$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa File: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (raw, json) Hash identifier: zc8PH4BZ9IlSEz5Nowiy/A8FNyN/u7myQajIIp82D4Y= Subject key identifier: 49:4C:99:E1:5A:FC:70:35:14:B5:70:F2:72:06:04:C5:C0:7F:73:46 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584EA79C6E12AA5D71672A991900 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 204.152.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:6e:12:aa:5d:71:67:2a:99:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c5a6e183-0979-4299-aca5-ace232264e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a3:ac:87:7e:5b:fa:9c:e4:9e:20:7a:6c:a5: 73:c0:e7:70:aa:e5:26:0c:ad:f1:da:70:b3:19:97: 72:1c:7c:d5:df:1b:74:a1:97:71:2e:68:4e:b7:4c: 56:09:b4:5a:6a:36:07:20:bb:21:40:49:29:4a:7c: d5:93:11:5f:fb:1c:3f:8a:11:95:99:f5:88:77:24: 29:17:39:80:8b:d2:31:7b:50:5e:c8:7f:e5:34:e2: e8:d4:eb:f5:c1:42:66:5e:95:34:d7:fc:b8:a9:d8: 19:92:74:1b:fe:d1:85:a5:fe:fb:7f:60:cf:65:97: dd:03:e3:33:8a:c4:f5:e9:79:05:86:8e:6a:f4:cc: d1:42:31:9a:3c:dd:37:7f:ef:e9:d1:91:d5:e2:3b: 00:fa:77:60:ec:2c:75:74:7c:d2:f4:b8:b8:02:3d: cc:96:4c:bf:75:04:e1:b3:69:1d:66:1a:df:cd:9a: 54:03:ed:08:c4:5b:f8:7c:07:84:4c:6f:09:71:e0: 45:0e:d0:2e:3d:56:10:81:b2:cd:3e:d3:53:67:71: 16:21:a7:e3:ee:76:06:12:11:00:19:66:36:1f:ef: ea:c8:3a:9b:b3:05:5e:dc:3f:e0:cb:2a:e8:9f:24: ac:4d:a4:73:5a:da:2f:04:52:98:4a:8d:4f:64:c8: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4C:99:E1:5A:FC:70:35:14:B5:70:F2:72:06:04:C5:C0:7F:73:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: 204.152.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:93:34:bf:df:0d:08:69:22:13:99:d9:b9:ca:d0:fd:7d:a4: fd:f0:f8:2e:cb:55:1a:75:94:29:97:a4:82:5a:bc:15:d8:20: 34:a2:15:be:1b:e0:81:73:cf:3c:1f:14:44:6a:50:64:0a:42: 1b:c3:57:16:25:7c:12:27:04:4f:3f:46:e6:26:35:13:9f:25: 6f:e3:e8:d0:1f:54:2e:16:b3:b0:a8:fe:31:ac:8e:f9:e3:87: ae:67:5a:b9:bc:0f:88:b1:74:c6:18:ce:f8:ca:11:44:12:9a: b9:38:a5:49:3c:b7:ff:c6:22:a4:c7:ba:28:e2:fe:0f:8a:d4: 88:a6:ca:45:b6:bd:77:d4:d3:0d:9a:8e:4e:75:09:72:39:c0: 7f:00:ef:3e:e2:61:a9:23:cf:c7:2e:15:73:bc:39:33:81:63: 44:8e:5e:62:1a:21:6a:de:07:06:e7:44:bb:3b:6d:fc:69:34: a4:ab:55:1d:6c:74:25:b3:53:73:79:d4:92:af:6b:8f:15:1b: 86:2e:e1:a9:d3:ba:fd:2e:1c:ef:bf:d8:2a:b7:b0:c5:23:f3: d3:61:f0:9a:66:ce:ab:ef:6f:f3:af:7a:05:6d:da:82:c1:23: 56:9f:4c:c5:8b:87:47:9c:31:72:67:5c:18:9d:82:75:f4:f8: d7:5c:69:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnG4Sql1xZyqZGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzVhNmUxODMtMDk3OS00Mjk5LWFjYTUtYWNlMjMyMjY0ZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Osh35b+pzkniB6bKVzwOdwquUmDK3x2nCz GZdyHHzV3xt0oZdxLmhOt0xWCbRaajYHILshQEkpSnzVkxFf+xw/ihGVmfWIdyQp FzmAi9Ixe1BeyH/lNOLo1Ov1wUJmXpU01/y4qdgZknQb/tGFpf77f2DPZZfdA+Mz isT16XkFho5q9MzRQjGaPN03f+/p0ZHV4jsA+ndg7Cx1dHzS9Li4Aj3Mlky/dQTh s2kdZhrfzZpUA+0IxFv4fAeETG8JceBFDtAuPVYQgbLNPtNTZ3EWIafj7nYGEhEA GWY2H+/qyDqbswVe3D/gyyronySsTaRzWtovBFKYSo1PZMg3YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElMmeFa/HA1FLVw8nIGBMXAf3NGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvYTE4YmM4ZTUtMzAzMS0z MzM0LWI3NjUtMzM5MmY1ZDRmZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWTNL/fDQhpIhOZ2bnK0P19pP3w+C7LVRp1lCmXpIJavBXYIDSiFb4b 4IFzzzwfFERqUGQKQhvDVxYlfBInBE8/RuYmNROfJW/j6NAfVC4Ws7Co/jGsjvnj h65nWrm8D4ixdMYYzvjKEUQSmrk4pUk8t//GIqTHuiji/g+K1IimykW2vXfU0w2a jk51CXI5wH8A7z7iYakjz8cuFXO8OTOBY0SOXmIaIWreBwbnRLs7bfxpNKSrVR1s dCWzU3N51JKva48VG4Yu4anTuv0uHO+/2Cq3sMUj89Nh8Jpmzqvvb/OvegVt2oLB I1afTMWLh0ecMXJnXBidgnX0+NdcaVY= -----END CERTIFICATE-----Generated at Wed Jul 29 05:54:06 2026 by rpki-client