$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa File: 19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa (raw, json) Hash identifier: 6yQF7fKdQqXl0IDqtB/Pn1xns0n9HIZDFqTsOFJ9tsw= Subject key identifier: B8:CB:3B:BD:6F:8B:61:50:CC:E6:CE:16:94:99:78:E7:95:97:45:9C Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584EA797F373F1E3D591675C8F00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10397 IP address blocks: 209.209.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:f3:73:f1:e3:d5:91:67:5c:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=706d21c2-4e94-4be7-96ef-03d63d21bf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:10:f9:6d:2f:1e:f3:a6:0d:a2:83:c5:ac: 48:00:f8:f8:1d:70:50:ed:82:70:76:7c:7d:7c:47: 7c:bf:d9:73:f6:e1:a5:3a:2b:8d:1b:50:4c:a8:20: ad:33:32:a2:2c:7d:e1:67:ca:83:f6:f0:b8:86:56: 0d:ec:94:c1:a9:4b:9e:f3:37:fc:c5:cf:22:a8:0e: fc:a7:04:19:58:c6:26:ce:45:3f:df:26:5a:15:d1: a8:a1:b5:65:48:7c:a5:2c:9b:e8:c0:b2:dc:51:da: ab:e3:c7:79:93:e7:e9:34:cd:b6:59:b5:b6:6b:31: 45:00:44:15:aa:8b:6d:5b:c1:fb:87:64:59:50:49: 4f:11:59:6b:49:fe:d9:61:d9:ce:38:5b:e5:bc:17: 9a:65:73:40:09:71:45:6b:c7:3e:2f:e0:d0:2f:a9: ae:91:0e:22:70:96:e1:da:f7:64:64:1d:65:c0:a1: b3:51:08:0b:30:13:36:e8:52:4c:99:d4:75:55:a7: 62:2f:c0:99:2c:6b:eb:08:f2:58:0c:24:f2:56:32: 28:08:b0:3d:8e:71:64:87:4d:46:fc:d4:02:e4:95: d7:15:b0:ce:e1:35:0a:25:7c:99:99:18:f1:5e:97: 59:e6:c8:47:f7:9c:16:11:34:20:3a:03:f8:c8:9e: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CB:3B:BD:6F:8B:61:50:CC:E6:CE:16:94:99:78:E7:95:97:45:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8e:0d:d9:ff:31:c0:14:7c:32:4a:3d:17:28:a2:7a:1a:d5: 49:88:b2:29:37:6d:7e:ab:28:d9:e5:b1:c7:40:1e:e7:e8:a5: 73:b4:d0:c0:16:16:6f:6f:c7:a0:13:8b:c0:a1:14:c2:b5:ab: a4:46:e3:ee:a0:3c:22:7a:f8:a7:bb:21:8e:05:5a:a6:68:7d: fc:e3:4d:5e:5b:93:21:9a:76:21:09:58:26:01:e1:d6:7f:62: c4:ba:4d:b9:fd:00:02:8b:1f:6e:bc:ea:fe:8f:35:54:bb:ec: f1:95:95:50:1d:6f:2c:73:4d:3d:3e:c4:c8:48:8e:67:f1:20: ec:8e:47:1b:47:7c:38:7d:bd:3e:dd:94:14:bd:a6:b6:1a:04: ce:06:de:b8:30:23:01:e6:74:34:70:16:f9:79:18:c3:51:80: 13:25:24:78:23:8f:4b:d1:95:48:ef:af:1c:c2:88:fa:6d:d9: f1:72:b0:e9:24:4e:a6:3c:a2:4d:27:01:15:d9:de:fd:bf:53: 78:34:95:cc:44:ff:92:1f:54:34:c4:97:08:fb:b4:bf:c4:8d: dc:e4:f6:9d:50:0a:00:d8:b3:af:1f:2b:21:6a:5c:96:57:12: 50:13:6d:c0:88:0c:8a:1b:f8:79:06:a3:3c:67:cc:91:d1:88: 96:44:35:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl/Nz8ePVkWdcjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzA2ZDIxYzItNGU5NC00YmU3LTk2ZWYtMDNkNjNkMjFiZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst0Q+W0vHvOmDaKDxaxIAPj4HXBQ7YJwdnx9 fEd8v9lz9uGlOiuNG1BMqCCtMzKiLH3hZ8qD9vC4hlYN7JTBqUue8zf8xc8iqA78 pwQZWMYmzkU/3yZaFdGoobVlSHylLJvowLLcUdqr48d5k+fpNM22WbW2azFFAEQV qottW8H7h2RZUElPEVlrSf7ZYdnOOFvlvBeaZXNACXFFa8c+L+DQL6mukQ4icJbh 2vdkZB1lwKGzUQgLMBM26FJMmdR1VadiL8CZLGvrCPJYDCTyVjIoCLA9jnFkh01G /NQC5JXXFbDO4TUKJXyZmRjxXpdZ5shH95wWETQgOgP4yJ4p2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjLO71vi2FQzObOFpSZeOeVl0WcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTliNGU4ZTItNmQzNC0z ZWE1LTkxYjUtOGZiMzkxOGE2YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWODdn/McAUfDJKPRcoonoa1UmIsik3bX6rKNnlscdAHufopXO00MAW Fm9vx6ATi8ChFMK1q6RG4+6gPCJ6+Ke7IY4FWqZoffzjTV5bkyGadiEJWCYB4dZ/ YsS6Tbn9AAKLH2686v6PNVS77PGVlVAdbyxzTT0+xMhIjmfxIOyORxtHfDh9vT7d lBS9prYaBM4G3rgwIwHmdDRwFvl5GMNRgBMlJHgjj0vRlUjvrxzCiPpt2fFysOkk TqY8ok0nARXZ3v2/U3g0lcxE/5IfVDTElwj7tL/Ejdzk9p1QCgDYs68fKyFqXJZX ElATbcCIDIob+HkGozxnzJHRiJZENd0= -----END CERTIFICATE-----Generated at Wed Jul 29 05:05:02 2026 by rpki-client