$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa File: a559552c-2373-383e-9f4d-c6e59db5d6ad.roa (raw, json) Hash identifier: IZbIduMz21PfbP66Z/YxbhI9i7eu07dL6ah7tGm9n+k= Subject key identifier: 89:33:67:2E:DF:4E:F2:4B:AC:55:46:AB:DC:C5:DA:5B:11:E6:2A:06 Certificate issuer: /CN=250ff67c-5904-4655-8b50-832a485ad1b8 Certificate serial: 010D0C9F4328584EA78845054E3D9CCEE0256A80 Authority key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 174 IP address blocks: 216.163.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:45:05:4e:3d:9c:ce:e0:25:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250ff67c-5904-4655-8b50-832a485ad1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c7c27f6f-1043-4393-818e-5d9613f588dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:7e:df:13:70:05:7b:1d:58:8d:10:73:3f: ea:12:02:44:77:1c:8e:99:6a:b7:e0:10:8c:5d:a6: f8:33:86:55:94:98:35:27:48:7b:41:68:e7:51:35: ad:1d:37:7d:1e:6c:74:ef:ab:48:36:0e:c3:0e:93: d8:25:84:9d:11:db:73:9d:82:b6:58:97:ba:4e:37: 12:8f:e4:9c:d1:2f:ba:98:ac:52:55:da:4d:4d:b9: a2:76:f7:19:95:dd:20:c0:c4:50:d2:48:63:b8:94: 73:1c:9b:b5:0b:41:ee:44:45:51:2e:e2:86:d1:80: a8:81:d1:c7:9c:ff:31:0f:6e:e8:87:8f:61:85:d9: 99:44:97:54:ce:b4:72:f3:4b:52:80:b2:5d:84:58: 9b:a1:ab:27:e3:a2:67:a1:6e:83:7b:59:1a:05:91: 1b:7f:56:74:8f:30:e7:02:dc:49:e6:88:01:00:b0: 95:2d:6c:46:2c:f7:19:0a:d3:d9:b6:19:7f:9c:f5: ae:87:c9:5f:8e:90:4b:85:ce:e1:3e:45:d5:c8:0a: e1:2d:ee:ed:f2:45:ba:89:15:27:2c:c2:67:cc:3b: 5d:24:d6:19:51:2d:f1:c6:dc:29:fc:61:c6:18:ca: 5c:23:7b:03:11:b7:47:e5:96:f7:ce:0d:e5:f1:89: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:33:67:2E:DF:4E:F2:4B:AC:55:46:AB:DC:C5:DA:5B:11:E6:2A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/a559552c-2373-383e-9f4d-c6e59db5d6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl X509v3 Authority Key Identifier: keyid:D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer sbgp-ipAddrBlock: critical IPv4: 216.163.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:dd:1d:1b:62:a9:dd:66:08:6f:22:4a:43:de:7f:be:59:c5: e9:4d:1e:d4:42:65:65:e0:5a:15:a8:4a:ba:28:f8:88:fb:db: 7b:1e:65:5e:65:c6:a5:75:17:78:37:4f:b7:a0:e0:e1:9f:0e: a1:c2:d0:a2:8e:4c:47:e4:50:1d:6d:c4:f6:41:e9:1c:67:3d: 00:90:3f:ac:bd:2f:5b:ac:f8:25:e7:05:e8:62:47:c7:ec:d1: f9:b8:ad:8e:89:52:07:ce:65:c5:f0:ec:9b:62:fd:b7:af:d0: 6d:7a:93:cf:fe:63:88:52:07:6a:1f:4b:c7:6c:08:28:3e:2d: 01:29:10:10:bb:40:7a:e7:2a:68:2f:20:28:df:1e:89:f0:71: a6:43:c1:64:f4:e4:70:98:23:e6:c5:0a:2b:5c:9b:e2:4b:3b: 1f:10:d5:56:31:ed:47:6a:be:9e:fa:65:93:a7:cc:f5:d0:ab: 66:19:9c:f0:5e:8e:24:27:4a:32:d7:e3:58:73:90:bc:96:8c: 57:6f:5e:af:58:88:46:d1:b0:43:53:79:5d:70:24:26:c1:08: 70:82:06:5a:11:ad:f5:61:3a:6e:b0:97:79:b0:da:96:4c:3d: 05:a0:ce:04:57:ef:2f:32:52:a3:ad:75:d0:59:16:a8:fe:58: 38:0f:cc:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEUFTj2czuAlaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUwZmY2N2MtNTkwNC00NjU1LThiNTAtODMyYTQ4NWFk MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzdjMjdmNmYtMTA0My00MzkzLTgxOGUtNWQ5NjEzZjU4OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArll+3xNwBXsdWI0Qcz/qEgJEdxyOmWq34BCM Xab4M4ZVlJg1J0h7QWjnUTWtHTd9Hmx076tINg7DDpPYJYSdEdtznYK2WJe6TjcS j+Sc0S+6mKxSVdpNTbmidvcZld0gwMRQ0khjuJRzHJu1C0HuREVRLuKG0YCogdHH nP8xD27oh49hhdmZRJdUzrRy80tSgLJdhFiboasn46JnoW6De1kaBZEbf1Z0jzDn AtxJ5ogBALCVLWxGLPcZCtPZthl/nPWuh8lfjpBLhc7hPkXVyArhLe7t8kW6iRUn LMJnzDtdJNYZUS3xxtwp/GHGGMpcI3sDEbdH5Zb3zg3l8YkGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkzZy7fTvJLrFVGq9zF2lsR5ioGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBm ZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1YWQxYjgvYTU1OTU1MmMtMjM3My0z ODNlLTlmNGQtYzZlNTlkYjVkNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUwZmY2N2MtNTkwNC00NjU1LThi NTAtODMyYTQ4NWFkMWI4LzI1MGZmNjdjLTU5MDQtNDY1NS04YjUwLTgzMmE0ODVh ZDFiOC5jcmwwHwYDVR0jBBgwFoAU2WxV3mS4zLuq8SxpN5dSmXVVazkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJh NDg1YWQxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKndHRtiqd1mCG8iSkPef75ZxelNHtRCZWXgWhWoSroo+Ij723seZV5l xqV1F3g3T7eg4OGfDqHC0KKOTEfkUB1txPZB6RxnPQCQP6y9L1us+CXnBehiR8fs 0fm4rY6JUgfOZcXw7Jti/bev0G16k8/+Y4hSB2ofS8dsCCg+LQEpEBC7QHrnKmgv ICjfHonwcaZDwWT05HCYI+bFCitcm+JLOx8Q1VYx7Udqvp76ZZOnzPXQq2YZnPBe jiQnSjLX41hzkLyWjFdvXq9YiEbRsENTeV1wJCbBCHCCBloRrfVhOm6wl3mw2pZM PQWgzgRX7y8yUqOtddBZFqj+WDgPzC0= -----END CERTIFICATE-----Generated at Fri Aug 21 21:23:50 2026 by rpki-client