$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa File: a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa (raw, json) Hash identifier: aM9/UMkWfkV7u1aHAY699IhWOIkRqvzaWWJ+P9Xfeno= Subject key identifier: 8B:0E:9C:2B:54:C0:DD:2E:F4:DB:66:33:52:82:D2:0F:54:0C:E9:CA Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AAB26691C3B1E2BB8C42AA100 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 17378 IP address blocks: 208.69.108.0/22 maxlen: 24 208.88.240.0/22 maxlen: 24 209.59.0.0/19 maxlen: 24 209.92.7.0/24 maxlen: 24 209.92.39.0/24 maxlen: 24 209.92.44.0/24 maxlen: 24 209.92.53.0/24 maxlen: 24 209.92.56.0/24 maxlen: 24 209.92.62.0/24 maxlen: 24 209.92.68.0/24 maxlen: 24 209.92.70.0/23 maxlen: 24 209.92.74.0/23 maxlen: 24 209.92.79.0/24 maxlen: 24 209.92.88.0/24 maxlen: 24 209.92.90.0/23 maxlen: 24 209.92.137.0/24 maxlen: 24 209.92.224.0/21 maxlen: 24 209.177.16.0/22 maxlen: 24 216.27.0.0/18 maxlen: 24 216.27.64.0/19 maxlen: 24 216.46.48.0/20 maxlen: 24 216.48.112.0/20 maxlen: 24 216.58.224.0/19 maxlen: 24 216.150.128.0/19 maxlen: 24 216.182.80.0/20 maxlen: 24 216.211.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:69:1c:3b:1e:2b:b8:c4:2a:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=86eb5d70-9646-42d2-8b29-1cb6878ef0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:43:d9:c0:e2:b2:cc:54:97:9a:1f:14:0f: eb:bf:88:70:46:f0:ec:20:86:f6:19:a6:dc:83:25: 9e:6e:6d:cc:3f:27:79:a1:c3:76:fc:a6:62:87:9d: 17:c9:31:80:05:88:cb:0e:3c:9a:2b:e2:23:1f:b5: 5e:79:e4:4f:e0:eb:1e:6b:f6:6a:d7:41:d1:0e:61: e7:52:aa:26:7d:65:4b:50:9d:15:64:a5:5b:d5:64: b3:96:4a:77:71:85:e1:c5:3c:29:77:4f:aa:d1:90: e6:f7:21:9a:b8:90:4b:3b:41:01:31:17:87:4c:c8: 85:bd:79:b8:1b:2f:9d:53:dc:cc:8f:a5:84:4d:b7: e3:fd:f6:dd:0d:0f:cb:d0:78:9e:b2:3a:ef:c8:c7: e0:a8:29:54:d2:7b:56:27:a7:e6:5d:92:b9:e0:7f: 9f:21:a4:51:e7:de:b1:43:84:c8:a0:98:97:0b:bd: 20:e5:b0:cd:3d:18:03:3a:e8:3e:4f:c0:11:70:15: 66:65:71:8f:9c:b8:bc:6f:69:3c:a0:cd:11:80:3e: ef:4b:66:b7:36:8a:6e:77:93:90:ad:d4:89:16:e6: 70:8b:4f:bf:5f:a2:c6:b5:a0:84:5e:65:9e:a4:de: 96:f3:35:a1:d9:79:fd:63:cd:2c:24:66:1f:26:ec: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0E:9C:2B:54:C0:DD:2E:F4:DB:66:33:52:82:D2:0F:54:0C:E9:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.69.108.0/22 208.88.240.0/22 209.59.0.0/19 209.92.7.0/24 209.92.39.0/24 209.92.44.0/24 209.92.53.0/24 209.92.56.0/24 209.92.62.0/24 209.92.68.0/24 209.92.70.0/23 209.92.74.0/23 209.92.79.0/24 209.92.88.0/24 209.92.90.0/23 209.92.137.0/24 209.92.224.0/21 209.177.16.0/22 216.27.0.0-216.27.95.255 216.46.48.0/20 216.48.112.0/20 216.58.224.0/19 216.150.128.0/19 216.182.80.0/20 216.211.