$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa File: be603bce-d702-3a38-a547-dae20b5de158.roa (raw, json) Hash identifier: cO3/ty0gcwaLagDBzxZAjxWeU/5g59Bmt4+YJ9Ltrps= Subject key identifier: 18:40:D9:61:2C:5C:99:4B:A8:44:61:46:A7:2D:75:04:7E:E9:0A:6D Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584EA79416C7F61593D14BB41F20 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31813 IP address blocks: 209.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:16:c7:f6:15:93:d1:4b:b4:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=766a5ba5-2d76-450c-9b03-3a9fde8fdfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:e5:72:b9:a0:74:dd:97:13:f0:0b:88:1d: 29:3f:89:a5:ea:61:35:3d:c2:37:8b:ba:fa:b8:cc: a1:0c:68:ed:ea:42:7a:9d:25:bc:c3:30:43:fe:42: df:ac:bd:13:72:b7:60:9b:6a:fa:d1:b7:61:83:5a: 28:e9:46:6d:ea:9b:f7:cd:95:a3:41:e4:62:10:99: 0e:b2:63:fe:d9:74:c5:c9:dd:5d:b1:80:23:a0:ee: cf:ee:57:75:5d:14:3f:ce:49:c6:0c:c6:82:7a:4d: 21:09:90:ad:e3:ea:0a:4b:e7:b6:e4:cd:9a:61:6a: 4a:94:d9:61:b0:9d:66:d1:7f:4c:4b:2d:94:77:e2: 12:e9:e7:76:07:8a:bd:5e:09:09:92:ce:24:26:65: ab:e3:85:f6:8d:85:ce:29:ea:a3:94:6f:fb:b8:e9: 29:a5:9b:a1:22:1c:9e:5c:f2:2c:45:e7:95:f6:b6: 1e:71:18:45:3a:24:07:6b:5d:fc:4a:ae:f7:e7:f4: 70:98:1d:58:41:54:37:25:24:c9:06:4a:82:f6:44: a6:f8:5b:0a:af:b2:80:1d:56:4d:17:01:6c:ce:b6: a5:44:4a:0e:81:92:ee:a2:a3:52:c1:f5:ff:d8:6f: dd:b3:17:f9:5b:03:4b:84:cc:0b:43:1b:c9:d0:72: 81:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:40:D9:61:2C:5C:99:4B:A8:44:61:46:A7:2D:75:04:7E:E9:0A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:51:48:e0:05:c4:77:9d:5d:2b:7d:2b:4d:54:14:71:c9:40: f0:72:48:7d:cd:14:96:e9:1a:45:03:e7:fb:87:95:db:be:21: 2e:f8:10:56:6d:8b:64:2a:82:5a:05:b0:39:83:be:16:91:7b: a9:33:40:4a:6b:74:d2:99:da:69:51:8d:68:60:48:7c:8b:57: 8d:29:c8:9e:78:5d:71:80:74:6c:eb:d0:db:60:06:12:40:53: c2:95:11:af:f6:8f:ef:d0:da:4c:9a:bd:95:ad:36:17:a1:37: 34:e7:0b:33:d9:24:57:8b:0f:f8:bb:18:4d:ab:bf:c3:87:83: 22:01:83:c3:17:f6:7b:c3:65:ec:1a:5d:d1:c2:a7:ba:5c:8b: af:5f:5b:d0:03:a9:52:de:70:ee:a8:86:81:eb:1c:ad:91:b1: 39:24:48:d6:98:12:9c:8f:3f:3e:3b:c5:bf:5e:e1:ab:8d:ac: fb:fe:0a:40:9d:9c:fe:b0:ea:63:db:99:c5:3e:e2:c6:37:25: 02:f4:db:76:94:a9:cf:c2:93:5c:7e:33:dd:ca:f6:2d:15:a8: 15:84:73:3f:f6:b4:cd:3d:a4:df:30:ff:10:fb:4a:72:c1:1c: e2:7e:c7:c1:cb:57:bd:15:75:15:b6:d6:d8:17:86:57:9e:90: a7:73:e5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlBbH9hWT0Uu0HyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzY2YTViYTUtMmQ3Ni00NTBjLTliMDMtM2E5ZmRlOGZkZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycflcrmgdN2XE/ALiB0pP4ml6mE1PcI3i7r6 uMyhDGjt6kJ6nSW8wzBD/kLfrL0Tcrdgm2r60bdhg1oo6UZt6pv3zZWjQeRiEJkO smP+2XTFyd1dsYAjoO7P7ld1XRQ/zknGDMaCek0hCZCt4+oKS+e25M2aYWpKlNlh sJ1m0X9MSy2Ud+IS6ed2B4q9XgkJks4kJmWr44X2jYXOKeqjlG/7uOkppZuhIhye XPIsReeV9rYecRhFOiQHa138Sq735/RwmB1YQVQ3JSTJBkqC9kSm+FsKr7KAHVZN FwFszralREoOgZLuoqNSwfX/2G/dsxf5WwNLhMwLQxvJ0HKBLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhA2WEsXJlLqERhRqctdQR+6QptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYmU2MDNiY2UtZDcwMi0z YTM4LWE1NDctZGFlMjBiNWRlMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVRSOAFxHedXSt9K01UFHHJQPBySH3NFJbpGkUD5/uHldu+IS74EFZt i2QqgloFsDmDvhaRe6kzQEprdNKZ2mlRjWhgSHyLV40pyJ54XXGAdGzr0NtgBhJA U8KVEa/2j+/Q2kyavZWtNhehNzTnCzPZJFeLD/i7GE2rv8OHgyIBg8MX9nvDZewa XdHCp7pci69fW9ADqVLecO6ohoHrHK2RsTkkSNaYEpyPPz47xb9e4auNrPv+CkCd nP6w6mPbmcU+4sY3JQL023aUqc/Ck1x+M93K9i0VqBWEcz/2tM09pN8w/xD7SnLB HOJ+x8HLV70VdRW21tgXhleekKdz5YE= -----END CERTIFICATE-----Generated at Wed Jul 29 14:00:41 2026 by rpki-client