$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa File: 2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa (raw, json) Hash identifier: 2Lh0wKsigerqPudbjNCQ2ZU/o34C1OH/u14B+52trzY= Subject key identifier: 52:0C:82:5E:7C:B1:56:46:18:BD:C9:2D:D9:07:01:88:F8:72:0F:17 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584E9BE511EB1A4883A2051AAD60 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 55044 IP address blocks: 63.238.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:11:eb:1a:48:83:a2:05:1a:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=8a2697eb-6bcc-4d85-8d29-8c091e630718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:e1:5f:e2:1a:a1:5f:26:e1:c0:c4:e8:83: 53:23:82:4d:df:0d:f3:cc:a7:f8:5e:bb:cd:e7:a9: 13:69:20:cc:45:90:77:4c:70:87:ef:d4:ac:ee:c4: 56:06:95:2f:55:e5:3a:36:6a:20:0e:7b:18:45:7a: 3c:bd:f9:e6:4f:e5:c7:2e:c0:4d:c1:d1:e8:46:88: 15:76:a5:a2:f7:41:6e:89:d1:e9:0e:79:fa:56:f9: 56:83:fe:84:df:ce:ae:52:1c:9b:73:72:ba:59:1e: 7b:51:d4:e5:1b:db:9f:cb:b0:ff:cc:8b:76:00:a8: 50:fe:8a:7b:49:2f:27:73:5b:43:73:ae:be:d2:66: 95:70:b6:f5:36:bb:ae:d3:dc:33:20:44:06:a2:30: 98:ed:d8:5a:8b:56:41:2e:d7:82:84:f5:58:82:b9: b9:58:4c:a0:13:b6:28:7f:28:57:1e:39:f9:cf:4c: 77:5a:18:57:4c:d9:ad:42:fe:6c:a0:69:c7:3b:79: fc:d1:55:ad:5c:67:ac:76:9a:eb:fb:b5:3f:d7:06: 89:f4:d2:6c:1f:00:6a:1b:69:0e:47:e8:0b:38:a3: 63:38:be:31:ba:c0:71:81:61:2a:a8:68:2d:e3:f2: 7d:5b:17:09:4d:e8:e2:b3:c6:a4:fc:7f:e6:ef:89: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0C:82:5E:7C:B1:56:46:18:BD:C9:2D:D9:07:01:88:F8:72:0F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2dce97fc-82a8-3ee7-a64e-819e70bebb20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 63.238.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:78:7d:ea:d9:7e:bc:0a:de:71:5f:54:e8:57:91:0d:e4:57: 87:8b:71:6b:75:ae:8a:5d:de:67:2b:ce:26:2e:b4:f9:46:d1: 7b:85:55:1a:06:76:9e:44:9f:9f:99:a0:48:b8:3d:65:01:a4: a6:f3:4b:ce:5b:50:61:27:96:c0:36:f0:14:21:94:bc:bd:3d: bc:bd:f0:b8:0f:01:a1:dc:96:48:c6:c9:d1:bd:26:00:2a:ad: 84:da:cc:83:8e:42:2e:17:0a:12:87:81:81:15:47:1b:05:f4: f6:30:5a:0a:f0:2f:4e:54:24:b9:65:12:d5:a8:f4:79:e1:e8: 4f:8f:58:fb:86:54:43:7a:05:54:76:cd:07:8b:ff:bf:00:50: 30:9f:51:5f:fe:6e:68:3e:61:3f:5a:6b:70:63:bf:fe:4a:83: 22:2a:0f:dc:19:88:5e:d7:3f:5e:aa:ca:b3:57:76:29:de:8e: f3:3d:c9:19:00:ab:4a:ea:c8:f6:da:92:8b:59:f5:d1:c3:24: c9:bc:97:de:ba:c7:f0:a9:92:94:93:ec:93:7f:ef:81:e8:a9: 96:38:a4:0c:f6:2b:6e:10:52:7d:e3:11:ca:f0:fe:3b:b3:03: 1a:54:48:a1:31:0b:30:c3:34:b4:a0:29:f8:12:0b:dd:b1:a4: 77:ae:25:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RHrGkiDogUarWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk OGEyNjk3ZWItNmJjYy00ZDg1LThkMjktOGMwOTFlNjMwNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggzhX+IaoV8m4cDE6INTI4JN3w3zzKf4XrvN 56kTaSDMRZB3THCH79Ss7sRWBpUvVeU6NmogDnsYRXo8vfnmT+XHLsBNwdHoRogV dqWi90FuidHpDnn6VvlWg/6E386uUhybc3K6WR57UdTlG9ufy7D/zIt2AKhQ/op7 SS8nc1tDc66+0maVcLb1Nruu09wzIEQGojCY7dhai1ZBLteChPVYgrm5WEygE7Yo fyhXHjn5z0x3WhhXTNmtQv5soGnHO3n80VWtXGesdprr+7U/1waJ9NJsHwBqG2kO R+gLOKNjOL4xusBxgWEqqGgt4/J9WxcJTejis8ak/H/m74nBHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIMgl58sVZGGL3JLdkHAYj4cg8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMmRjZTk3ZmMtODJhOC0z ZWU3LWE2NGUtODE5ZTcwYmViYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP+6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ14ferZfrwK3nFfVOhXkQ3kV4eLcWt1ropd3mcrziYutPlG0XuFVRoG dp5En5+ZoEi4PWUBpKbzS85bUGEnlsA28BQhlLy9Pby98LgPAaHclkjGydG9JgAq rYTazIOOQi4XChKHgYEVRxsF9PYwWgrwL05UJLllEtWo9Hnh6E+PWPuGVEN6BVR2 zQeL/78AUDCfUV/+bmg+YT9aa3Bjv/5KgyIqD9wZiF7XP16qyrNXdinejvM9yRkA q0rqyPbakotZ9dHDJMm8l966x/CpkpST7JN/74HoqZY4pAz2K24QUn3jEcrw/juz AxpUSKExCzDDNLSgKfgSC92xpHeuJb4= -----END CERTIFICATE-----Generated at Wed Jul 29 03:17:08 2026 by rpki-client