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d5:1d:4c:b4:85:5d:18:e9:49:2a:80:50:bb:1e:bc:d4:2c: 82:96:1b:40:7c:72:45:aa:b1:b7:bf:4f:18:03:f3:11:a2:19: 2a:8c:aa:85:ae:b7:1c:53:97:fd:53:e0:b7:73:3c:a0:db:6e: 91:c4:d3:2f:5a:09:37:80:cd:bf:28:4f:16:7d:22:03:c6:2b: 5a:ec:f5:c4:36:97:20:e6:4e:bd:19:ec:e2:4e:57:a7:1c:2b: 88:52:28:1b:b8:e5:1c:a8:c4:95:c8:fe:97:9b:ee:e1:8a:d5: ad:ad:1c:b5:62:23:45:f0:46:2e:7d:e4:27:97:07:38:88:fc: 8c:6d:bb:85:f2:71:97:6a:40:62:bc:bd:1f:f8:4b:77:14:18: 72:98:10:aa:f8:0e:ba:88:79:3e:a5:77:d3:57:0f:3c:1b:46: bf:88:24:31:fc:05:83:5a:0a:19:22:12:31:4e:4c:c4:b4:43: 73:c3:4a:4a:b8:b3:85:81:3a:85:d0:cf:6c:e2:b3:17:4a:d3: 41:7b:cf:9c:bb:48:89:8e:01:70:42:71:9b:c0:f7:4d:52:c0: 33:e7:09:25:a2:50:cb:b5:f5:7b:e9:ab:ef:91:a7:14:7d:26: 28:c2:8b:2e:c2:ce:fa:4b:9b:b0:f8:44:bf:63:70:ae:70:c7: d5:5c:4a:96 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUAQ0Mn0MoWEqrJmkcOx4ruMQqoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODZlYjVkNzAtOTY0Ni00MmQyLThiMjktMWNiNjg3OGVmMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvtD2cDissxUl5ofFA/rv4hwRvDsIIb2Gabc gyWebm3MPyd5ocN2/KZih50XyTGABYjLDjyaK+IjH7VeeeRP4Osea/Zq10HRDmHn UqomfWVLUJ0VZKVb1WSzlkp3cYXhxTwpd0+q0ZDm9yGauJBLO0EBMReHTMiFvXm4 Gy+dU9zMj6WETbfj/fbdDQ/L0HiesjrvyMfgqClU0ntWJ6fmXZK54H+fIaRR596x Q4TIoJiXC70g5bDNPRgDOug+T8ARcBVmZXGPnLi8b2k8oM0RgD7vS2a3Nopud5OQ rdSJFuZwi0+/X6LGtaCEXmWepN6W8zWh2Xn9Y80sJGYfJuxeOQIDAQABo4ID8TCC A+0wHQYDVR0OBBYEFIsOnCtUwN0u9NtmM1KC0g9UDOnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTUyNjM1M2YtMmRkYy0z NDU3LWJjNDEtZGExY2QxY2MwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBALQ RWwDBALQWPADBAXROwADBADRXAcDBADRXCcDBADRXCwDBADRXDUDBADRXDgDBADR XD4DBADRXEQDBAHRXEYDBAHRXEoDBADRXE8DBADRXFgDBAHRXFoDBADRXIkDBAPR XOADBALRsRAwCwMDANgbAwQF2BtAAwQE2C4wAwQE2DBwAwQF2DrgAwQF2JaAAwQE 2LZQAwQE2NOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEjVHUy0hV0Y6UkqgFC7HrzULIKWG0B8ckWqsbe/ TxgD8xGiGSqMqoWutxxTl/1T4LdzPKDbbpHE0y9aCTeAzb8oTxZ9IgPGK1rs9cQ2 lyDmTr0Z7OJOV6ccK4hSKBu45RyoxJXI/peb7uGK1a2tHLViI0XwRi595CeXBziI /Ixtu4XycZdqQGK8vR/4S3cUGHKYEKr4DrqIeT6ld9NXDzwbRr+IJDH8BYNaChki EjFOTMS0Q3PDSkq4s4WBOoXQz2zisxdK00F7z5y7SImOAXBCcZvA901SwDPnCSWi UMu19Xvpq++RpxR9JijCiy7CzvpLm7D4RL9jcK5wx9VcSpY= -----END CERTIFICATE-----Generated at Tue Aug 5 20:14:10 2025 by rpki-client