c0:24:6e:06:f0:12:48:4d:b3: 89:c1:39:a2:1c:ca:20:3a:96:21:b5:af:d5:4a:32:f5:dd:8f: 93:fe:0b:fc:c1:0b:f3:df:ee:47:ef:71:9f:3c:c5:d4:37:41: ac:2c:46:d9:6a:f3:f5:46:d0:da:25:36:8d:3c:cf:d0:4a:16: 75:00:a6:00:ab:bd:ae:8a:f8:ac:69:ed:6b:94:f4:61:83:3b: fe:2a:96:78:f3:fb:01:5d:2a:27:4c:0d:27:a4:85:a3:47:13: 3c:20:15:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuHMYJp9CioD3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzA5MWFhYWMtYzJjOS00YTUzLTk3MTQtYzRjYTBjZTZjNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PdYCgrCcVIC6s6K8LM3C+4W6IbE3Hf7SBYk ROPxUCT4l/q17+zj0SnUGwixGz8jAayei7ubCqUonIJ7KGfWxAQBs20kGX7dQYLn LtMojZ8QcyZGrAg8wNQ9Mmox/8GPmEOuFdelSYHWqgylpmMvOEGC4ncXC/XBFJ13 zNlCik3t94WwR5PuMnO24M46CVWAgam8jrc6Pp3KGdlF5XelkrLw64F4c5cHhves qpUkQQ/jFzSEHagB8exdDOx+r6cCblxTnRoGl6odap8PoCXtftjkiMqvOWn1yFXN NIHrrS3q0LPtmqvOJIf8JFfZmw/XdJKVH5I7YuGUs2SqMwKmRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCxcXM5pJPbuDFCocu+CN3Wo/6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvYjIwMGNkOWItMDEyMi0z NWY2LThhMmYtZTM3ZjEyODA3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc2hq2T478VvoBku0R25Ggu2hiZz31WO8aW+qVjViGZLycp3tc4rhkH YfuTLOSaZWdGAvaGGJPAOTc8PUmaheqB/nImBfEbDdGtTFwVzcTvizHE/4n3qS+T u5E+HnmIxsTaXCVWLVLL9nnPxgBu1wQvOLnBMSq7hzVfFBwXuoc24+w2g8jRMy9a YryzdtzoRmJzS0If8jnPvsAkbgbwEkhNs4nBOaIcyiA6liG1r9VKMvXdj5P+C/zB C/Pf7kfvcZ88xdQ3QawsRtlq8/VG0NolNo08z9BKFnUApgCrva6K+Kxp7WuU9GGD O/4qlnjz+wFdKidMDSekhaNHEzwgFYY= -----END CERTIFICATE-----Generated at Wed Jul 29 09:16:29 2026 by rpki-client