$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa File: caa97378-5f08-3b0d-b7e1-827ad74af39f.roa (raw, json) Hash identifier: 1CRAWjpsOG1MXQ04KtDUOjLjYNiRqIYurfQ8BhuEQFk= Subject key identifier: DD:5E:4B:A4:AB:EC:60:74:E5:E7:A8:9B:84:EE:87:39:1D:9D:06:58 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584EA79C50E254F21A5E75AEAB00 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36290 IP address blocks: 204.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:50:e2:54:f2:1a:5e:75:ae:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aabe332d-31f8-491b-ad4d-ef87c764f675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:9c:a7:e0:82:d9:a0:dd:33:df:8e:4e:5c: 69:e8:e7:3a:e1:f8:22:52:ac:c5:25:78:37:19:28: 11:3d:a8:2d:16:37:94:83:77:1d:6a:0c:2c:58:e6: 9c:f2:73:57:cc:76:d7:ce:6b:02:45:6e:7c:68:a9: 9b:b1:c5:6d:09:b8:fd:86:c6:4f:2f:c0:1c:92:f9: 9c:2c:6b:10:e5:16:43:91:a5:52:7a:d5:f0:9b:a6: 42:03:01:9d:be:99:19:24:8a:6b:88:fc:46:66:5c: a9:00:f6:ab:1b:8c:da:40:94:9e:c6:19:cd:53:e8: ab:9c:da:52:08:81:e5:e5:21:11:d3:77:fc:91:8f: 75:2f:26:56:5c:d8:72:1f:9f:58:90:6b:b1:4f:f6: 87:27:a6:77:0d:63:d3:b9:c8:d9:77:79:57:e3:62: fd:21:78:da:06:63:c9:83:fa:68:ad:52:c3:08:a7: 59:3f:96:cf:92:ee:ad:2a:73:86:8a:4f:cf:47:e2: d4:d8:46:4c:30:e7:37:fa:32:2e:19:55:0f:71:d4: 06:2b:59:6a:79:1b:c0:49:f7:a9:49:8c:78:04:c4: 37:ae:20:3f:05:e9:2f:14:c6:57:be:0d:eb:f4:95: 8b:e4:e7:84:1f:34:5b:4e:67:6f:10:d2:5e:ce:52: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:4B:A4:AB:EC:60:74:E5:E7:A8:9B:84:EE:87:39:1D:9D:06:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6f:15:2f:8d:a1:c6:a3:d8:99:4c:f1:63:cf:49:03:23:6e: a0:74:4d:41:0e:37:fd:22:33:2a:8f:32:62:47:7e:cf:ed:0b: 0d:11:24:21:15:d9:5a:52:62:05:d9:b6:ec:c9:72:3a:70:6e: 7a:2d:94:87:e6:83:86:38:35:82:50:2d:c9:6d:2a:36:23:5e: b7:a5:9b:9a:1d:f8:e1:e2:8a:9e:eb:d3:2d:90:96:b5:7d:1c: 8f:3b:c9:c8:86:20:07:39:81:1b:53:b2:bb:80:a6:c7:df:27: a2:ca:21:ac:dd:85:95:2e:59:4e:4a:27:92:eb:65:c7:b3:e0: cd:08:62:96:8e:ff:f4:70:1c:8c:56:06:40:01:04:58:2d:1d: 29:bc:ec:3b:27:55:7f:43:51:8a:12:63:66:a1:00:15:83:7a: 7d:42:1c:0c:18:d2:6c:c9:30:3b:7c:51:5e:0a:b1:f6:6e:33: 19:1a:0a:eb:2a:98:39:dd:31:28:80:19:37:07:ed:f8:7e:72: 35:48:2f:b4:e0:18:2e:f9:14:e9:af:b1:e7:99:4b:40:06:3d: 79:6f:85:d7:e9:58:d4:ac:0a:5f:e3:3c:2c:4a:18:0c:a9:9c: 2c:91:47:fd:47:04:f5:a8:c6:8f:a7:28:49:bc:bd:06:a8:14: c1:0e:cb:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnFDiVPIaXnWuqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWFiZTMzMmQtMzFmOC00OTFiLWFkNGQtZWY4N2M3NjRmNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzqcp+CC2aDdM9+OTlxp6Oc64fgiUqzFJXg3 GSgRPagtFjeUg3cdagwsWOac8nNXzHbXzmsCRW58aKmbscVtCbj9hsZPL8Ackvmc LGsQ5RZDkaVSetXwm6ZCAwGdvpkZJIpriPxGZlypAParG4zaQJSexhnNU+irnNpS CIHl5SER03f8kY91LyZWXNhyH59YkGuxT/aHJ6Z3DWPTucjZd3lX42L9IXjaBmPJ g/porVLDCKdZP5bPku6tKnOGik/PR+LU2EZMMOc3+jIuGVUPcdQGK1lqeRvASfep SYx4BMQ3riA/BekvFMZXvg3r9JWL5OeEHzRbTmdvENJezlLcMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1eS6Sr7GB05eeom4TuhzkdnQZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvY2FhOTczNzgtNWYwOC0z YjBkLWI3ZTEtODI3YWQ3NGFmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtvFS+Nocaj2JlM8WPPSQMjbqB0TUEON/0iMyqPMmJHfs/tCw0RJCEV 2VpSYgXZtuzJcjpwbnotlIfmg4Y4NYJQLcltKjYjXrelm5od+OHiip7r0y2QlrV9 HI87yciGIAc5gRtTsruApsffJ6LKIazdhZUuWU5KJ5LrZcez4M0IYpaO//RwHIxW BkABBFgtHSm87DsnVX9DUYoSY2ahABWDen1CHAwY0mzJMDt8UV4KsfZuMxkaCusq mDndMSiAGTcH7fh+cjVIL7TgGC75FOmvseeZS0AGPXlvhdfpWNSsCl/jPCxKGAyp nCyRR/1HBPWoxo+nKEm8vQaoFMEOy4o= -----END CERTIFICATE-----Generated at Wed Jul 29 12:53:15 2026 by rpki-client