$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa File: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (raw, json) Hash identifier: MMIFOmU9If34pTBtfuQtc9n84L+fzQms3iH02cSBpPg= Subject key identifier: 8D:C1:F1:FB:37:A2:20:B0:8A:37:B9:F7:0B:CD:C0:EC:E2:2E:73:36 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584E6B0A1C7AE477440C91E31D80 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 18587 IP address blocks: 204.209.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:1c:7a:e4:77:44:0c:91:e3:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=3d09820a-5b88-405e-9f36-e9c36952c4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:54:03:6c:53:0d:ff:c5:43:8a:06:7d:6f:3f: 90:6c:b3:fb:0f:12:2e:b1:09:90:b0:e6:73:af:a6: a8:dd:c9:32:16:95:80:07:2e:44:5f:c3:6c:73:c2: 6d:a6:03:eb:ab:9e:ca:2e:86:48:7d:83:2a:f3:7b: 16:44:e5:1a:f1:f6:af:14:68:65:c5:65:0e:80:73: a8:6d:ce:7d:12:8b:f8:8d:41:8d:8e:2e:5f:5a:00: 2a:5a:f5:73:e0:c7:1b:94:a9:1d:30:13:33:38:7d: ab:d5:16:25:9c:73:47:ff:9f:23:fe:8d:01:6c:2b: 2d:85:4d:e2:94:c0:58:da:18:13:07:ec:16:c4:ba: 6e:61:69:28:ef:0f:4d:c7:1a:1d:7f:e6:b3:f6:03: b5:64:1b:06:47:31:70:23:5b:ce:7c:be:59:91:71: 54:d5:98:25:84:7f:fd:7d:2a:13:85:fc:39:93:5f: ea:44:a5:86:0d:db:7d:38:53:e4:32:11:a5:16:d0: 91:88:cb:80:07:d5:9f:47:df:55:7a:82:6d:90:5a: 06:d4:ea:3b:e9:b8:9b:1d:a9:88:d8:6d:56:a1:48: 03:98:9c:b8:ae:54:0d:a6:c1:34:2d:a3:f9:72:ea: b0:6f:5a:d4:3c:00:8f:bb:34:24:33:15:7a:9e:de: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C1:F1:FB:37:A2:20:B0:8A:37:B9:F7:0B:CD:C0:EC:E2:2E:73:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:a1:29:53:a0:34:2a:51:e1:db:40:81:98:f4:04:36:90:bd: 34:94:c5:57:ac:82:45:73:54:be:ad:6e:d4:91:1e:02:4a:86: 07:07:cb:79:82:bc:e2:ce:ae:de:d8:fe:cb:f6:11:44:86:3c: a2:1f:49:59:73:b5:bb:06:7c:da:ad:a7:99:e6:0e:8d:93:bd: 64:a5:8b:38:ad:c5:a8:3c:48:1e:f9:7c:1d:77:9e:3f:b8:3c: 99:04:2f:92:18:04:ea:43:5a:42:e1:92:5e:af:73:af:d6:a0: c0:87:b0:52:cb:02:3f:df:b3:69:aa:6d:b3:b4:51:27:8e:e6: 6b:e0:34:11:bd:70:01:17:57:68:39:4b:3e:bb:cd:72:05:2b: 3d:f5:28:14:ad:c2:d5:1f:00:43:0f:c7:95:88:15:79:03:4a: 5a:da:63:bb:4a:e9:ed:ae:7e:4d:4d:02:a6:21:ed:d3:4e:3c: 03:3e:94:c8:01:45:ed:98:d7:55:7b:ea:67:3b:b2:8c:f3:32: a6:7c:d8:77:25:c3:6e:11:01:07:11:45:25:3d:9e:d9:be:ca: 48:6c:55:52:72:b2:aa:91:88:67:2b:47:50:ef:08:07:8e:b7: 52:e3:35:41:cf:77:d1:e9:76:3c:08:6d:18:84:f4:40:3b:8d: f0:c1:eb:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChx65HdEDJHjHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk M2QwOTgyMGEtNWI4OC00MDVlLTlmMzYtZTljMzY5NTJjNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVQDbFMN/8VDigZ9bz+QbLP7DxIusQmQsOZz r6ao3ckyFpWABy5EX8Nsc8JtpgPrq57KLoZIfYMq83sWROUa8favFGhlxWUOgHOo bc59Eov4jUGNji5fWgAqWvVz4McblKkdMBMzOH2r1RYlnHNH/58j/o0BbCsthU3i lMBY2hgTB+wWxLpuYWko7w9Nxxodf+az9gO1ZBsGRzFwI1vOfL5ZkXFU1ZglhH/9 fSoThfw5k1/qRKWGDdt9OFPkMhGlFtCRiMuAB9WfR99VeoJtkFoG1Oo76bibHamI 2G1WoUgDmJy4rlQNpsE0LaP5cuqwb1rUPACPuzQkMxV6nt7CgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3B8fs3oiCwije59wvNwOziLnM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMmIyYWMxMWItZTQ4ZS0z ZDdiLWJiNDctNzRiODgyOTg2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuhKVOgNCpR4dtAgZj0BDaQvTSUxVesgkVzVL6tbtSRHgJKhgcHy3mC vOLOrt7Y/sv2EUSGPKIfSVlztbsGfNqtp5nmDo2TvWSlizitxag8SB75fB13nj+4 PJkEL5IYBOpDWkLhkl6vc6/WoMCHsFLLAj/fs2mqbbO0USeO5mvgNBG9cAEXV2g5 Sz67zXIFKz31KBStwtUfAEMPx5WIFXkDSlraY7tK6e2ufk1NAqYh7dNOPAM+lMgB Re2Y11V76mc7sozzMqZ82Hclw24RAQcRRSU9ntm+ykhsVVJysqqRiGcrR1DvCAeO t1LjNUHPd9HpdjwIbRiE9EA7jfDB62g= -----END CERTIFICATE-----Generated at Tue Jul 21 15:47:49 2026 by rpki-client