$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa File: fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa (raw, json) Hash identifier: EY3FxR3a3igPNYDcrAU83Sv0CpFkoXoIdvKGXLvxem4= Subject key identifier: D6:DC:06:7B:10:EA:9F:1B:47:1E:76:69:B9:CF:81:56:04:C0:83:FF Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Certificate serial: 010D0C9F4328584EA17A88DF4C8E908245C1E220 Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 400427 IP address blocks: 216.120.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:88:df:4c:8e:90:82:45:c1:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=5f896ec5-3a6a-4d55-840b-2b816cfc93ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:16:24:5c:37:f5:75:58:10:ac:9a:6b:8d: e1:8a:3f:9c:88:82:76:d6:d1:e2:70:e1:28:a4:39: 05:f8:ac:80:56:53:b1:93:c6:6d:31:d4:f3:e3:46: d9:e8:69:4e:c1:95:f1:d1:47:13:03:03:ff:26:6d: 8f:33:59:d0:93:d5:c6:da:c2:42:ea:1d:99:64:b2: 24:dd:c0:31:bc:eb:ec:d7:08:3e:97:05:b8:af:0a: 97:e8:99:a5:bd:05:19:05:57:d3:bd:f7:55:16:b8: 05:6b:c4:d3:f1:6f:3e:02:6d:9a:79:5e:26:05:a2: e4:88:cf:b4:65:46:78:89:42:fc:61:cc:06:06:d8: ce:df:77:09:ea:65:b7:6a:40:26:44:ed:c0:09:a4: 6c:64:24:4d:38:04:6c:11:14:7d:4e:07:ff:c6:6e: 26:15:6d:c3:60:92:73:e4:92:6e:17:40:3c:aa:04: da:70:04:94:33:92:14:3d:8e:56:01:b1:e5:e0:f3: bf:f7:85:9f:68:2a:4d:a2:14:23:ca:9f:14:39:81: 45:bb:7a:21:2b:6a:69:0e:a1:3d:95:96:da:95:9d: e3:a7:51:a8:04:6c:fd:86:ab:3f:ff:9f:3a:4c:2c: 2d:98:82:da:64:97:a7:df:fd:ab:4f:63:f0:d0:6f: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DC:06:7B:10:EA:9F:1B:47:1E:76:69:B9:CF:81:56:04:C0:83:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/fd7b1c19-0935-38b3-9400-35b3ac8d5761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl X509v3 Authority Key Identifier: keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer sbgp-ipAddrBlock: critical IPv4: 216.120.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:86:62:82:46:0b:17:3e:3b:69:17:de:27:32:0c:5c:0d:e1: 2b:85:2a:3d:5a:28:28:03:bf:0d:df:c8:12:e9:fd:c2:c1:fd: 5b:ed:28:83:9d:d2:1e:14:31:80:81:62:b9:b2:67:d7:a5:e6: cc:f3:c2:0e:3b:d0:77:46:79:a3:3b:4d:60:2c:dc:0d:2f:2a: d3:de:c6:a9:65:c7:b3:65:a0:17:a8:95:25:c7:7b:a2:0f:a6: 3e:5d:2f:de:a2:40:14:d1:75:f6:b6:1c:ef:8c:1c:fd:fb:ab: 1f:69:4c:f1:df:29:c3:40:56:d1:66:d5:65:9f:d0:01:9f:bb: df:24:d4:a5:f8:8a:f6:bd:6a:97:09:27:d3:66:97:3b:6c:9d: d3:c2:7e:05:99:af:e6:28:16:97:6b:b6:3f:70:85:f0:31:af: 93:a7:99:d4:b0:cf:b4:d9:ff:1c:14:e2:e9:ec:31:0d:38:42: f9:d7:eb:26:ce:6b:7f:23:9d:55:1c:ef:e6:36:06:cb:a7:21: 16:1d:04:46:a2:ec:a1:01:e5:c9:b3:f0:e8:ee:c4:f3:c8:a9: 26:b9:e6:07:af:de:a0:26:5a:01:17:57:93:1a:76:c3:cc:d7: 1d:99:d7:e7:c4:c1:0a:b1:b3:40:90:fd:e6:11:5e:78:b2:fd: 93:b4:c1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heojfTI6QgkXB4iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1 NzhmMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NWY4OTZlYzUtM2E2YS00ZDU1LTg0MGItMmI4MTZjZmM5M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1QWJFw39XVYEKyaa43hij+ciIJ21tHicOEo pDkF+KyAVlOxk8ZtMdTz40bZ6GlOwZXx0UcTAwP/Jm2PM1nQk9XG2sJC6h2ZZLIk 3cAxvOvs1wg+lwW4rwqX6JmlvQUZBVfTvfdVFrgFa8TT8W8+Am2aeV4mBaLkiM+0 ZUZ4iUL8YcwGBtjO33cJ6mW3akAmRO3ACaRsZCRNOARsERR9Tgf/xm4mFW3DYJJz 5JJuF0A8qgTacASUM5IUPY5WAbHl4PO/94WfaCpNohQjyp8UOYFFu3ohK2ppDqE9 lZbalZ3jp1GoBGz9hqs//586TCwtmILaZJen3/2rT2Pw0G+pcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbcBnsQ6p8bRx52abnPgVYEwIP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3 YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvZmQ3YjFjMTktMDkzNS0z OGIzLTk0MDAtMzViM2FjOGQ1NzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4 MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm ZDY0ZTU3OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiGYoJGCxc+O2kX3icyDFwN4SuFKj1aKCgDvw3fyBLp/cLB/VvtKIOd 0h4UMYCBYrmyZ9el5szzwg470HdGeaM7TWAs3A0vKtPexqllx7NloBeolSXHe6IP pj5dL96iQBTRdfa2HO+MHP37qx9pTPHfKcNAVtFm1WWf0AGfu98k1KX4iva9apcJ J9NmlztsndPCfgWZr+YoFpdrtj9whfAxr5OnmdSwz7TZ/xwU4unsMQ04QvnX6ybO a38jnVUc7+Y2BsunIRYdBEai7KEB5cmz8OjuxPPIqSa55gev3qAmWgEXV5MadsPM 1x2Z1+fEwQqxs0CQ/eYRXniy/ZO0wV8= -----END CERTIFICATE-----Generated at Wed Jul 29 02:59:15 2026 by rpki-client