$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa File: c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa (raw, json) Hash identifier: p/kDgjUsHdZLBA+FT/j/nTB/ZJnaf79KnH8KfzYwxDY= Subject key identifier: 7E:4B:C9:9A:DF:85:A1:D8:7C:4C:2E:AC:B4:86:FA:20:C8:0C:21:3A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA7940D5C2698F76EB1B80780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21723 IP address blocks: 209.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:0d:5c:26:98:f7:6e:b1:b8:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6a388fd3-4070-42f4-84b5-7dd767acbda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:87:c2:00:1b:19:42:9b:22:45:29:cd:7a: d6:28:28:82:47:a7:7c:5b:fb:63:e8:aa:10:61:42: 9a:cb:0d:16:db:e1:53:d1:8c:2f:44:6d:d6:20:dc: 48:fc:48:01:79:a8:cc:1d:95:89:a6:29:9c:28:56: 0e:8f:64:12:d1:f4:cf:89:b6:ab:19:7b:19:89:f6: 9e:bc:32:8f:50:c6:76:21:d2:3d:33:56:91:b5:d6: 3c:10:30:c8:66:08:dc:14:e3:5d:0f:f0:dc:ac:83: 50:49:81:cf:95:5f:5d:01:29:e6:b9:b5:1a:43:7a: aa:bb:aa:2c:00:a8:ed:20:6a:9c:66:5d:fc:9d:5c: 5b:29:14:19:8a:74:b4:cc:3c:5c:24:27:db:70:86: e0:8a:80:6d:72:30:98:90:8f:19:32:7a:97:53:46: f9:e4:02:e9:10:72:e3:32:a6:a4:39:c1:ba:2f:30: fb:71:b1:d1:54:a2:66:84:ad:fd:c2:6c:16:bf:fc: af:5e:17:ed:be:73:4a:af:8a:a2:87:be:a1:e5:f0: 7e:dd:b6:f6:e3:3e:9c:37:0e:17:31:bb:f4:57:f1: 5c:d3:58:24:62:42:9c:05:a2:a5:17:e9:1e:79:36: 5d:3e:ba:e0:0c:cd:81:b8:5f:33:7a:d2:c2:f1:88: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4B:C9:9A:DF:85:A1:D8:7C:4C:2E:AC:B4:86:FA:20:C8:0C:21:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ef:c8:93:c6:06:4c:df:97:68:8e:57:fa:15:4a:b7:3f:50:7b: 10:71:3c:4b:b8:9b:1f:a6:ba:a9:53:ca:b6:4e:21:0d:2d:78: 45:b2:51:d8:a9:06:96:f3:e5:36:fc:26:ca:d1:c2:44:ba:1a: cd:b9:7b:f1:5d:a3:d3:3f:0c:59:aa:26:9b:34:e5:b8:81:09: ae:4c:37:64:ae:9c:23:70:12:e4:c8:1c:59:57:7c:c3:ce:10: e9:71:56:d6:1d:91:31:c9:a9:de:60:14:7e:f0:09:43:c2:ef: ac:e4:f0:f2:50:52:b0:e6:71:9c:a2:59:a5:a0:79:78:31:29: b1:5a:78:89:d0:31:74:0d:b9:ad:c6:e6:e0:7a:df:9b:6a:2a: 7d:9c:b1:1e:31:2f:57:c6:4b:97:b2:26:bd:e0:ad:ae:81:88: ac:19:70:ef:84:3e:7e:6e:06:87:85:b4:fe:2c:eb:5d:87:a3: c7:e6:3b:92:a5:11:f8:9a:ad:cd:c4:60:5a:28:06:4f:6b:7f: 10:a2:de:af:dc:c1:5d:a7:16:18:06:6e:b9:d7:60:b4:5b:86: 7e:0b:1a:57:4b:6e:ea:8e:ef:ec:c5:23:69:78:3f:22:bf:4c: 7b:5b:cb:a5:05:d8:04:06:a5:55:9a:89:6a:84:07:93:d5:77: a6:0e:2d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlA1cJpj3brG4B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmEzODhmZDMtNDA3MC00MmY0LTg0YjUtN2RkNzY3YWNiZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaqHwgAbGUKbIkUpzXrWKCiCR6d8W/tj6KoQ YUKayw0W2+FT0YwvRG3WINxI/EgBeajMHZWJpimcKFYOj2QS0fTPibarGXsZifae vDKPUMZ2IdI9M1aRtdY8EDDIZgjcFONdD/DcrINQSYHPlV9dASnmubUaQ3qqu6os AKjtIGqcZl38nVxbKRQZinS0zDxcJCfbcIbgioBtcjCYkI8ZMnqXU0b55ALpEHLj MqakOcG6LzD7cbHRVKJmhK39wmwWv/yvXhftvnNKr4qih76h5fB+3bb24z6cNw4X Mbv0V/Fc01gkYkKcBaKlF+keeTZdPrrgDM2BuF8zetLC8YgNSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5LyZrfhaHYfEwurLSG+iDIDCE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzJhYTk4YWUtYTk4Mi0z ZjQyLTg0M2EtOGMwY2IyYmM5YWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO/Ik8YGTN+XaI5X+hVKtz9QexBxPEu4mx+muqlTyrZOIQ0teEWyUdip Bpbz5Tb8JsrRwkS6Gs25e/Fdo9M/DFmqJps05biBCa5MN2SunCNwEuTIHFlXfMPO EOlxVtYdkTHJqd5gFH7wCUPC76zk8PJQUrDmcZyiWaWgeXgxKbFaeInQMXQNua3G 5uB635tqKn2csR4xL1fGS5eyJr3gra6BiKwZcO+EPn5uBoeFtP4s612Ho8fmO5Kl Efiarc3EYFooBk9rfxCi3q/cwV2nFhgGbrnXYLRbhn4LGldLbuqO7+zFI2l4PyK/ THtby6UF2AQGpVWaiWqEB5PVd6YOLeA= -----END CERTIFICATE-----Generated at Wed Jul 29 05:10:46 2026 by rpki-client