$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa File: a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa (raw, json) Hash identifier: jvjF6Yd6q2hIkU/Y+Yf4pVwitqrRSi9eUEljQ0inudY= Subject key identifier: 97:D1:0E:E9:B7:93:5F:26:B9:88:61:D5:51:BD:D4:2A:D7:A6:57:57 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA798A83A8B5F460A32124E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 852 IP address blocks: 209.171.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:a8:3a:8b:5f:46:0a:32:12:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=67802bd1-b8ba-4a2a-a10c-3c1c6919dad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:f6:04:db:f2:52:b1:a3:91:aa:f3:ba:f1: 16:2e:27:35:f6:7b:33:79:7f:fb:8f:47:fd:dc:11: 4a:c6:1d:7e:c1:80:47:97:76:74:43:6d:e3:95:d6: ec:a2:bc:99:af:62:2e:13:d1:c0:50:9e:82:6f:a8: 4f:2e:cb:b0:c3:16:ec:9e:3b:93:f0:c1:cc:03:05: 1e:ac:9e:bd:c6:e8:54:fa:c9:1e:d1:2b:c4:f1:6b: 1a:7c:40:92:53:12:67:02:4d:d2:9e:4d:7f:20:9a: b7:76:d0:b2:5d:84:f0:5b:d7:4a:15:61:9e:34:f1: 6e:a6:b3:12:7f:9e:bb:68:27:67:5d:a8:69:cc:55: cc:8e:46:9c:ab:bf:a7:3e:19:20:99:f2:61:0d:64: 3c:59:7f:b6:b0:ce:7e:3c:73:ce:72:2e:71:45:9c: d1:79:b5:5e:7c:23:bb:23:08:01:79:ee:cc:6e:a1: 93:58:81:7b:4c:b0:2b:ae:3e:6e:25:22:61:15:3b: 67:8e:0f:7a:73:21:95:46:68:1b:8a:b1:d8:48:e5: 9c:17:73:22:ba:88:d7:eb:f3:d7:d2:50:ae:62:be: 3b:5a:8a:11:19:fe:82:10:b1:c9:26:76:8d:0e:7e: 93:1d:7b:22:8c:0c:38:2d:ce:29:45:1d:9f:81:67: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D1:0E:E9:B7:93:5F:26:B9:88:61:D5:51:BD:D4:2A:D7:A6:57:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e0:f1:18:b5:b4:08:fd:59:ba:6a:71:95:a0:25:2d:27:c3: e1:67:c7:97:a9:ad:87:2e:78:16:a7:3b:24:50:60:2a:65:83: 33:ee:3e:5f:d8:83:c9:7c:a9:01:b6:ad:64:e4:81:62:df:42: 1e:f7:8f:94:09:d0:62:46:02:d4:80:cc:72:95:75:00:4b:34: c3:e3:8d:3e:65:d9:d6:30:ee:76:67:90:c0:cc:47:ce:15:9b: cb:60:f7:f1:fd:f9:a7:87:ec:75:86:b2:bf:71:98:cf:ab:25: d8:a9:7b:b7:6e:2b:7c:9e:b7:0a:9e:1b:3d:26:42:14:59:20: 4c:f4:58:2b:38:08:0a:f1:f4:36:40:90:49:71:55:f9:71:57: f2:07:d5:bc:61:74:7a:3d:4f:6e:cd:51:09:09:0b:82:cd:21: cf:8e:e1:74:ea:2f:f7:54:e4:34:ad:27:e9:d8:4b:ba:e9:67: ee:8f:9b:51:00:ed:be:60:a5:0a:16:8e:76:b9:e7:eb:b6:d2: 00:4b:7c:e2:b8:71:6b:31:d1:3a:17:1f:4e:0c:0c:e5:e7:e0: a1:15:dd:a7:a7:d5:25:ce:0a:db:27:5c:f0:62:f4:db:fa:68: 18:be:73:18:10:13:60:b0:5f:a4:16:10:f9:06:70:65:10:9c: 69:27:ec:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmKg6i19GCjISTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Njc4MDJiZDEtYjhiYS00YTJhLWExMGMtM2MxYzY5MTlkYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigP2BNvyUrGjkarzuvEWLic19nszeX/7j0f9 3BFKxh1+wYBHl3Z0Q23jldbsoryZr2IuE9HAUJ6Cb6hPLsuwwxbsnjuT8MHMAwUe rJ69xuhU+ske0SvE8WsafECSUxJnAk3Snk1/IJq3dtCyXYTwW9dKFWGeNPFuprMS f567aCdnXahpzFXMjkacq7+nPhkgmfJhDWQ8WX+2sM5+PHPOci5xRZzRebVefCO7 IwgBee7MbqGTWIF7TLArrj5uJSJhFTtnjg96cyGVRmgbirHYSOWcF3MiuojX6/PX 0lCuYr47WooRGf6CELHJJnaNDn6THXsijAw4Lc4pRR2fgWdJJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfRDum3k18muYhh1VG91CrXpldXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTYxY2JkNGQtNmNlYS0z MmJkLTljNjctN2IxM2JmMmMxNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0asQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbg8Ri1tAj9WbpqcZWgJS0nw+Fnx5eprYcueBanOyRQYCplgzPuPl/Y g8l8qQG2rWTkgWLfQh73j5QJ0GJGAtSAzHKVdQBLNMPjjT5l2dYw7nZnkMDMR84V m8tg9/H9+aeH7HWGsr9xmM+rJdipe7duK3yetwqeGz0mQhRZIEz0WCs4CArx9DZA kElxVflxV/IH1bxhdHo9T27NUQkJC4LNIc+O4XTqL/dU5DStJ+nYS7rpZ+6Pm1EA 7b5gpQoWjna55+u20gBLfOK4cWsx0ToXH04MDOXn4KEV3aen1SXOCtsnXPBi9Nv6 aBi+cxgQE2CwX6QWEPkGcGUQnGkn7Ak= -----END CERTIFICATE-----Generated at Wed Jul 29 04:54:44 2026 by rpki-client