$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa File: a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa (raw, json) Hash identifier: JVhCjKGBpedI7A99hWhaz7sYVyPG4Xmq1643HoreyJI= Subject key identifier: FE:AA:35:CA:AC:6A:F2:A6:E7:B0:9F:18:C4:62:67:F4:68:27:B0:77 Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584EA445260EA9A420C7597F7E80 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 63448 IP address blocks: 208.56.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:26:0e:a9:a4:20:c7:59:7f:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=a23178f7-68e4-499a-9f1f-f7a5b351e0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:8f:e2:4e:bc:6c:a1:54:67:9b:91:1b:0d: 8f:7e:23:8e:83:23:06:d2:24:ae:d7:1a:cc:8b:ee: 2b:cd:69:6a:2d:79:2a:0f:90:44:cf:f4:97:cb:05: 21:26:76:6a:e5:44:01:5a:87:6c:5b:d4:85:1d:99: f1:63:29:d7:d9:48:5e:30:3a:82:59:d2:ec:f3:b3: 08:8f:dd:8a:b4:5c:86:89:67:10:cd:33:cd:68:fc: 4d:51:1c:e6:32:d6:ae:2f:c2:00:30:9a:2d:93:46: 84:c7:b6:be:0c:b5:81:c2:9c:f6:c2:8e:6f:26:eb: 24:7f:71:c8:de:85:ed:c9:d8:e6:75:6c:02:cf:16: 9d:f1:86:08:8f:fa:e3:23:8a:b1:76:ee:bb:61:d4: 7e:08:6c:64:a1:70:39:f0:42:68:1f:92:6a:4d:a8: d1:e3:81:c3:08:c2:9f:6d:37:50:28:a7:89:d2:4f: 19:c3:e5:fe:b8:30:26:b0:4f:83:c7:0e:b5:b4:4c: b8:db:77:89:d4:e2:d0:1f:44:6f:bb:91:f8:da:88: 24:e7:ee:76:f8:0e:76:51:19:de:ec:61:8d:76:25: db:7f:27:48:f3:ea:09:72:2d:9f:f9:5a:f6:d2:9f: e8:52:65:07:05:f7:00:eb:15:94:fc:45:81:d2:ac: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AA:35:CA:AC:6A:F2:A6:E7:B0:9F:18:C4:62:67:F4:68:27:B0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 208.56.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:68:54:41:16:e5:11:56:4f:ef:47:23:10:0e:28:5c:d7:3b: 0d:ff:d1:d6:3b:68:44:5c:68:7c:91:7a:cb:4d:d8:f9:9f:ae: a5:1f:18:d8:89:41:8a:84:be:d9:09:85:a4:d3:e5:4d:67:ec: 74:66:71:46:c1:91:f8:c4:88:c3:4c:16:11:49:ff:ea:62:13: 58:44:19:c0:8b:81:28:08:d0:59:dd:a7:71:cd:5b:b1:02:96: 3e:12:bd:83:68:0e:b3:c8:3c:34:5a:27:ba:18:2d:12:a6:e6: 8b:22:87:d0:f3:b3:89:e3:df:64:bf:3e:03:1d:0d:e8:97:ca: 53:ea:20:87:f2:b0:4e:80:01:e6:f3:5f:e1:45:8b:43:92:2a: ed:6b:54:b0:52:6c:67:c6:9d:5b:5f:eb:5b:dd:c2:d3:d5:a3: 2b:7a:ff:42:a0:56:82:11:d4:95:15:f3:b8:ed:a4:54:5e:64: a4:42:ce:c3:23:f2:29:88:75:c5:60:c0:00:45:f3:a9:8b:8a: 9b:54:4d:00:b2:6d:2c:c8:2b:d0:05:40:e3:20:ce:3d:41:fe: fc:c1:a2:a5:da:6d:e4:df:d4:8c:4a:19:ac:53:33:67:6f:00: 55:61:d3:06:da:97:40:b5:e8:c3:a9:f6:50:f3:bd:16:82:e0: 15:5e:5a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRSYOqaQgx1l/foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk YTIzMTc4ZjctNjhlNC00OTlhLTlmMWYtZjdhNWIzNTFlMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/eP4k68bKFUZ5uRGw2PfiOOgyMG0iSu1xrM i+4rzWlqLXkqD5BEz/SXywUhJnZq5UQBWodsW9SFHZnxYynX2UheMDqCWdLs87MI j92KtFyGiWcQzTPNaPxNURzmMtauL8IAMJotk0aEx7a+DLWBwpz2wo5vJuskf3HI 3oXtydjmdWwCzxad8YYIj/rjI4qxdu67YdR+CGxkoXA58EJoH5JqTajR44HDCMKf bTdQKKeJ0k8Zw+X+uDAmsE+Dxw61tEy423eJ1OLQH0Rvu5H42ogk5+52+A52URne 7GGNdiXbfydI8+oJci2f+Vr20p/oUmUHBfcA6xWU/EWB0qw/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6qNcqsavKm57CfGMRiZ/RoJ7B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvYTIzMTBkZWEtYmZiMi0z MGJiLWE2ZWItZWZlMzJlYjRmOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0DjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxoVEEW5RFWT+9HIxAOKFzXOw3/0dY7aERcaHyRestN2PmfrqUfGNiJ QYqEvtkJhaTT5U1n7HRmcUbBkfjEiMNMFhFJ/+piE1hEGcCLgSgI0Fndp3HNW7EC lj4SvYNoDrPIPDRaJ7oYLRKm5osih9Dzs4nj32S/PgMdDeiXylPqIIfysE6AAebz X+FFi0OSKu1rVLBSbGfGnVtf61vdwtPVoyt6/0KgVoIR1JUV87jtpFReZKRCzsMj 8imIdcVgwABF86mLiptUTQCybSzIK9AFQOMgzj1B/vzBoqXabeTf1IxKGaxTM2dv AFVh0wbal0C16MOp9lDzvRaC4BVeWok= -----END CERTIFICATE-----Generated at Wed Jul 29 02:19:18 2026 by rpki-client