$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/402ab080-ccaf-3fb2-9884-c0720b7912b3.roa File: 402ab080-ccaf-3fb2-9884-c0720b7912b3.roa (raw, json) Hash identifier: yTlTRP28bN9QL1KlYG6vUvac0etN9HFyxsWZCpLy76Y= Subject key identifier: BC:C7:FD:64:FC:47:17:01:6D:F6:6D:C9:81:B1:D2:C3:62:89:B6:FD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E9EB01873734ACC0F4A66D400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/402ab080-ccaf-3fb2-9884-c0720b7912b3.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 0 IP address blocks: 208.31.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:18:73:73:4a:cc:0f:4a:66:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=7b1df493-60c4-4f25-8bbf-1d384bafcfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1b:ac:37:26:c4:ec:fa:7d:dd:ef:0a:56:33: 35:f5:8e:df:fb:11:aa:ee:24:c3:4f:e0:05:09:f7: 72:2e:22:59:a7:a9:cf:4c:af:3b:ec:39:73:de:09: 91:b9:f1:28:a5:ed:f7:72:4c:09:c0:8b:be:19:11: 18:94:82:33:f7:78:55:1f:50:cc:99:fe:9a:9e:76: e2:dd:44:fc:74:65:25:12:c7:ab:41:d0:28:01:ae: c7:c3:f3:13:40:cd:fe:11:bb:93:03:f1:3f:e2:73: 41:ef:88:38:af:6f:b2:3d:38:da:0b:80:89:f5:94: 09:9a:cf:62:d4:f1:64:1f:3e:df:2b:c9:83:4e:9e: 03:12:eb:24:8f:0e:5e:ca:1f:4b:90:bb:0e:d2:a9: a2:4e:93:08:06:96:00:2b:b8:24:45:48:13:08:fb: d0:e1:90:2e:10:88:f6:b6:48:a3:99:f2:50:5d:99: 63:58:35:02:21:cd:16:d9:03:f1:af:90:c4:2a:4d: 72:27:32:73:d2:13:3a:6a:c7:91:eb:99:13:c9:e6: 8f:4f:25:61:33:38:03:16:7d:6d:78:d0:bc:7c:79: 7c:77:35:4e:9a:72:50:7a:e4:6e:22:59:26:c3:64: 1c:6b:de:97:f6:a2:8c:c5:9c:a8:a5:d6:b7:67:aa: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C7:FD:64:FC:47:17:01:6D:F6:6D:C9:81:B1:D2:C3:62:89:B6:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/402ab080-ccaf-3fb2-9884-c0720b7912b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 208.31.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7e:77:8d:7f:35:07:37:04:44:f5:73:59:98:3c:e5:18:b1: 11:06:f6:33:fa:e2:b4:1b:ee:ff:e0:c0:27:bd:ec:68:b7:05: 2a:fe:cb:1f:d3:e4:37:0d:b2:1a:30:d2:1e:6f:4d:94:92:9a: b8:85:af:51:6a:ec:df:36:e7:71:6b:f6:a7:98:36:b5:e7:67: 18:75:68:c2:fc:88:bc:d2:c7:60:68:69:a4:b3:4c:89:e5:43: 23:11:3d:33:3a:f0:6c:3e:df:b9:95:06:0b:2e:2e:b6:79:35: 0a:bb:bf:cd:41:d7:38:14:ff:f9:a8:60:c9:09:dd:a7:2a:a8: ae:69:3e:7b:a7:28:20:75:1a:7a:0b:04:86:05:0d:52:07:85: 38:ca:7a:16:28:44:f0:11:fe:55:74:e0:5e:a7:4f:cd:8d:f0: e9:1d:ec:52:78:e7:6b:fd:3d:ed:51:0b:ac:9e:77:6b:8c:cc: 33:cc:82:33:d9:52:98:da:a3:bd:67:f4:d5:a4:da:79:bf:34: b6:58:f8:7f:21:ab:f7:95:aa:13:ca:9d:16:82:95:8d:d1:ca: 70:e8:25:55:46:ba:cb:46:98:47:cb:f0:36:11:f1:f0:f0:4e: 90:58:c3:ae:4d:5b:f6:da:69:f2:01:d4:13:21:1d:91:08:d8: cb:04:74:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esBhzc0rMD0pm1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk N2IxZGY0OTMtNjBjNC00ZjI1LThiYmYtMWQzODRiYWZjZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRusNybE7Pp93e8KVjM19Y7f+xGq7iTDT+AF CfdyLiJZp6nPTK877Dlz3gmRufEope33ckwJwIu+GREYlIIz93hVH1DMmf6annbi 3UT8dGUlEserQdAoAa7Hw/MTQM3+EbuTA/E/4nNB74g4r2+yPTjaC4CJ9ZQJms9i 1PFkHz7fK8mDTp4DEuskjw5eyh9LkLsO0qmiTpMIBpYAK7gkRUgTCPvQ4ZAuEIj2 tkijmfJQXZljWDUCIc0W2QPxr5DEKk1yJzJz0hM6aseR65kTyeaPTyVhMzgDFn1t eNC8fHl8dzVOmnJQeuRuIlkmw2Qca96X9qKMxZyopda3Z6r+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzH/WT8RxcBbfZtyYGx0sNiibb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDAyYWIwODAtY2NhZi0z ZmIyLTk4ODQtYzA3MjBiNzkxMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0B8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1+d41/NQc3BET1c1mYPOUYsREG9jP64rQb7v/gwCe97Gi3BSr+yx/T 5DcNshow0h5vTZSSmriFr1Fq7N8253Fr9qeYNrXnZxh1aML8iLzSx2BoaaSzTInl QyMRPTM68Gw+37mVBgsuLrZ5NQq7v81B1zgU//moYMkJ3acqqK5pPnunKCB1GnoL BIYFDVIHhTjKehYoRPAR/lV04F6nT82N8Okd7FJ452v9Pe1RC6yed2uMzDPMgjPZ Upjao71n9NWk2nm/NLZY+H8hq/eVqhPKnRaClY3RynDoJVVGustGmEfL8DYR8fDw TpBYw65NW/baafIB1BMhHZEI2MsEdEc= -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:47 2026 by rpki-client