$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa File: aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa (raw, json) Hash identifier: BhQSRHxhVtxRo+2FDL4RTB/s7zCNsKfBM1ODCAt8SQ4= Subject key identifier: 9A:4A:87:AA:5A:A5:65:DC:3C:CE:C4:9E:26:85:A2:98:A4:2B:68:61 Certificate issuer: /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb Certificate serial: 010D0C9F4328584EC3041DDE09C8E2535AC09D80 Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa Signing time: Fri 07 Aug 2026 21:19:26 +0000 ROA not before: Fri 07 Aug 2026 21:19:26 +0000 ROA not after: Thu 05 Nov 2026 22:19:26 +0000 asID: 198949 IP address blocks: 209.237.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:04:1d:de:09:c8:e2:53:5a:c0:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb Validity Not Before: Aug 7 21:19:26 2026 GMT Not After : Nov 5 22:19:26 2026 GMT Subject: CN=1ddfffd9-6ab8-473f-b020-8808017b963b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:5a:9a:91:49:6f:13:35:f6:e2:0a:b5:3b: 80:79:1c:d9:33:00:03:5e:5b:63:05:51:d3:a5:a3: 44:cb:2c:25:ff:bf:e0:31:81:07:36:f5:d3:b1:64: 5d:55:78:c5:d6:c5:e6:d6:c8:bc:29:7d:50:62:6a: f6:a3:4d:46:d0:5d:32:f5:58:8f:9a:34:4d:69:52: 7c:b5:aa:42:3b:93:b8:73:bf:8a:54:02:94:1b:73: 9f:cd:d8:61:0c:61:90:9d:eb:df:d5:59:9e:e3:d4: 4b:3e:92:69:a4:cd:c1:45:26:b2:51:0a:2b:cb:67: 8f:3c:9c:81:e7:83:95:02:af:1c:35:43:5f:ca:7a: a6:03:22:e0:6d:bd:98:a8:f3:d4:6c:45:61:02:65: 50:ae:20:9e:2e:16:ba:d5:76:e3:34:86:2b:f7:9d: 75:91:63:f6:1f:5d:db:9b:75:98:7f:b5:79:12:64: ae:e5:7b:d1:d3:a1:f3:fc:77:ef:c5:b6:e5:d1:bc: ff:20:92:ef:c2:a1:7b:4a:29:de:b0:6e:97:d0:e0: 5f:0e:d2:00:d7:df:51:f9:ab:df:bc:9e:0d:66:b6: 50:ea:bd:10:e6:55:1f:8c:c8:ab:d2:30:d5:d9:06: bc:83:05:1f:d2:9e:6a:82:77:c2:ae:3b:d9:b1:6a: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4A:87:AA:5A:A5:65:DC:3C:CE:C4:9E:26:85:A2:98:A4:2B:68:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl X509v3 Authority Key Identifier: keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer sbgp-ipAddrBlock: critical IPv4: 209.237.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6f:00:eb:cb:dc:c1:8b:e9:d1:37:e7:05:02:d4:53:0a:da: 72:a7:ba:d7:a2:20:e5:18:f9:50:0a:f2:95:fa:f1:87:06:c0: 59:1b:80:66:19:8b:0d:7b:2e:2c:41:8b:e5:c7:30:c7:cc:b3: 5a:26:fa:2e:1f:41:74:b1:af:6c:44:ce:dc:06:2e:55:51:74: 48:fd:9c:7b:d6:01:8d:5c:ee:22:96:99:30:be:25:d0:5d:d5: 91:1e:55:53:fa:23:b8:ad:34:4a:e9:6d:ea:13:c7:e4:f2:5c: c1:cb:32:f2:d1:72:8b:93:b2:c4:bd:a8:74:32:5a:d4:37:04: 1b:4c:5c:f8:b7:70:4b:98:f1:04:95:cd:07:f3:d2:67:80:96: e6:d2:4b:53:b0:7f:fd:11:6f:c4:84:05:cf:5d:2b:76:e2:74: 7c:f4:84:a3:19:6c:8b:f1:9b:1b:4d:9d:1b:66:8d:77:b7:a4: 72:65:eb:76:de:d0:6f:20:c7:57:35:67:3f:5a:20:f7:8b:2d: fa:38:35:e1:95:be:3f:c7:82:c2:67:ec:5a:d1:ba:35:07:3e: d8:3b:1e:d1:9a:2e:3f:5a:ec:bf:7c:c7:1c:88:f6:ef:79:b3: 7a:53:3a:48:32:28:f4:6b:4e:2f:8a:cc:a2:c3:8d:d8:37:8e: 8c:ef:b1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DBB3eCcjiU1rAnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzMyZDRjMWMtNjhmZC00NmJhLTk0NTAtODQ2OTdmYmU0 YmNiMB4XDTI2MDgwNzIxMTkyNloXDTI2MTEwNTIyMTkyNlowLzEtMCsGA1UEAxMk MWRkZmZmZDktNmFiOC00NzNmLWIwMjAtODgwODAxN2I5NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKJampFJbxM19uIKtTuAeRzZMwADXltjBVHT paNEyywl/7/gMYEHNvXTsWRdVXjF1sXm1si8KX1QYmr2o01G0F0y9ViPmjRNaVJ8 tapCO5O4c7+KVAKUG3OfzdhhDGGQnevf1Vme49RLPpJppM3BRSayUQory2ePPJyB 54OVAq8cNUNfynqmAyLgbb2YqPPUbEVhAmVQriCeLha61XbjNIYr9511kWP2H13b m3WYf7V5EmSu5XvR06Hz/Hfvxbbl0bz/IJLvwqF7SinesG6X0OBfDtIA199R+avf vJ4NZrZQ6r0Q5lUfjMir0jDV2Qa8gwUf0p5qgnfCrjvZsWoN7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpKh6papWXcPM7EniaFopikK2hhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJk NGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2ZiZTRiY2IvYWE4ZjNiYjgtMDExYi0z YmNkLWI4NzQtMjAyYzhmOTM1YzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzMyZDRjMWMtNjhmZC00NmJhLTk0 NTAtODQ2OTdmYmU0YmNiLzMzMmQ0YzFjLTY4ZmQtNDZiYS05NDUwLTg0Njk3ZmJl NGJjYi5jcmwwHwYDVR0jBBgwFoAUBNJQfOBV9FoaAnDShIJDzDB5ccYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5 N2ZiZTRiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0e2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJvAOvL3MGL6dE35wUC1FMK2nKnuteiIOUY+VAK8pX68YcGwFkbgGYZ iw17LixBi+XHMMfMs1om+i4fQXSxr2xEztwGLlVRdEj9nHvWAY1c7iKWmTC+JdBd 1ZEeVVP6I7itNErpbeoTx+TyXMHLMvLRcouTssS9qHQyWtQ3BBtMXPi3cEuY8QSV zQfz0meAlubSS1Owf/0Rb8SEBc9dK3bidHz0hKMZbIvxmxtNnRtmjXe3pHJl63be 0G8gx1c1Zz9aIPeLLfo4NeGVvj/HgsJn7FrRujUHPtg7HtGaLj9a7L98xxyI9u95 s3pTOkgyKPRrTi+KzKLDjdg3jozvsfs= -----END CERTIFICATE-----Generated at Fri Sep 4 21:03:34 2026 by rpki-client