$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa File: 21a0c58a-4800-3577-9931-045250e849eb.roa (raw, json) Hash identifier: vMGPijJR5R/VZ2F0RuRjtFUrwVtztFPbi1LKV36sp0I= Subject key identifier: 28:C7:0A:62:9F:C4:56:36:EB:BD:93:66:DD:42:CD:D8:4C:C0:4A:70 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584EA792612B8796373A75EED480 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40805 IP address blocks: 208.82.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:61:2b:87:96:37:3a:75:ee:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d34559dc-26fe-46fd-aa48-5815e2dae9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:07:de:6a:6a:85:6e:a9:25:4e:13:8c:88: 28:ec:89:87:11:b5:04:03:8e:ef:06:13:d1:b5:f5: 0f:4f:05:ca:35:a9:2c:e2:46:17:2e:6c:55:17:44: 91:87:25:16:06:7f:52:4c:4e:0c:9e:19:01:fc:fc: 88:46:41:cd:11:7d:33:74:33:04:b3:05:82:34:b0: 65:44:be:c6:76:22:0b:5b:29:df:74:92:b1:b2:6a: 65:60:6b:9f:2e:61:64:a7:8b:6c:47:bd:ee:c0:12: 6b:09:81:84:09:96:99:41:7f:d8:9c:a4:3d:87:66: e0:b1:bc:eb:39:b4:83:6c:54:00:72:89:72:95:7d: 37:86:68:22:ca:db:1f:4e:41:c1:30:13:5d:f2:24: f6:24:28:7a:ea:70:05:f0:80:34:e8:68:e7:df:94: e1:6a:9a:b1:d2:37:98:ba:42:f0:72:3a:62:07:0b: bf:97:41:69:ae:ac:b7:f4:ad:1e:cf:14:76:34:e4: 4a:c8:d4:1a:50:28:f8:de:fa:82:69:2c:61:83:89: 61:92:8a:a2:b9:ac:cd:8c:35:ef:50:27:59:97:9b: c2:0f:4b:a6:50:9a:db:29:0a:52:cb:e0:bb:94:21: 9b:0a:13:b9:c1:89:30:ec:b7:1b:ea:7c:bb:10:90: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C7:0A:62:9F:C4:56:36:EB:BD:93:66:DD:42:CD:D8:4C:C0:4A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/21a0c58a-4800-3577-9931-045250e849eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.82.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2b:8b:09:c3:71:1d:b6:e1:b7:af:23:a0:68:7c:c1:fd:ec: 8f:a4:91:a9:2e:ca:0d:67:b0:d5:9b:b8:91:15:8a:d4:c6:59: 00:3d:8f:10:b5:0c:93:22:03:a6:3a:de:5e:19:f6:eb:bd:b8: e3:1f:ac:10:8f:05:b9:5f:fc:fb:e4:02:a3:f3:cc:72:98:dc: 8b:84:b4:72:30:fb:9d:ee:83:7e:b6:bb:6d:f1:35:fb:a6:7c: ff:27:76:05:ee:4a:10:6a:0b:0c:a2:d9:0b:51:74:66:86:9f: fe:42:fa:52:8c:36:5b:c7:fd:40:e2:f4:62:29:8a:2f:12:d7: cb:d9:e6:e4:f2:56:87:25:61:bc:df:7c:32:7f:e8:fe:75:47: a4:ce:d7:12:e7:5a:c9:25:ce:66:4a:0f:08:5b:f3:0d:55:8d: 9d:bf:cc:96:a1:7b:f9:5e:c4:42:04:88:e4:a7:47:8f:bf:b0: 39:72:58:2d:cc:96:60:ef:fe:45:b9:ab:57:43:af:e2:3d:25: ce:26:eb:b5:6a:00:cc:be:41:4d:f1:8e:8b:95:38:17:1d:fd: af:9e:d2:64:aa:76:b9:8e:09:e8:d2:62:d1:ef:b5:04:ab:66: af:09:bf:25:48:39:43:5e:6b:41:5e:2a:3e:03:88:11:bd:85: 5f:d4:9a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkmErh5Y3OnXu1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDM0NTU5ZGMtMjZmZS00NmZkLWFhNDgtNTgxNWUyZGFlOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P0H3mpqhW6pJU4TjIgo7ImHEbUEA47vBhPR tfUPTwXKNaks4kYXLmxVF0SRhyUWBn9STE4MnhkB/PyIRkHNEX0zdDMEswWCNLBl RL7GdiILWynfdJKxsmplYGufLmFkp4tsR73uwBJrCYGECZaZQX/YnKQ9h2bgsbzr ObSDbFQAcolylX03hmgiytsfTkHBMBNd8iT2JCh66nAF8IA06Gjn35Thapqx0jeY ukLwcjpiBwu/l0Fprqy39K0ezxR2NORKyNQaUCj43vqCaSxhg4lhkoqiuazNjDXv UCdZl5vCD0umUJrbKQpSy+C7lCGbChO5wYkw7Lcb6ny7EJAU2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjHCmKfxFY2672TZt1CzdhMwEpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMjFhMGM1OGEtNDgwMC0z NTc3LTk5MzEtMDQ1MjUwZTg0OWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAriwnDcR224bevI6BofMH97I+kkakuyg1nsNWbuJEVitTGWQA9jxC1 DJMiA6Y63l4Z9uu9uOMfrBCPBblf/PvkAqPzzHKY3IuEtHIw+53ug362u23xNfum fP8ndgXuShBqCwyi2QtRdGaGn/5C+lKMNlvH/UDi9GIpii8S18vZ5uTyVoclYbzf fDJ/6P51R6TO1xLnWsklzmZKDwhb8w1VjZ2/zJahe/lexEIEiOSnR4+/sDlyWC3M lmDv/kW5q1dDr+I9Jc4m67VqAMy+QU3xjouVOBcd/a+e0mSqdrmOCejSYtHvtQSr Zq8JvyVIOUNea0FeKj4DiBG9hV/UmhQ= -----END CERTIFICATE-----Generated at Wed Jul 29 09:29:49 2026 by rpki-client