$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa File: f18747e6-7bea-32fa-877d-0db804fae88a.roa (raw, json) Hash identifier: Ta8GuhotK6x5dnG91o0B8hXrQxqrc7stclh5mput+1o= Subject key identifier: 84:5D:86:F0:DE:AE:4E:73:57:EF:46:AD:80:DC:24:1B:05:71:38:B7 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584EA7947272729AB378163FE540 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10397 IP address blocks: 209.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:72:72:72:9a:b3:78:16:3f:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=73a93a57-ece7-4fce-9fd3-c13f93352663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0d:ac:ad:74:5a:ca:ae:ef:c3:d0:0b:1c:88: fb:b6:c5:44:fc:c1:ff:4a:49:41:5c:cb:37:56:fa: d3:b2:0e:00:bd:64:eb:5e:f0:84:e5:98:cd:30:5c: 37:d7:5c:4f:6f:d6:15:d5:20:e9:03:4e:17:16:6e: 85:ad:67:bd:1d:6e:34:d7:0c:08:c5:e8:ae:87:2f: 9c:49:69:9a:7c:51:10:6f:7a:ef:b3:00:30:3e:ba: b8:3d:8f:c1:a6:3a:90:a4:c4:22:e6:99:4a:a1:e6: f8:72:8e:70:de:0e:d0:b4:b7:61:29:2c:45:10:72: 56:7a:eb:2f:93:95:58:26:52:31:64:8c:36:06:cb: f4:70:e5:9a:68:e0:11:db:25:31:80:ea:e7:b1:38: 65:5e:ea:39:9f:84:8c:da:89:d8:99:ab:09:ca:50: ef:a3:c4:d6:dd:d8:b7:1b:47:47:d5:70:27:55:de: 4d:38:23:93:19:d6:e3:1d:0a:61:ab:c3:28:d8:b2: 87:ad:e7:a6:8f:44:a5:97:ba:fb:a8:8e:72:ea:11: f3:5d:2f:44:1a:2f:8c:63:8b:b4:4b:97:12:6f:a7: 8f:dc:64:87:92:fd:98:94:f3:65:14:6e:15:5a:b6: a1:a7:35:dd:ff:22:fe:24:65:14:8b:76:9b:76:31: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:86:F0:DE:AE:4E:73:57:EF:46:AD:80:DC:24:1B:05:71:38:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:60:6c:e5:3c:b7:b1:f8:57:ee:2c:a5:e5:ff:1b:f1:de:15: ff:c3:ec:cd:17:45:c2:9b:0f:22:45:e6:1a:b8:df:7f:cb:f6: ae:0b:78:4b:71:a5:93:e6:7c:53:e3:83:68:9c:07:42:f9:27: 86:87:15:05:fa:3a:b8:14:87:bd:47:67:82:87:94:54:aa:be: 5d:35:c7:29:c0:14:ee:dc:c6:8b:4c:e2:97:1f:38:3b:72:bf: 49:96:e7:65:3c:58:28:42:15:fc:3c:cc:68:15:5f:c6:75:8e: 9e:1c:33:35:2c:a2:36:c5:03:db:06:c1:95:f1:72:25:fe:a3: 8c:66:8d:77:3b:12:50:bf:47:d2:9a:0f:d5:1e:ef:78:d9:ca: f3:c2:0a:ec:b0:ad:ba:37:f5:c3:cd:f0:cb:54:bc:09:68:12: 20:49:bd:2e:38:90:19:ec:39:5f:48:cb:9e:1a:21:d1:43:c7: cc:82:07:ff:a0:c1:54:74:6e:17:1c:0c:b3:60:1e:9d:31:d3: 1c:88:98:95:8c:16:81:9d:21:ea:67:5d:6f:6c:13:01:f0:1a: 3c:36:61:fd:d0:6b:21:40:4a:ca:79:f1:df:a2:f2:9e:88:3f: 75:e2:6b:58:56:c6:41:7f:32:0f:79:97:d2:b4:f5:6c:b4:05: a1:9d:1b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlHJycpqzeBY/5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzNhOTNhNTctZWNlNy00ZmNlLTlmZDMtYzEzZjkzMzUyNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg2srXRayq7vw9ALHIj7tsVE/MH/SklBXMs3 VvrTsg4AvWTrXvCE5ZjNMFw311xPb9YV1SDpA04XFm6FrWe9HW401wwIxeiuhy+c SWmafFEQb3rvswAwPrq4PY/BpjqQpMQi5plKoeb4co5w3g7QtLdhKSxFEHJWeusv k5VYJlIxZIw2Bsv0cOWaaOAR2yUxgOrnsThlXuo5n4SM2onYmasJylDvo8TW3di3 G0dH1XAnVd5NOCOTGdbjHQphq8Mo2LKHreemj0Sll7r7qI5y6hHzXS9EGi+MY4u0 S5cSb6eP3GSHkv2YlPNlFG4VWrahpzXd/yL+JGUUi3abdjElEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRdhvDerk5zV+9GrYDcJBsFcTi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjE4NzQ3ZTYtN2JlYS0z MmZhLTg3N2QtMGRiODA0ZmFlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdgbOU8t7H4V+4speX/G/HeFf/D7M0XRcKbDyJF5hq433/L9q4LeEtx pZPmfFPjg2icB0L5J4aHFQX6OrgUh71HZ4KHlFSqvl01xynAFO7cxotM4pcfODty v0mW52U8WChCFfw8zGgVX8Z1jp4cMzUsojbFA9sGwZXxciX+o4xmjXc7ElC/R9Ka D9Ue73jZyvPCCuywrbo39cPN8MtUvAloEiBJvS44kBnsOV9Iy54aIdFDx8yCB/+g wVR0bhccDLNgHp0x0xyImJWMFoGdIepnXW9sEwHwGjw2Yf3QayFASsp58d+i8p6I P3Xia1hWxkF/Mg95l9K09Wy0BaGdG1k= -----END CERTIFICATE-----Generated at Wed Jul 29 08:26:42 2026 by rpki-client