$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/4b8f80f9-63c7-3bfe-9991-56433a798d18.roa File: 4b8f80f9-63c7-3bfe-9991-56433a798d18.roa (raw, json) Hash identifier: oE2ps2CqjDFYfRZyuOkQfxCUlEYu8x3ZBqSSEb1HEbE= Subject key identifier: 4C:88:8D:6B:BD:6A:5E:66:85:3A:9C:A6:B0:90:C3:1F:17:65:B1:22 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584EA79BA266437463EE04D207DE Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/4b8f80f9-63c7-3bfe-9991-56433a798d18.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 208.56.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:a2:66:43:74:63:ee:04:d2:07:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bff7bb80-844d-41bf-b157-cd5d08fdf6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:a8:80:a4:e2:f5:6e:0f:ab:4f:36:fb:df: 72:6b:28:73:90:bc:26:ce:f1:d1:cf:74:ee:59:dd: 18:5a:21:cd:67:81:fd:1e:57:14:da:58:ae:a1:77: ee:f1:ad:3f:6d:c6:3a:60:26:62:cf:c1:24:c5:68: 7b:c7:d0:82:08:e4:a2:52:0a:38:1e:bb:c5:a5:1c: 28:73:d1:ab:85:5b:f1:6a:49:60:7a:f6:70:5a:3e: dc:4f:fd:b0:82:4c:97:c9:eb:80:a0:f9:ea:93:b1: 3c:c2:cd:1c:54:be:e8:49:e1:43:c8:09:37:f4:ff: 2e:37:fa:1d:53:9c:77:bd:6b:e6:29:8d:c7:72:1c: 40:aa:96:b0:db:6f:c0:90:92:06:72:67:a8:27:48: 19:ae:f3:13:b3:33:ce:59:55:5f:63:05:73:c3:76: b9:1a:eb:9b:74:6d:f4:87:d9:0f:28:f8:cc:42:c6: 49:c0:65:bc:0b:4c:dc:db:75:6c:fd:96:f0:44:bd: 7a:f5:ca:29:4f:3d:76:7c:51:b9:ba:fa:ac:dd:79: 39:51:83:ec:67:b2:31:7c:f4:c7:37:24:2e:58:fe: ef:05:ad:62:26:f5:4f:24:f8:c0:e9:6c:4b:b9:bd: 29:fc:b8:e6:7a:cf:41:32:65:39:73:28:86:80:d4: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:88:8D:6B:BD:6A:5E:66:85:3A:9C:A6:B0:90:C3:1F:17:65:B1:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/4b8f80f9-63c7-3bfe-9991-56433a798d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e9:b8:e1:d0:05:5e:86:52:75:ad:9c:92:2c:52:a7:e4:0c: e1:bd:ab:4d:16:46:f2:46:43:f5:e5:b5:a4:da:26:4d:3c:6a: dd:0f:a4:09:1f:e3:6b:4d:f3:ba:22:50:e0:d4:fd:16:d6:0c: c5:c7:3e:97:66:e6:4b:b4:7a:be:44:93:d0:30:13:45:81:4b: a4:50:46:5e:d9:2c:13:da:b1:21:97:70:d3:a3:63:68:95:a3: 43:46:18:11:5f:99:df:cb:5e:64:de:d1:79:48:d8:8a:9b:14: 79:68:2b:96:5d:cc:6f:4c:2f:e8:8f:d4:a5:44:c1:a1:50:d0: e0:a9:6c:cf:a8:a4:c4:68:e5:15:f6:52:76:19:ec:5a:86:aa: 4d:15:2a:ac:25:c7:ad:57:e7:8a:a0:9e:32:2d:21:24:c3:09: 85:fc:86:d8:e7:fc:bd:5d:0a:1c:86:c0:86:e5:d9:51:68:cb: 69:9e:fe:aa:ae:6e:e7:ee:65:aa:0e:17:32:93:46:9c:f0:36: c9:d1:b1:9c:d7:78:5b:10:a8:a6:e9:0f:21:71:bd:85:60:58: f5:88:17:42:5b:01:cd:30:28:b5:76:c8:db:2a:7f:52:3a:d3: bb:38:f0:b4:b5:d2:72:ff:a1:a5:50:10:ac:41:75:97:43:5f: ca:ce:fd:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm6JmQ3Rj7gTSB94wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmZmN2JiODAtODQ0ZC00MWJmLWIxNTctY2Q1ZDA4ZmRmNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzCogKTi9W4Pq082+99yayhzkLwmzvHRz3Tu Wd0YWiHNZ4H9HlcU2liuoXfu8a0/bcY6YCZiz8EkxWh7x9CCCOSiUgo4HrvFpRwo c9GrhVvxaklgevZwWj7cT/2wgkyXyeuAoPnqk7E8ws0cVL7oSeFDyAk39P8uN/od U5x3vWvmKY3HchxAqpaw22/AkJIGcmeoJ0gZrvMTszPOWVVfYwVzw3a5GuubdG30 h9kPKPjMQsZJwGW8C0zc23Vs/ZbwRL169copTz12fFG5uvqs3Xk5UYPsZ7IxfPTH NyQuWP7vBa1iJvVPJPjA6WxLub0p/Ljmes9BMmU5cyiGgNRYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyIjWu9al5mhTqcprCQwx8XZbEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNGI4ZjgwZjktNjNjNy0z YmZlLTk5OTEtNTY0MzNhNzk4ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbpuOHQBV6GUnWtnJIsUqfkDOG9q00WRvJGQ/XltaTaJk08at0PpAkf 42tN87oiUODU/RbWDMXHPpdm5ku0er5Ek9AwE0WBS6RQRl7ZLBPasSGXcNOjY2iV o0NGGBFfmd/LXmTe0XlI2IqbFHloK5ZdzG9ML+iP1KVEwaFQ0OCpbM+opMRo5RX2 UnYZ7FqGqk0VKqwlx61X54qgnjItISTDCYX8htjn/L1dChyGwIbl2VFoy2me/qqu bufuZaoOFzKTRpzwNsnRsZzXeFsQqKbpDyFxvYVgWPWIF0JbAc0wKLV2yNsqf1I6 07s48LS10nL/oaVQEKxBdZdDX8rO/Sg= -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:09 2026 by rpki-client