$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json) Hash identifier: hysmpZagI7QdZ5vYSjZ8oreGLCwHgJ9ElX3dnYi3WVk= Subject key identifier: 73:0E:2F:51:FA:4E:F5:10:E7:FF:2E:E2:3A:32:99:55:26:9B:B1:6A Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584EA79416D2D6B7561BD5AAD600 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399635 IP address blocks: 209.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:16:d2:d6:b7:56:1b:d5:aa:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f719b3eb-860d-496e-9278-9b2b41df6de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:d2:b9:91:13:e0:2e:a3:f7:13:66:b7:34: 68:1c:ae:e5:d0:ae:3b:9f:d8:22:9e:4a:66:89:7d: d5:c0:33:b0:1d:95:1e:b3:b9:1c:19:34:f5:dc:d4: a7:3f:a8:3e:b2:48:b1:4d:c8:5c:3c:02:24:f1:85: 5a:7d:a5:70:ba:55:20:4f:66:44:e5:ce:f7:b0:3c: b9:4c:4d:dc:51:f4:db:15:6e:1f:a7:a2:3b:fe:e2: bb:68:b7:8e:8a:25:b5:83:b1:49:79:66:97:9b:2b: b0:28:0b:fe:41:a2:13:87:6d:02:7f:3c:80:65:9f: ac:f3:5c:30:ca:24:10:cc:d4:02:97:92:f4:8e:b6: 64:f0:bd:44:78:7b:06:ad:34:5c:06:27:aa:d5:c7: 43:97:b8:dd:bf:07:6d:20:4a:a4:c6:5d:e1:14:51: 34:49:f6:cf:7c:f8:31:f7:62:7d:ff:b7:c7:df:3b: 26:b8:5a:16:9d:c4:34:0a:58:aa:cf:98:82:e7:df: 3d:a5:2c:e6:79:ec:e3:29:97:26:e1:91:58:02:b4: 5b:59:b5:aa:59:bb:62:df:53:2d:57:ff:f0:93:d0: 3a:19:eb:7d:85:10:e9:45:34:51:75:6b:83:44:55: a9:69:77:bb:03:e2:36:bf:a5:b1:fd:0b:bf:96:16: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:2F:51:FA:4E:F5:10:E7:FF:2E:E2:3A:32:99:55:26:9B:B1:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7b:bb:f5:1d:30:ac:73:d0:e7:db:c0:36:b7:6e:c7:c1:13: b5:c2:f6:93:2a:0b:38:bc:b1:34:4e:aa:f1:14:ef:e6:a0:1c: d6:06:9e:3f:3a:98:07:7d:1c:9d:0e:87:d0:8a:1f:62:e0:e6: 72:42:4b:41:4e:97:8c:02:90:05:1b:d4:da:96:ee:16:58:65: 7a:2d:18:37:8e:13:23:2e:82:4d:08:de:05:c2:c1:80:41:f7: f4:25:b7:7b:95:4a:f0:7d:fe:8c:82:bf:e4:cd:6b:27:3a:a6: 7a:bb:2e:fe:c6:eb:3e:cf:95:f2:7e:bd:4c:0e:6c:aa:f3:04: bd:90:02:67:73:25:1d:86:0f:4d:08:7b:bd:94:7f:be:85:46: f9:14:44:18:6c:57:1f:0a:53:61:67:3e:a5:b0:fa:df:07:4a: 52:b5:93:74:5f:b5:b1:1a:d7:1b:d1:09:ca:5a:dc:8d:61:5a: 17:a4:a0:45:cd:12:dc:58:ae:49:af:31:d8:b5:67:31:a8:0d: 52:dd:2d:0d:32:ef:ab:fe:01:47:f3:8e:40:b9:10:8a:0e:95: b4:21:33:55:c9:37:ef:de:6b:4e:a4:7b:28:1b:ff:f2:d4:8d: d0:69:e8:fc:2f:23:56:68:b2:a4:7c:bc:64:d1:be:dc:5b:8e: 13:18:7a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlBbS1rdWG9Wq1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjcxOWIzZWItODYwZC00OTZlLTkyNzgtOWIyYjQxZGY2ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0XSuZET4C6j9xNmtzRoHK7l0K47n9ginkpm iX3VwDOwHZUes7kcGTT13NSnP6g+skixTchcPAIk8YVafaVwulUgT2ZE5c73sDy5 TE3cUfTbFW4fp6I7/uK7aLeOiiW1g7FJeWaXmyuwKAv+QaITh20CfzyAZZ+s81ww yiQQzNQCl5L0jrZk8L1EeHsGrTRcBieq1cdDl7jdvwdtIEqkxl3hFFE0SfbPfPgx 92J9/7fH3zsmuFoWncQ0Cliqz5iC5989pSzmeezjKZcm4ZFYArRbWbWqWbti31Mt V//wk9A6Get9hRDpRTRRdWuDRFWpaXe7A+I2v6Wx/Qu/lhaMCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMOL1H6TvUQ5/8u4joymVUmm7FqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZjk2MDAzYTQtNWU2YS0z NDA4LWFkODQtMDM1YWRhMjlmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp7u/UdMKxz0OfbwDa3bsfBE7XC9pMqCzi8sTROqvEU7+agHNYGnj86 mAd9HJ0Oh9CKH2Lg5nJCS0FOl4wCkAUb1NqW7hZYZXotGDeOEyMugk0I3gXCwYBB 9/Qlt3uVSvB9/oyCv+TNayc6pnq7Lv7G6z7PlfJ+vUwObKrzBL2QAmdzJR2GD00I e72Uf76FRvkURBhsVx8KU2FnPqWw+t8HSlK1k3RftbEa1xvRCcpa3I1hWhekoEXN EtxYrkmvMdi1ZzGoDVLdLQ0y76v+AUfzjkC5EIoOlbQhM1XJN+/ea06keygb//LU jdBp6PwvI1ZosqR8vGTRvtxbjhMYehk= -----END CERTIFICATE-----Generated at Wed Jul 29 11:47:12 2026 by rpki-client