$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa File: 2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa (raw, json) Hash identifier: Wrwnv8MTUbq4wBsXuEuusilFLkJDJCzo+j+F+5Lvzlo= Subject key identifier: 02:79:E2:54:85:A4:B9:8E:0E:75:9B:E8:7A:D3:5B:CB:98:B4:5D:CE Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F4328584E5619EDAD8A58D5E5AD9EA740 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 400071 IP address blocks: 216.73.182.0/23 maxlen: 32 2602:fc31::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:ed:ad:8a:58:d5:e5:ad:9e:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=7179434c-3c0b-4344-9d61-623f6fc2fdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:9e:e5:f1:15:a9:73:4d:19:94:93:be:b2: a8:aa:18:28:a5:95:e5:d4:9f:8e:d0:5a:f8:12:30: 79:cc:15:1d:f3:7d:3d:f5:db:c5:6c:98:6b:98:f1: 78:18:59:d1:1a:73:0a:b5:cd:c2:c1:5c:87:cc:f8: d4:f8:0a:aa:69:c9:cc:08:96:48:12:8b:3e:9e:d3: e7:0c:9a:52:87:17:15:92:65:f6:ad:9a:28:eb:95: 1e:89:c8:16:0e:b5:c5:04:b0:8e:1b:f2:a3:8a:14: fb:43:37:c8:32:0a:42:70:06:9b:74:b0:ee:92:b7: e0:00:a9:1d:e0:b2:bf:b8:4c:27:72:9e:d6:55:dc: 9c:2f:69:38:70:9a:9a:9e:57:1e:d6:50:85:f1:22: 1b:3c:3c:68:2c:50:11:c1:5e:da:8c:d3:6b:ff:6f: ec:de:2d:2b:45:90:b0:b3:5d:7f:f1:eb:0b:8f:9c: 09:6a:71:7c:68:0c:84:f1:8e:06:aa:96:a4:2c:73: ca:57:fd:ac:01:8e:fb:57:e7:d3:b8:c4:d4:af:65: 7e:47:e8:98:ff:e0:ad:7c:c9:9d:31:0d:20:c9:df: 19:b4:bd:3c:7a:c4:0f:d3:06:1d:95:b0:48:55:41: 30:a5:26:d0:89:95:4d:ed:5c:ff:8d:06:16:71:29: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:79:E2:54:85:A4:B9:8E:0E:75:9B:E8:7A:D3:5B:CB:98:B4:5D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv4: 216.73.182.0/23 IPv6: 2602:fc31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cc:b6:64:e3:b2:8f:49:ea:d0:d5:3c:90:45:c5:33:62:f7: d6:07:e2:ef:51:e9:ec:3d:33:f9:30:d8:28:1f:50:a7:6b:d9: 06:4a:b6:d7:56:d8:6a:48:69:8d:3c:38:51:b8:d7:d9:35:73: e3:f6:f6:a1:5d:69:23:bf:44:24:07:c4:dd:b3:66:61:09:9f: 85:49:41:ff:36:f8:bd:19:2b:24:f9:70:0e:f2:60:e2:db:82: 22:60:2e:5b:9c:e7:e4:6f:23:a3:c7:02:8b:7f:aa:cb:c8:94: 79:09:d2:25:7d:f3:89:fd:2f:d2:96:a6:2f:ed:e6:19:99:8c: da:50:c2:6f:1f:f2:87:c8:41:85:88:d1:62:47:29:97:06:84: 51:18:fa:f1:63:a2:67:fb:54:4c:13:e8:c9:5e:ad:7f:d3:01: f0:fb:a1:53:08:b1:74:12:4e:79:dd:24:4b:cb:73:9d:35:53: 87:de:e2:98:49:f9:5c:c7:11:53:d6:7f:7f:71:27:83:8f:33: 66:27:73:35:d4:c8:b5:77:8d:11:a8:03:f0:29:7b:63:6b:d2: 70:99:af:93:e5:93:30:bc:92:75:39:5e:53:a1:68:e5:9a:c6: 24:ee:b9:db:af:4c:4d:5c:ed:80:1e:53:15:e0:b9:93:18:02: e7:68:32:b6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5WGe2tiljV5a2ep0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk NzE3OTQzNGMtM2MwYi00MzQ0LTlkNjEtNjIzZjZmYzJmZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Ce5fEVqXNNGZSTvrKoqhgopZXl1J+O0Fr4 EjB5zBUd83099dvFbJhrmPF4GFnRGnMKtc3CwVyHzPjU+AqqacnMCJZIEos+ntPn DJpShxcVkmX2rZoo65UeicgWDrXFBLCOG/KjihT7QzfIMgpCcAabdLDukrfgAKkd 4LK/uEwncp7WVdycL2k4cJqanlce1lCF8SIbPDxoLFARwV7ajNNr/2/s3i0rRZCw s11/8esLj5wJanF8aAyE8Y4GqpakLHPKV/2sAY77V+fTuMTUr2V+R+iY/+CtfMmd MQ0gyd8ZtL08esQP0wYdlbBIVUEwpSbQiZVN7Vz/jQYWcSlueQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAJ54lSFpLmODnWb6HrTW8uYtF3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvMmI0ZDdkMjEtNjE2ZS0z ODRhLWFjZjUtMmIyNGQ1MzNjN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQB2Em2MA4E AgACMAgDBgQmAvwxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEzLZk47KPSerQ1TyQRcUzYvfWB+LvUens PTP5MNgoH1Cna9kGSrbXVthqSGmNPDhRuNfZNXPj9vahXWkjv0QkB8Tds2ZhCZ+F SUH/Nvi9GSsk+XAO8mDi24IiYC5bnOfkbyOjxwKLf6rLyJR5CdIlffOJ/S/SlqYv 7eYZmYzaUMJvH/KHyEGFiNFiRymXBoRRGPrxY6Jn+1RME+jJXq1/0wHw+6FTCLF0 Ek553SRLy3OdNVOH3uKYSflcxxFT1n9/cSeDjzNmJ3M11Mi1d40RqAPwKXtja9Jw ma+T5ZMwvJJ1OV5ToWjlmsYk7rnbr0xNXO2AHlMV4LmTGALnaDK2 -----END CERTIFICATE-----Generated at Tue Jul 21 15:53:06 2026 by rpki-client