$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa File: e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa (raw, json) Hash identifier: pFV01lplEhU/3Up3Y3kDsig7U8IxQFij+6CeBSie7dA= Subject key identifier: F1:D4:6A:A9:DD:E9:27:73:08:0C:8D:AE:DA:1A:7D:E0:D6:02:E2:AA Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584EA791BD1985537CD3787DF800 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54196 IP address blocks: 209.211.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:bd:19:85:53:7c:d3:78:7d:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a88806dc-a003-4eec-9a8b-dc83617c8f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:34:dd:e7:91:f5:60:88:21:36:f8:14:2e:e0: 99:5d:26:54:47:c8:62:ff:0f:b1:aa:8f:53:81:12: 85:c3:2d:08:67:af:70:39:f9:53:a8:a9:03:0b:92: f8:c1:2f:1f:28:c8:80:dc:8a:20:98:41:29:f2:0e: 06:03:e5:a7:70:2e:ee:4b:ef:37:19:3c:3d:54:07: 41:9e:8c:3c:0d:1b:52:74:ab:51:fb:b5:49:09:e5: 3b:23:98:76:7f:77:a3:fc:86:ec:6d:02:e1:40:18: f6:ab:fb:c9:88:17:64:da:74:32:e7:ad:fb:72:62: 83:52:36:f5:69:03:48:d1:60:50:c2:d2:ae:27:b4: c7:aa:87:a3:20:69:b1:1e:94:f5:22:cd:3c:bf:c1: a0:e3:32:33:7d:df:13:48:51:80:bd:e8:94:f3:6c: 7b:b6:80:57:13:28:d6:76:03:db:f0:7d:e2:01:bd: ed:be:b2:4f:1e:66:3a:e2:26:6c:e0:9c:ba:79:1b: ef:af:1c:d8:38:61:bb:27:27:96:ae:78:e5:97:16: a4:c0:c7:5f:31:be:ed:fd:3d:d1:5c:d9:0d:46:ec: 0e:00:a3:75:b5:d6:50:53:81:b4:f2:08:bb:18:e1: 22:b2:9a:fa:30:fe:71:a4:3c:de:db:e0:79:29:72: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D4:6A:A9:DD:E9:27:73:08:0C:8D:AE:DA:1A:7D:E0:D6:02:E2:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4f:10:45:a4:8d:86:6d:e4:28:77:d3:55:bd:17:d2:e7:e1: 17:8e:5b:02:23:99:0c:dc:11:9a:16:30:eb:60:95:66:86:fa: 57:6f:06:ad:97:da:ec:80:9f:d8:cc:c7:c5:f8:ac:0e:25:d6: f7:fd:46:2f:e3:53:da:ba:98:b9:73:c4:dd:b4:ce:8c:d4:c5: a5:be:e9:c2:25:f5:ee:26:f9:5e:fb:bc:ee:27:16:8c:37:d8: ae:eb:00:0a:84:92:34:29:7f:91:43:b2:c6:7d:11:66:f1:4c: 8c:9a:c0:6c:24:b6:2e:35:30:2e:e5:c7:1e:c6:ae:79:8d:04: 0a:17:0c:f3:82:7a:f6:09:b4:61:88:63:44:98:82:08:f1:2c: 0f:97:07:db:7b:53:b9:ab:98:09:be:f0:ea:1c:6a:ce:20:98: 7c:7b:b5:1f:32:33:46:2f:93:22:d5:23:ea:a0:c7:ba:4e:6e: 24:ce:ea:e6:12:f2:1e:1a:78:47:87:2c:0f:19:da:de:d9:54: b3:8f:2d:66:d9:18:49:53:dd:cf:35:1b:77:dd:3d:88:8c:7f: 27:35:9e:28:25:e4:d4:ee:9a:02:00:34:aa:c9:78:c9:57:49: 8e:91:0d:2b:39:1e:63:6b:7e:b7:8e:40:62:73:9a:1c:03:02: 62:f4:d5:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkb0ZhVN803h9+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTg4ODA2ZGMtYTAwMy00ZWVjLTlhOGItZGM4MzYxN2M4ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDTd55H1YIghNvgULuCZXSZUR8hi/w+xqo9T gRKFwy0IZ69wOflTqKkDC5L4wS8fKMiA3IogmEEp8g4GA+WncC7uS+83GTw9VAdB now8DRtSdKtR+7VJCeU7I5h2f3ej/IbsbQLhQBj2q/vJiBdk2nQy5637cmKDUjb1 aQNI0WBQwtKuJ7THqoejIGmxHpT1Is08v8Gg4zIzfd8TSFGAveiU82x7toBXEyjW dgPb8H3iAb3tvrJPHmY64iZs4Jy6eRvvrxzYOGG7JyeWrnjllxakwMdfMb7t/T3R XNkNRuwOAKN1tdZQU4G08gi7GOEispr6MP5xpDze2+B5KXKwjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHUaqnd6SdzCAyNrtoafeDWAuKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTg5YWY1NGYtYzJjNC0z M2FmLTliM2YtZGY4NDY0YmI5ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxPEEWkjYZt5Ch301W9F9Ln4ReOWwIjmQzcEZoWMOtglWaG+ldvBq2X 2uyAn9jMx8X4rA4l1vf9Ri/jU9q6mLlzxN20zozUxaW+6cIl9e4m+V77vO4nFow3 2K7rAAqEkjQpf5FDssZ9EWbxTIyawGwkti41MC7lxx7GrnmNBAoXDPOCevYJtGGI Y0SYggjxLA+XB9t7U7mrmAm+8Oocas4gmHx7tR8yM0YvkyLVI+qgx7pObiTO6uYS 8h4aeEeHLA8Z2t7ZVLOPLWbZGElT3c81G3fdPYiMfyc1nigl5NTumgIANKrJeMlX SY6RDSs5HmNrfreOQGJzmhwDAmL01ck= -----END CERTIFICATE-----Generated at Wed Jul 29 14:19:17 2026 by rpki-client