$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa File: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (raw, json) Hash identifier: edVaiPxZNk4Ns3MKhq6szo1gXvAK/+j5AuSj+mGXG14= Subject key identifier: 8B:C4:93:B9:10:EC:81:4F:7D:D0:EF:63:16:F4:81:23:3B:B4:4E:41 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584E210EFE53C5BD086CAE7784AC Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 46687 IP address blocks: 207.68.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:fe:53:c5:bd:08:6c:ae:77:84:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=c40cb19e-0bc5-43be-a443-240a6e5efec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:05:39:cc:30:85:8d:97:2b:ba:ec:92:ce: 4d:8a:ad:1e:d4:70:8c:18:8c:65:aa:5e:0d:f6:89: 95:b0:ee:eb:c7:79:03:63:28:79:ab:63:f0:02:ce: 1d:60:a4:cb:e4:f0:c6:bb:53:7e:d3:c5:c0:fa:f8: d6:8d:96:38:57:4b:b2:75:c5:da:f6:be:0e:77:0d: 75:fa:e2:eb:af:03:d0:70:cc:79:8d:db:42:99:76: fa:25:48:30:98:1e:e4:60:cb:62:72:2c:8a:01:95: 6e:c5:e0:1e:b6:7b:f8:33:ea:20:d0:f7:90:cf:e4: 3c:10:42:de:a6:05:79:b1:b2:5f:ad:52:9b:fc:1f: 42:bb:4c:3a:a0:3d:06:c5:c0:17:01:9e:27:cd:d4: 7e:b1:b1:4f:d5:2d:a3:d2:6f:87:bc:26:5c:00:8e: 28:ca:4d:1c:27:a6:28:83:ae:41:60:c0:c0:10:30: b8:42:5f:43:e1:f2:da:19:c6:9b:c7:61:e1:b0:5d: ae:c5:14:1a:ca:68:e3:c8:f3:f0:b4:2b:99:33:15: 0d:ae:8d:56:bd:58:bc:8f:5c:6d:7f:e0:92:64:45: fc:d0:1f:ee:5e:52:36:da:6c:07:9c:5b:dd:e4:dd: d4:f3:9f:db:3e:10:01:15:60:09:50:5f:1d:c0:b7: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C4:93:B9:10:EC:81:4F:7D:D0:EF:63:16:F4:81:23:3B:B4:4E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 207.68.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:13:4f:f0:71:74:36:d2:ba:06:41:f9:61:94:e6:76:f1:b6: 7d:12:50:04:60:2e:c1:28:fd:6d:c4:77:a9:14:98:18:2f:12: 31:b9:fb:6a:61:59:2c:1e:48:d6:e8:3a:d0:1d:a8:4e:11:e4: 0f:88:77:b0:0d:81:69:4c:84:0b:9d:aa:4f:c3:95:0e:0a:ba: 76:ad:b3:6e:66:2a:2d:8b:80:c9:9f:1f:31:eb:17:b7:5f:f3: 0d:6d:f5:cf:c7:71:75:9b:90:3d:7b:82:4e:9d:a6:8b:58:0c: c1:fa:b8:5e:e5:0b:52:24:35:cb:d1:82:9a:38:90:74:53:58: 06:d7:31:46:c1:c6:bf:1e:89:b4:7a:f7:f3:af:c1:d0:ce:e3: be:84:84:b4:34:da:1f:a7:ab:4e:e5:b8:3b:70:73:eb:8b:ca: b3:2d:3e:d4:20:9a:35:8f:34:fa:a7:9b:0e:60:10:ab:1e:20: 00:90:73:b5:7c:5f:80:bb:b2:28:8c:72:4d:d5:4b:c1:85:3e: 57:6f:ef:75:69:b3:46:2e:51:d5:7b:8d:17:cd:5e:88:4a:a0: bb:2b:75:1d:78:38:5d:26:12:b0:53:c3:b3:b3:5a:ff:47:30: 31:d2:66:4a:2a:f1:8b:de:31:8f:6f:80:29:f8:3a:5f:80:a9: bb:c5:87:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDv5Txb0IbK53hKwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk YzQwY2IxOWUtMGJjNS00M2JlLWE0NDMtMjQwYTZlNWVmZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPoFOcwwhY2XK7rsks5Niq0e1HCMGIxlql4N 9omVsO7rx3kDYyh5q2PwAs4dYKTL5PDGu1N+08XA+vjWjZY4V0uydcXa9r4Odw11 +uLrrwPQcMx5jdtCmXb6JUgwmB7kYMticiyKAZVuxeAetnv4M+og0PeQz+Q8EELe pgV5sbJfrVKb/B9Cu0w6oD0GxcAXAZ4nzdR+sbFP1S2j0m+HvCZcAI4oyk0cJ6Yo g65BYMDAEDC4Ql9D4fLaGcabx2HhsF2uxRQaymjjyPPwtCuZMxUNro1WvVi8j1xt f+CSZEX80B/uXlI22mwHnFvd5N3U85/bPhABFWAJUF8dwLcDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvEk7kQ7IFPfdDvYxb0gSM7tE5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvM2I3MGVmNDktNjFlOC0z YzFkLWEzM2EtNTFkMTk0YWNmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz0TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQTT/BxdDbSugZB+WGU5nbxtn0SUARgLsEo/W3Ed6kUmBgvEjG5+2ph WSweSNboOtAdqE4R5A+Id7ANgWlMhAudqk/DlQ4Kunats25mKi2LgMmfHzHrF7df 8w1t9c/HcXWbkD17gk6dpotYDMH6uF7lC1IkNcvRgpo4kHRTWAbXMUbBxr8eibR6 9/OvwdDO476EhLQ02h+nq07luDtwc+uLyrMtPtQgmjWPNPqnmw5gEKseIACQc7V8 X4C7siiMck3VS8GFPldv73Vps0YuUdV7jRfNXohKoLsrdR14OF0mErBTw7OzWv9H MDHSZkoq8YveMY9vgCn4Ol+AqbvFhzQ= -----END CERTIFICATE-----Generated at Sat Jun 13 17:58:41 2026 by rpki-client