$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa File: aa000e23-1120-334a-ad1d-5bf8f562f368.roa (raw, json) Hash identifier: 7q5Y9ysTYsS0eJ7aGST9+gSoX9UzOFZi1HGtn6zSo8Q= Subject key identifier: 16:72:4E:F0:BE:79:9A:85:ED:EA:16:E5:05:EC:DD:9A:56:B6:62:A6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA7940DA0FEDF2B4320071950 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21723 IP address blocks: 207.194.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:0d:a0:fe:df:2b:43:20:07:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d68c801a-561c-4745-8267-3ff9ed8f22a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:04:ae:59:2a:13:28:be:e9:e8:72:b8:43: 37:28:58:c3:e4:d8:35:34:3f:e8:38:50:6f:56:e7: fc:f6:ee:ab:11:f9:e4:0d:19:97:b1:1b:32:c0:20: cf:70:5e:76:11:45:76:ad:10:00:c3:3c:d6:ce:1f: 5a:98:95:d6:cf:40:98:88:bb:e4:86:44:9f:39:ba: de:45:8c:6e:b9:33:dc:9e:1f:5b:10:77:31:26:f6: 45:73:66:8a:5d:49:71:26:f1:04:79:1a:68:66:f7: 0b:bc:e2:3f:33:56:29:d6:f7:c1:65:a1:a9:88:76: c3:fd:52:d9:4c:15:b5:42:dd:0e:0c:94:df:73:79: fa:90:81:2a:5f:11:ee:5f:f4:40:db:f8:89:85:e8: 0e:80:7d:c8:ce:c6:d2:dc:80:b3:3d:51:a7:18:69: 1c:99:85:d7:1a:f4:a7:a6:43:ac:21:04:aa:03:06: 5f:bd:d7:7a:dd:b4:5d:4f:51:94:ec:55:63:e5:87: 19:7f:cc:2c:3b:7d:67:da:b2:8c:ae:f0:38:a9:2a: 93:eb:19:37:d5:fa:ab:33:69:e8:ce:b9:e1:d6:5a: 27:ac:6c:d9:af:08:1e:20:b7:ec:60:3e:83:0d:03: b5:5c:23:b3:e7:b6:6c:30:2c:5c:70:2c:73:e0:15: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:72:4E:F0:BE:79:9A:85:ED:EA:16:E5:05:EC:DD:9A:56:B6:62:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d1:09:81:32:0a:37:a9:76:6c:71:26:a2:90:ea:4a:1f:8c: bc:76:02:dd:61:d3:7d:fa:0b:5e:f3:e1:71:bf:6c:f4:96:b7: cd:1a:a0:dd:d3:18:ff:5f:af:91:f4:5e:16:cc:7d:bf:83:a7: ad:d0:ee:5a:76:c9:6a:f7:05:c2:ae:fc:f9:85:8f:0d:bf:5f: a5:2b:5c:ab:0c:c7:ea:9b:d4:c4:65:28:b7:c0:f1:15:bf:0c: f3:89:b5:4a:9f:90:c0:5b:76:ae:1f:fc:ae:12:1f:f2:b0:13: eb:13:59:e6:d2:c6:5b:42:69:fe:e6:4c:26:a6:59:a0:3a:b8: 7d:e2:de:22:25:3d:bc:6f:df:fd:82:60:03:41:ee:61:e5:2a: ee:47:49:03:75:23:4f:da:9e:7d:01:11:58:7d:1a:69:c9:19: 5e:72:41:18:3a:20:89:b2:56:63:5b:f2:5a:f7:c1:39:41:4c: 66:ed:cb:4d:5d:ce:b8:6c:0a:c8:c6:4a:54:ba:b8:4a:6a:36: 6d:4d:fc:45:59:cf:2f:c3:d4:9f:33:57:b1:4d:8f:d0:f2:2f: 8f:aa:a1:65:aa:de:65:d3:d9:6b:ff:13:04:48:72:b7:49:b1: c9:57:01:b9:9a:a8:99:e0:c9:01:4f:6f:44:c1:84:f5:51:b8: ef:99:47:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlA2g/t8rQyAHGVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDY4YzgwMWEtNTYxYy00NzQ1LTgyNjctM2ZmOWVkOGYyMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEoErlkqEyi+6ehyuEM3KFjD5Ng1ND/oOFBv Vuf89u6rEfnkDRmXsRsywCDPcF52EUV2rRAAwzzWzh9amJXWz0CYiLvkhkSfObre RYxuuTPcnh9bEHcxJvZFc2aKXUlxJvEEeRpoZvcLvOI/M1Yp1vfBZaGpiHbD/VLZ TBW1Qt0ODJTfc3n6kIEqXxHuX/RA2/iJhegOgH3IzsbS3ICzPVGnGGkcmYXXGvSn pkOsIQSqAwZfvdd63bRdT1GU7FVj5YcZf8wsO31n2rKMrvA4qSqT6xk31fqrM2no zrnh1lonrGzZrwgeILfsYD6DDQO1XCOz57ZsMCxccCxz4BXy7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZyTvC+eZqF7eoW5QXs3ZpWtmKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWEwMDBlMjMtMTEyMC0z MzRhLWFkMWQtNWJmOGY1NjJmMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPRCYEyCjepdmxxJqKQ6kofjLx2At1h0336C17z4XG/bPSWt80aoN3T GP9fr5H0XhbMfb+Dp63Q7lp2yWr3BcKu/PmFjw2/X6UrXKsMx+qb1MRlKLfA8RW/ DPOJtUqfkMBbdq4f/K4SH/KwE+sTWebSxltCaf7mTCamWaA6uH3i3iIlPbxv3/2C YANB7mHlKu5HSQN1I0/ann0BEVh9GmnJGV5yQRg6IImyVmNb8lr3wTlBTGbty01d zrhsCsjGSlS6uEpqNm1N/EVZzy/D1J8zV7FNj9DyL4+qoWWq3mXT2Wv/EwRIcrdJ sclXAbmaqJngyQFPb0TBhPVRuO+ZR3w= -----END CERTIFICATE-----Generated at Wed Jul 29 09:10:13 2026 by rpki-client