$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b7aa0fcd-ab19-3bb7-bff6-1e5a81a40812.roa File: b7aa0fcd-ab19-3bb7-bff6-1e5a81a40812.roa (raw, json) Hash identifier: 2OlP5ZYO8+/WA97aywgmIrHixE1N9/+THoLv+ZfffXc= Subject key identifier: 4A:77:67:5F:A4:0D:66:68:CE:CF:A8:04:38:A5:A9:56:02:73:84:03 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584E9EAFB724CE7AF2EBEE3A3680 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b7aa0fcd-ab19-3bb7-bff6-1e5a81a40812.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 6079 IP address blocks: 208.123.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:b7:24:ce:7a:f2:eb:ee:3a:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=b82ac5ea-97c4-480a-b4b4-dee0d22b969e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:4e:f8:48:72:06:e6:1b:54:d4:87:69:2c: a9:cb:d5:4c:b5:ef:ca:54:28:d9:69:8d:32:4f:24: 65:65:fc:76:d3:1c:af:c7:03:b2:92:76:75:a4:10: 3f:e6:54:af:2e:5a:6f:d0:71:b0:06:88:73:1e:40: 01:19:32:1e:c9:3e:88:e9:5c:83:6a:94:d5:d5:ac: a2:ef:8b:35:4f:e3:95:3d:86:aa:8d:0c:32:e8:7c: 20:17:f3:33:03:c4:32:f4:cb:33:0c:c9:0a:69:09: de:76:40:c3:c3:96:e1:63:5c:fa:fc:c7:2f:80:f8: 16:a8:4c:1f:8a:ad:c7:a8:6c:99:6e:af:a6:35:40: e7:54:54:33:6a:55:06:b1:eb:09:93:fd:a8:87:55: 5b:25:78:e0:49:c7:cf:38:6b:e5:47:13:af:08:04: ed:5c:b7:5e:04:07:9c:e6:ce:26:11:bc:d7:57:f4: a3:72:92:f9:3a:51:a1:b4:04:05:cd:f6:f2:f7:db: f2:ac:d2:eb:f6:da:fe:1c:0d:4e:50:f6:04:9d:47: 1c:d7:10:cf:51:9e:6c:2c:d2:0b:03:e5:37:90:13: af:a5:5c:69:bd:ee:59:fa:6f:13:dc:84:9c:6f:c2: 1d:23:38:91:35:bb:5f:20:7f:ef:d6:17:74:25:26: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:77:67:5F:A4:0D:66:68:CE:CF:A8:04:38:A5:A9:56:02:73:84:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b7aa0fcd-ab19-3bb7-bff6-1e5a81a40812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 208.123.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d5:cc:a9:c1:92:9d:34:92:9f:a5:e4:7c:7b:d9:cc:a8:62: 8b:86:d6:f3:0c:34:2a:30:d0:92:0a:55:30:31:57:e8:5f:30: 74:18:c0:eb:5d:af:9d:98:5d:c5:91:3b:83:4f:52:2c:29:b3: 61:1f:66:43:0b:e9:f9:be:35:31:b0:56:31:7a:86:ed:de:04: 00:c6:f4:a5:40:52:49:15:5e:03:86:72:ad:2d:d4:b1:16:fe: a6:1c:7d:7a:61:8d:c5:8e:f6:30:f8:48:d8:9b:41:5f:48:11: ab:64:f2:a0:42:2e:83:f2:c2:31:df:19:15:e2:f2:11:82:ad: 53:c2:e2:81:dd:50:ed:4f:15:e5:7e:68:2f:0e:ae:d2:a0:78: b9:37:52:ef:79:0f:e9:25:bc:f5:24:96:8f:e3:24:9a:cd:df: 35:03:6e:58:e8:74:77:df:ed:fe:ee:8f:4d:1a:75:58:73:43: 9a:ae:fc:dd:66:77:3c:f2:35:8f:0c:b4:15:30:73:b6:48:18: 50:41:d0:3a:49:a3:ae:f1:76:73:a7:e1:b0:97:bd:0d:37:d1: 7a:71:2c:fb:c5:ea:db:ae:4c:e1:87:f8:d6:b4:24:55:47:85: 1e:22:da:8c:c1:a9:9d:e0:e4:09:24:32:29:77:a1:e1:14:c7: 51:3e:30:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er7ckznry6+46NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk YjgyYWM1ZWEtOTdjNC00ODBhLWI0YjQtZGVlMGQyMmI5NjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh1O+EhyBuYbVNSHaSypy9VMte/KVCjZaY0y TyRlZfx20xyvxwOyknZ1pBA/5lSvLlpv0HGwBohzHkABGTIeyT6I6VyDapTV1ayi 74s1T+OVPYaqjQwy6HwgF/MzA8Qy9MszDMkKaQnedkDDw5bhY1z6/McvgPgWqEwf iq3HqGyZbq+mNUDnVFQzalUGsesJk/2oh1VbJXjgScfPOGvlRxOvCATtXLdeBAec 5s4mEbzXV/SjcpL5OlGhtAQFzfby99vyrNLr9tr+HA1OUPYEnUcc1xDPUZ5sLNIL A+U3kBOvpVxpve5Z+m8T3IScb8IdIziRNbtfIH/v1hd0JSZrOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp3Z1+kDWZozs+oBDilqVYCc4QDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYjdhYTBmY2QtYWIxOS0z YmI3LWJmZjYtMWU1YTgxYTQwODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnVzKnBkp00kp+l5Hx72cyoYouG1vMMNCow0JIKVTAxV+hfMHQYwOtd r52YXcWRO4NPUiwps2EfZkML6fm+NTGwVjF6hu3eBADG9KVAUkkVXgOGcq0t1LEW /qYcfXphjcWO9jD4SNibQV9IEatk8qBCLoPywjHfGRXi8hGCrVPC4oHdUO1PFeV+ aC8OrtKgeLk3Uu95D+klvPUklo/jJJrN3zUDbljodHff7f7uj00adVhzQ5qu/N1m dzzyNY8MtBUwc7ZIGFBB0DpJo67xdnOn4bCXvQ030XpxLPvF6tuuTOGH+Na0JFVH hR4i2ozBqZ3g5AkkMil3oeEUx1E+MOQ= -----END CERTIFICATE-----Generated at Tue Jul 28 17:21:44 2026 by rpki-client