$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a868f47c-c5a9-3aa6-ab64-30e9caec3dc2.roa File: a868f47c-c5a9-3aa6-ab64-30e9caec3dc2.roa (raw, json) Hash identifier: GFKfTwnqNidDs7MTyldSstlnBZY0pyHMj2ApLzSM9BE= Subject key identifier: BF:E5:61:89:3C:E2:54:BB:8A:EA:DF:34:EE:74:C0:E5:F7:1C:BF:94 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584EA78FE444DD4D0BF1360413E0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a868f47c-c5a9-3aa6-ab64-30e9caec3dc2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 174 IP address blocks: 209.107.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:e4:44:dd:4d:0b:f1:36:04:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bb394c60-d006-41ec-b1fb-aff9a6ae0e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:be:3b:bd:d3:c5:36:8c:13:de:fe:c1:bf: 9b:49:f8:3f:2c:04:45:3c:12:f1:c2:a0:9e:bb:fd: dc:15:51:63:b5:59:77:e7:10:15:68:fa:46:bf:79: bf:0c:20:cb:ea:0b:5f:28:c8:56:87:d5:2b:73:b1: 4f:16:15:42:ff:af:6e:9c:98:60:d7:df:1a:f5:15: fa:4a:79:3b:2c:f8:c1:39:cb:df:e3:1b:56:14:df: 1f:b8:b8:b0:57:d9:5b:d5:39:76:77:c4:71:b4:91: fd:d9:18:45:7e:40:a6:d3:74:e7:3f:f9:1a:9a:3c: e4:17:da:f8:18:ce:a9:19:23:f7:d0:e4:2f:60:6c: d0:15:c9:7d:18:71:19:cc:b9:63:52:ae:e0:47:a3: 37:25:d0:26:cd:47:39:53:dc:f9:d7:0b:fa:e8:1c: 87:21:58:db:be:95:ae:91:26:70:f2:36:9a:3d:2c: 0a:41:22:a7:a2:64:08:12:eb:dd:f0:36:b0:80:2f: 1e:87:5d:b5:58:50:f9:fd:4d:95:b3:5a:c9:ad:2d: 4a:5a:5d:4e:f7:bf:21:fd:f1:d3:ab:f6:6d:44:a4: 85:63:aa:02:72:c7:8a:4a:e1:8f:2d:7c:ed:9b:ea: b8:33:1b:a0:c6:19:81:49:bb:37:27:ab:9a:98:d7: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E5:61:89:3C:E2:54:BB:8A:EA:DF:34:EE:74:C0:E5:F7:1C:BF:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a868f47c-c5a9-3aa6-ab64-30e9caec3dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a1:48:53:6a:b6:04:1c:ff:de:ea:69:f9:2c:9a:7d:c4:7d: 5d:38:d6:65:a0:3d:7c:b8:07:84:0b:45:ed:1e:3b:72:ef:dc: c7:9e:ee:1e:4f:32:74:01:09:78:94:74:3b:3c:e0:f7:e8:d3: 02:71:4f:9c:bf:5c:e6:6d:6d:dc:f7:68:3f:1e:bc:96:b4:77: 0b:9a:fc:be:99:8d:eb:b0:43:71:ff:db:ec:91:0b:1f:d0:23: 4b:24:19:81:cb:f6:87:f5:d5:0f:bb:09:73:38:8b:62:61:0c: 82:aa:5e:4c:69:fd:e9:73:44:0a:4d:ce:05:5e:67:5b:d8:85: 02:83:f4:03:78:5d:8c:b5:dd:d0:8b:84:f4:6c:ff:a4:65:8d: 2e:61:20:0c:50:d9:6a:c7:19:33:bb:f0:ed:78:37:5b:58:2c: 1f:9c:db:3a:88:67:cc:cb:60:e7:69:69:d2:98:72:9d:57:0e: 01:d7:6f:1d:12:2e:a4:d4:88:b0:4d:e5:c4:6b:9e:f4:f8:5a: df:4f:38:ee:9b:78:a4:66:da:df:cc:f0:4b:af:50:e7:1a:50: d7:f2:53:85:13:6f:be:9a:d5:a5:8c:bd:d7:e2:cd:76:df:58: 64:81:f2:a0:ba:52:fa:2a:e4:ee:db:c2:20:15:f6:46:9b:5e: 07:9d:2b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj+RE3U0L8TYEE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmIzOTRjNjAtZDAwNi00MWVjLWIxZmItYWZmOWE2YWUwZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7G+O73TxTaME97+wb+bSfg/LARFPBLxwqCe u/3cFVFjtVl35xAVaPpGv3m/DCDL6gtfKMhWh9Urc7FPFhVC/69unJhg198a9RX6 Snk7LPjBOcvf4xtWFN8fuLiwV9lb1Tl2d8RxtJH92RhFfkCm03TnP/kamjzkF9r4 GM6pGSP30OQvYGzQFcl9GHEZzLljUq7gR6M3JdAmzUc5U9z51wv66ByHIVjbvpWu kSZw8jaaPSwKQSKnomQIEuvd8DawgC8eh121WFD5/U2Vs1rJrS1KWl1O978h/fHT q/ZtRKSFY6oCcseKSuGPLXztm+q4MxugxhmBSbs3J6uamNfZQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/lYYk84lS7iurfNO50wOX3HL+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYTg2OGY0N2MtYzVhOS0z YWE2LWFiNjQtMzBlOWNhZWMzZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqhSFNqtgQc/97qafksmn3EfV041mWgPXy4B4QLRe0eO3Lv3Mee7h5P MnQBCXiUdDs84Pfo0wJxT5y/XOZtbdz3aD8evJa0dwua/L6ZjeuwQ3H/2+yRCx/Q I0skGYHL9of11Q+7CXM4i2JhDIKqXkxp/elzRApNzgVeZ1vYhQKD9AN4XYy13dCL hPRs/6RljS5hIAxQ2WrHGTO78O14N1tYLB+c2zqIZ8zLYOdpadKYcp1XDgHXbx0S LqTUiLBN5cRrnvT4Wt9POO6beKRm2t/M8EuvUOcaUNfyU4UTb76a1aWMvdfizXbf WGSB8qC6Uvoq5O7bwiAV9kabXgedK8o= -----END CERTIFICATE-----Generated at Tue Aug 4 15:04:16 2026 by rpki-client