$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa File: b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa (raw, json) Hash identifier: ykDhl+UkGs3A3igNzhYqsNMeNuXd528sBRkFbSbsQw4= Subject key identifier: 26:98:BD:B5:4C:59:58:3C:10:13:39:4F:20:DC:4F:F7:5E:82:A6:E2 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584EA79475B42DC321F4F48876D8 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397090 IP address blocks: 209.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:75:b4:2d:c3:21:f4:f4:88:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0922af12-d9d9-4931-9428-28453e8e4846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:f3:82:7b:32:2c:02:a7:13:db:6f:ff:40: ea:22:61:75:f6:ea:ee:2e:7e:3a:f5:13:85:9e:2c: 25:41:a5:c5:24:6c:f7:54:c6:c9:6b:ec:48:1a:45: 71:f4:11:cb:b1:48:c8:e4:1c:fd:e4:e1:29:b5:dd: 95:f9:64:3c:39:ec:18:16:89:1f:3f:ca:f2:c3:a7: 11:fc:bf:e0:24:ce:6c:2a:91:b7:03:9d:c6:6f:7f: 67:db:0e:5d:70:f7:de:af:c9:09:d8:ab:3e:a4:40: a0:38:fc:00:ce:0d:e5:ce:82:9f:7c:d2:24:48:8b: 7a:ea:7d:7d:86:2b:ce:60:36:a5:40:c8:a2:10:bc: 6b:70:0b:f8:78:6d:2a:29:f4:d5:17:a1:d9:c9:a2: f9:95:f3:8a:6a:3c:e2:c4:0a:5f:c7:f7:cc:6b:b7: 9a:0b:b4:5c:5c:68:58:99:84:08:89:b4:9b:1a:05: fe:ce:67:61:ba:a9:22:5c:25:49:51:c5:c4:30:a2: a6:e6:2a:15:b7:6b:71:68:ba:22:4c:c9:42:a2:11: 4e:89:33:fb:83:86:aa:53:cb:04:65:24:34:b2:2c: a0:64:b5:27:1d:9d:d9:ec:c6:bf:13:1f:d2:f1:6e: 30:5a:3f:7d:f2:e1:6f:2e:36:25:2b:96:ee:20:29: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:98:BD:B5:4C:59:58:3C:10:13:39:4F:20:DC:4F:F7:5E:82:A6:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0a:55:29:bc:a9:9b:22:c0:fb:e7:af:1f:fc:55:9d:28:91: c8:cc:c4:83:f9:5c:7b:89:6d:49:ae:28:21:1c:f8:be:49:b9: ea:c8:92:3d:1c:a0:e2:e2:9a:27:82:fe:86:45:48:6f:a0:09: b1:1f:70:6e:d7:a7:c2:ea:a8:b0:da:63:dd:0d:af:8f:33:a9: 10:69:8f:84:a5:58:ef:86:fe:3b:9f:a3:10:b3:31:40:72:58: 13:7f:e2:c7:f0:b4:9f:c1:9a:c1:fd:11:30:cb:7f:74:c3:e8: 1b:65:55:82:fe:b8:25:ab:86:81:e4:1e:90:fe:9d:d1:fc:4a: 7b:47:a9:6d:23:90:37:75:b2:6a:24:28:18:82:ea:7e:b4:c4: 96:85:3a:f4:59:05:62:fc:ff:73:12:b7:4f:61:19:c6:f9:d4: 79:89:ee:87:7d:79:5c:62:98:d4:c0:ba:1a:9f:48:f7:d8:d0: 5f:f5:17:46:f6:a3:73:ba:ec:79:12:94:ef:1a:9d:c0:a8:a8: 90:a8:40:9b:72:fa:7e:0c:35:59:5a:ab:b3:80:4a:d9:d0:93: 83:cd:7a:59:c5:2b:3e:a7:4a:c3:6a:a5:eb:37:91:03:51:90: a8:4b:84:60:2b:77:62:96:8f:33:6a:48:43:f0:ae:13:30:b2: 82:e0:ad:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlHW0LcMh9PSIdtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDkyMmFmMTItZDlkOS00OTMxLTk0MjgtMjg0NTNlOGU0ODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26XzgnsyLAKnE9tv/0DqImF19uruLn469ROF niwlQaXFJGz3VMbJa+xIGkVx9BHLsUjI5Bz95OEptd2V+WQ8OewYFokfP8ryw6cR /L/gJM5sKpG3A53Gb39n2w5dcPfer8kJ2Ks+pECgOPwAzg3lzoKffNIkSIt66n19 hivOYDalQMiiELxrcAv4eG0qKfTVF6HZyaL5lfOKajzixApfx/fMa7eaC7RcXGhY mYQIibSbGgX+zmdhuqkiXCVJUcXEMKKm5ioVt2txaLoiTMlCohFOiTP7g4aqU8sE ZSQ0siygZLUnHZ3Z7Ma/Ex/S8W4wWj998uFvLjYlK5buICmMDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaYvbVMWVg8EBM5TyDcT/degqbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYjViMmQxMDItZDIzMS0z M2NmLWIyOGItMWJlZGMxY2Q2NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8KVSm8qZsiwPvnrx/8VZ0okcjMxIP5XHuJbUmuKCEc+L5JuerIkj0c oOLimieC/oZFSG+gCbEfcG7Xp8LqqLDaY90Nr48zqRBpj4SlWO+G/jufoxCzMUBy WBN/4sfwtJ/BmsH9ETDLf3TD6BtlVYL+uCWrhoHkHpD+ndH8SntHqW0jkDd1smok KBiC6n60xJaFOvRZBWL8/3MSt09hGcb51HmJ7od9eVximNTAuhqfSPfY0F/1F0b2 o3O67HkSlO8ancCoqJCoQJty+n4MNVlaq7OAStnQk4PNelnFKz6nSsNqpes3kQNR kKhLhGArd2KWjzNqSEPwrhMwsoLgreQ= -----END CERTIFICATE-----Generated at Wed Jul 29 11:45:30 2026 by rpki-client