$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/d45455ed-79d2-3c15-a001-e3b039bd6655.roa File: d45455ed-79d2-3c15-a001-e3b039bd6655.roa (raw, json) Hash identifier: FX1CftTrIcMUnNWk/dZZgnEBXFSWoy4+PvA8SmWym5Y= Subject key identifier: 96:BF:CE:72:C8:09:6C:CB:50:78:97:D3:71:F3:B7:93:24:63:40:53 Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584EA4450A3095C69CC5F1B0C2A0 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/d45455ed-79d2-3c15-a001-e3b039bd6655.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 63448 IP address blocks: 209.46.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:0a:30:95:c6:9c:c5:f1:b0:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=7f402760-b6fc-4ae8-babe-033c8a374dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:7f:28:01:71:22:af:02:7b:bf:7d:c4:6f: 66:32:92:23:7e:fb:d2:e6:b6:fb:0c:a3:19:ab:a8: e1:68:87:d6:71:72:fa:68:e1:06:fb:db:c2:ba:cc: 66:a2:58:48:3a:d7:5d:7b:82:0a:85:a7:9c:88:73: 76:63:4c:fc:56:0d:f9:26:38:61:61:17:97:cd:d4: de:cb:e1:3c:4a:05:be:89:cb:58:e3:2e:47:45:f0: b6:01:9a:c6:0a:95:2a:25:5a:a4:13:e9:f5:a6:8e: 05:65:ce:fe:95:56:a3:66:ef:0e:f0:14:4d:e1:5d: cf:6a:15:d8:45:58:bf:2b:69:bf:75:5e:09:49:94: 4c:cc:aa:20:39:39:6b:63:11:6c:0f:be:70:98:a5: 8a:d5:4c:92:88:44:e9:27:c5:10:68:46:88:86:28: 8c:c6:8c:42:7e:b8:84:f7:e0:39:0b:db:78:27:c7: 7e:c6:f5:e8:0f:e7:66:72:dc:ab:12:7a:7b:a4:b4: 99:73:d4:4c:99:4c:58:22:d1:5d:a2:47:de:d3:e6: b7:22:37:97:6d:3b:00:11:5d:ee:07:9e:d3:9f:d5: 33:ac:55:16:8b:c9:0a:cb:41:87:96:2b:e1:8b:7d: 97:ad:bf:0b:c4:ec:92:0e:6d:7c:3e:a3:64:4a:77: 77:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:CE:72:C8:09:6C:CB:50:78:97:D3:71:F3:B7:93:24:63:40:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/d45455ed-79d2-3c15-a001-e3b039bd6655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 209.46.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b2:56:b4:97:96:35:ee:9c:d8:ff:bc:75:9d:77:25:4a:16: 81:c3:c4:fb:f5:fd:5a:e3:e1:d8:9c:e4:1d:f9:a6:a7:c8:88: c3:e1:8d:c8:ad:98:fa:68:af:a3:b6:39:4a:d8:01:20:d5:4e: 41:fb:d0:96:13:0a:fd:93:db:ca:16:b1:9a:ad:7b:48:51:2d: ba:78:38:bd:c2:c9:ac:02:b3:a6:83:f6:d9:a5:c9:bc:35:83: 5a:9a:0b:fc:b8:60:2b:4b:36:42:7a:a9:80:6e:7a:29:25:70: 62:ff:9e:cd:3c:65:95:4c:6d:2b:f8:69:1d:d2:8d:17:99:1e: df:64:e8:61:4b:fa:f6:e6:f9:dc:af:9d:65:95:46:01:49:e2: f7:8f:da:3c:dd:c2:81:08:b9:05:1a:e1:7e:82:a6:61:a3:78: 70:69:7c:fb:be:c4:44:90:e6:36:ce:93:74:8d:78:e6:7f:e6: a2:c5:a8:d2:03:1c:06:91:ec:3b:28:3d:a7:32:2d:d5:c8:2b: f5:05:a2:cc:4c:8d:e7:a9:25:d3:60:f9:01:98:96:ec:bf:17: f2:ed:30:63:f7:4e:d6:53:98:74:c1:21:58:84:95:e4:62:a1: b2:e8:90:c0:7e:cc:a7:48:90:67:4a:d6:1a:2a:38:52:07:f3: f8:0c:fd:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRQowlcacxfGwwqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk N2Y0MDI3NjAtYjZmYy00YWU4LWJhYmUtMDMzYzhhMzc0ZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptx/KAFxIq8Ce799xG9mMpIjfvvS5rb7DKMZ q6jhaIfWcXL6aOEG+9vCusxmolhIOtdde4IKhaeciHN2Y0z8Vg35JjhhYReXzdTe y+E8SgW+ictY4y5HRfC2AZrGCpUqJVqkE+n1po4FZc7+lVajZu8O8BRN4V3PahXY RVi/K2m/dV4JSZRMzKogOTlrYxFsD75wmKWK1UySiETpJ8UQaEaIhiiMxoxCfriE 9+A5C9t4J8d+xvXoD+dmctyrEnp7pLSZc9RMmUxYItFdokfe0+a3IjeXbTsAEV3u B57Tn9UzrFUWi8kKy0GHlivhi32Xrb8LxOySDm18PqNkSnd3DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa/znLICWzLUHiX03Hzt5MkY0BTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvZDQ1NDU1ZWQtNzlkMi0z YzE1LWEwMDEtZTNiMDM5YmQ2NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0S4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCyVrSXljXunNj/vHWddyVKFoHDxPv1/Vrj4dic5B35pqfIiMPhjcit mPpor6O2OUrYASDVTkH70JYTCv2T28oWsZqte0hRLbp4OL3CyawCs6aD9tmlybw1 g1qaC/y4YCtLNkJ6qYBueiklcGL/ns08ZZVMbSv4aR3SjReZHt9k6GFL+vbm+dyv nWWVRgFJ4veP2jzdwoEIuQUa4X6CpmGjeHBpfPu+xESQ5jbOk3SNeOZ/5qLFqNID HAaR7DsoPacyLdXIK/UFosxMjeepJdNg+QGYluy/F/LtMGP3TtZTmHTBIViEleRi obLokMB+zKdIkGdK1hoqOFIH8/gM/QA= -----END CERTIFICATE-----Generated at Wed Jul 29 10:11:19 2026 by rpki-client