$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa File: f55d329b-e206-3311-9383-9e5491a7f00f.roa (raw, json) Hash identifier: 90e6VA/+1TraVGyXiTt7imr4i9QZ1yAGm8KKxXp9zqc= Subject key identifier: 72:10:60:29:B6:3D:AD:2E:43:61:95:29:87:6D:91:11:D5:80:5E:79 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584E54B4ABCDBF8D1771D2710380 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 15404 IP address blocks: 170.200.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:ab:cd:bf:8d:17:71:d2:71:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=2d4035e2-398f-45f3-b6fd-a6d2f164577b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:12:3f:a3:a1:70:d6:61:73:76:b1:61:19: d1:02:ba:79:34:d5:5c:92:d0:a3:e6:db:e2:3c:4e: 66:2e:65:ac:e8:00:c7:9d:41:e0:87:1f:6c:5e:6d: 98:5f:37:1d:c0:5e:ee:21:5a:30:13:ad:dd:2f:e1: ac:cf:8e:42:58:05:ad:12:20:7a:f1:20:43:eb:f5: ed:46:70:4c:c9:95:01:96:dc:80:40:e3:7b:b1:29: cb:7c:70:b6:bc:b1:30:85:d1:41:76:71:a6:ba:02: df:a2:a7:ad:57:0e:ca:ca:11:cf:36:7f:80:30:ed: 54:aa:46:60:ca:7a:ec:38:0c:4b:51:37:31:f3:43: 05:3c:51:1b:d7:ce:97:f6:52:6d:6c:75:39:a8:8c: e0:e9:2e:88:dd:99:bf:8a:d0:c6:ae:91:74:56:74: 02:1a:d6:3d:42:9f:bb:10:83:53:ea:1a:60:69:b0: ab:ac:bb:61:f0:d9:3f:85:ff:e4:0e:cd:16:b6:3e: 45:4e:97:f4:87:3a:3d:3c:58:f5:69:e9:7e:b1:68: 05:68:95:21:64:a4:12:17:2b:d1:23:ae:b6:89:56: 9d:e8:fa:57:c1:ce:1e:e4:99:cb:4d:2a:65:8e:a9: 82:f9:60:66:40:3d:84:12:2e:6d:29:d9:9d:c1:7e: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:10:60:29:B6:3D:AD:2E:43:61:95:29:87:6D:91:11:D5:80:5E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d7:cb:2f:32:3a:8e:4c:4f:ec:b2:3b:c6:a5:df:aa:88:25: 3d:bd:65:f8:4a:19:8c:ce:1a:a4:d0:eb:dc:32:4e:c8:02:f9: e4:d6:24:80:3f:7f:6e:14:2a:22:08:c7:1c:e1:6b:d2:e4:08: 6e:d8:e7:e8:5f:2f:1c:13:34:a4:83:9b:c2:79:ca:6a:30:0f: d2:ac:97:d5:96:af:2d:fe:ff:18:d3:33:65:86:15:0c:30:9c: cb:d0:59:7f:3f:c4:f7:9e:e5:f2:e5:9d:7a:9e:34:0f:09:3b: d6:df:52:53:a7:66:fa:84:6c:c7:4d:4b:f3:89:48:6f:d2:ef: 26:2a:bc:90:26:87:1f:16:c4:23:f9:42:4f:c6:01:eb:cd:5b: f4:7f:bc:24:92:0a:65:81:c5:6a:b4:6c:86:8e:5d:30:80:1d: 1c:26:82:10:85:b4:54:16:1a:87:cd:e8:89:a9:13:3f:98:a1: 83:31:da:b2:d0:4a:48:0d:4b:f3:3a:b7:94:48:09:fb:27:02: ef:49:96:6c:0f:7d:85:a2:89:85:e6:b9:b7:bb:77:30:17:2f: c5:9b:91:71:cd:88:58:59:e0:a2:38:f1:24:f5:05:38:6d:0d: 93:d1:b6:0f:66:71:74:27:65:c5:a5:6e:fd:14:f4:c5:b0:06: 3e:db:4c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKvNv40XcdJxA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MmQ0MDM1ZTItMzk4Zi00NWYzLWI2ZmQtYTZkMmYxNjQ1NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuoSP6OhcNZhc3axYRnRArp5NNVcktCj5tvi PE5mLmWs6ADHnUHghx9sXm2YXzcdwF7uIVowE63dL+Gsz45CWAWtEiB68SBD6/Xt RnBMyZUBltyAQON7sSnLfHC2vLEwhdFBdnGmugLfoqetVw7KyhHPNn+AMO1UqkZg ynrsOAxLUTcx80MFPFEb186X9lJtbHU5qIzg6S6I3Zm/itDGrpF0VnQCGtY9Qp+7 EINT6hpgabCrrLth8Nk/hf/kDs0Wtj5FTpf0hzo9PFj1ael+sWgFaJUhZKQSFyvR I662iVad6PpXwc4e5JnLTSpljqmC+WBmQD2EEi5tKdmdwX53lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIQYCm2Pa0uQ2GVKYdtkRHVgF55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZjU1ZDMyOWItZTIwNi0z MzExLTkzODMtOWU1NDkxYTdmMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLXyy8yOo5MT+yyO8al36qIJT29ZfhKGYzOGqTQ69wyTsgC+eTWJIA/ f24UKiIIxxzha9LkCG7Y5+hfLxwTNKSDm8J5ymowD9Ksl9WWry3+/xjTM2WGFQww nMvQWX8/xPee5fLlnXqeNA8JO9bfUlOnZvqEbMdNS/OJSG/S7yYqvJAmhx8WxCP5 Qk/GAevNW/R/vCSSCmWBxWq0bIaOXTCAHRwmghCFtFQWGofN6ImpEz+YoYMx2rLQ SkgNS/M6t5RICfsnAu9JlmwPfYWiiYXmube7dzAXL8WbkXHNiFhZ4KI48ST1BTht DZPRtg9mcXQnZcWlbv0U9MWwBj7bTDA= -----END CERTIFICATE-----Generated at Tue Jul 21 22:22:15 2026 by rpki-client