$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa File: 40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json) Hash identifier: shwkimYreCuBYgIhFrWSF6hW7EbkbtEXd0nfinfbEic= Subject key identifier: 79:D0:7D:C0:EC:43:E9:2E:E6:EC:7C:71:D6:D6:02:9B:6D:7F:94:EE Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584EA7940AF5F31B4B1366E64590 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30610 IP address blocks: 209.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:0a:f5:f3:1b:4b:13:66:e6:45:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ec1a97da-1bfe-44a4-b14a-8a114fb326a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:9d:99:d1:b5:5b:52:89:7b:79:79:40:2e: eb:a4:bd:15:11:68:f8:43:c3:43:12:00:63:7a:33: de:36:db:2f:a8:8d:05:69:71:ac:72:89:41:b8:80: 54:91:4d:ef:ed:af:b9:d0:e5:c9:9c:8a:b2:b1:1a: ee:b9:88:75:ef:a4:4b:3d:c3:8b:c0:c6:64:c1:ed: 90:bc:70:f2:fe:e3:8a:76:90:66:95:4a:eb:40:d8: cd:41:27:f3:ae:20:15:72:ce:dc:06:2d:c4:c2:ba: c4:f3:1a:2e:97:bc:40:0f:60:b4:a4:f1:b0:2c:02: d7:0f:17:8a:a1:55:2f:55:ca:90:d2:83:5c:34:ab: 08:13:2d:a5:36:42:89:5f:24:cf:2f:45:a7:70:bf: 69:56:7d:a4:37:58:08:3b:a6:f2:82:2c:09:ea:d5: 64:09:bb:cf:10:92:1a:a6:77:cb:ea:02:94:6c:10: 45:a2:77:2d:85:84:cd:16:e6:26:0d:72:9a:48:9b: b3:6d:70:17:e6:5c:e8:97:48:d4:12:b9:c3:24:c0: 8c:96:28:c3:a3:f3:af:4d:1c:d7:d2:9c:f2:85:11: 14:8a:10:ff:31:ad:6a:b2:f6:98:81:55:a5:4f:fd: 8a:a7:2d:07:16:0f:4e:24:6c:9e:d1:3c:e4:15:7d: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D0:7D:C0:EC:43:E9:2E:E6:EC:7C:71:D6:D6:02:9B:6D:7F:94:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2f:e0:ad:a8:de:d2:ca:b4:7c:e1:87:a7:8b:80:ee:3c:d6: 86:6c:08:2d:13:b0:09:86:4b:8b:04:89:29:31:5f:ee:6d:68: c7:c2:11:7a:ac:58:32:36:2a:ee:98:6c:38:e9:df:be:de:6f: 9f:98:f7:3e:5a:71:1a:9c:de:5f:51:08:74:04:f6:98:0a:3b: de:dd:a3:72:5e:01:b2:36:1e:0e:a2:5b:1e:9f:8d:3e:2e:50: 49:b0:cc:45:7d:53:4d:6e:6c:8f:f4:e4:42:bb:af:c1:b3:5f: 53:72:36:8c:03:1f:7f:20:6f:6f:13:5a:c8:f0:00:23:ab:c9: 06:ef:d8:d5:52:71:d7:42:41:7e:4d:64:59:6c:b3:75:c7:e9: 67:e9:a5:3a:4d:d0:3c:e7:b0:a9:20:bb:d1:8a:67:eb:4b:61: 35:7b:04:1d:e4:2b:78:50:cb:ad:00:45:22:66:86:07:4f:0b: ed:5a:01:42:4f:1e:63:25:66:6f:5d:93:69:1c:5a:19:42:54: 9e:c4:45:cc:b7:2b:2c:22:53:96:1e:89:98:df:0e:50:d6:15: 98:85:4d:35:18:93:e8:25:92:c1:4e:07:10:11:c8:a0:2c:c2: dd:71:98:87:ec:b7:2d:75:4c:d7:86:8e:99:1e:24:43:4e:36: 96:9b:fa:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlAr18xtLE2bmRZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWMxYTk3ZGEtMWJmZS00NGE0LWIxNGEtOGExMTRmYjMyNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXqdmdG1W1KJe3l5QC7rpL0VEWj4Q8NDEgBj ejPeNtsvqI0FaXGscolBuIBUkU3v7a+50OXJnIqysRruuYh176RLPcOLwMZkwe2Q vHDy/uOKdpBmlUrrQNjNQSfzriAVcs7cBi3EwrrE8xoul7xAD2C0pPGwLALXDxeK oVUvVcqQ0oNcNKsIEy2lNkKJXyTPL0WncL9pVn2kN1gIO6bygiwJ6tVkCbvPEJIa pnfL6gKUbBBFoncthYTNFuYmDXKaSJuzbXAX5lzol0jUErnDJMCMlijDo/OvTRzX 0pzyhREUihD/Ma1qsvaYgVWlT/2Kpy0HFg9OJGye0TzkFX34SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnQfcDsQ+ku5ux8cdbWApttf5TuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNDBkMzQ3OWQtYmI1Zi0z ODY5LTg0MjAtZmVlMDE5NGQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEv4K2o3tLKtHzhh6eLgO481oZsCC0TsAmGS4sEiSkxX+5taMfCEXqs WDI2Ku6YbDjp377eb5+Y9z5acRqc3l9RCHQE9pgKO97do3JeAbI2Hg6iWx6fjT4u UEmwzEV9U01ubI/05EK7r8GzX1NyNowDH38gb28TWsjwACOryQbv2NVScddCQX5N ZFlss3XH6WfppTpN0DznsKkgu9GKZ+tLYTV7BB3kK3hQy60ARSJmhgdPC+1aAUJP HmMlZm9dk2kcWhlCVJ7ERcy3KywiU5YeiZjfDlDWFZiFTTUYk+glksFOBxARyKAs wt1xmIfsty11TNeGjpkeJENONpab+n8= -----END CERTIFICATE-----Generated at Wed Jul 29 10:36:05 2026 by rpki-client