$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa File: 2630e1ca-a903-395a-8244-fa8c41db42b9.roa (raw, json) Hash identifier: 3Ci/EFq9kmOYv8+JyHx9zAF4PqN1xyXEiZL3kj1yZaY= Subject key identifier: 24:AE:06:87:B0:FE:8B:7B:74:24:41:5B:D3:4E:42:93:52:E6:9F:29 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5BAF51B838B88E1EEAEE5400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 20940 IP address blocks: 204.2.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:51:b8:38:b8:8e:1e:ea:ee:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=78e30eba-25ab-4842-82c9-c847e28d9318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:ae:65:4d:a7:1e:7a:88:21:4b:79:0a:ec: c1:1c:dd:56:c7:0e:2a:07:5b:3d:3c:e9:14:0a:b9: 02:e3:e4:b8:19:c2:21:d4:34:02:14:58:a1:2e:8a: 0f:5d:d2:25:96:62:bf:1e:ab:ca:cb:95:51:72:88: b7:2d:78:91:0c:98:26:6f:e2:33:c9:1d:b6:36:28: 97:c4:42:7f:50:46:28:c5:01:6d:2d:9d:88:a9:88: 27:71:d5:21:5e:c0:2b:8a:3a:6d:b9:83:2f:f7:96: b5:87:a5:a2:a1:5c:4d:b2:cf:10:0f:6d:ea:93:b1: 28:6c:07:3d:6c:61:b9:55:79:32:aa:66:39:1f:af: fa:99:6b:7f:3b:e8:9d:fa:1d:13:20:db:2b:ef:a8: 44:37:0d:82:e9:d6:98:7d:0e:f1:f1:c3:cb:eb:f3: 96:76:02:ec:3d:72:cd:ca:b4:06:5a:ac:45:cd:1d: 63:77:cc:91:9a:60:94:34:b6:17:11:25:a9:6c:90: 11:2a:3c:d1:4a:de:57:ae:ac:3f:a2:20:f5:71:02: 48:bc:d9:03:1f:cd:84:1b:6f:03:83:cd:b5:dd:83: 80:a3:a0:c5:1a:45:36:0a:8b:03:8c:34:8d:ce:39: e3:70:49:78:0d:09:2b:02:d4:21:03:02:1d:38:49: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AE:06:87:B0:FE:8B:7B:74:24:41:5B:D3:4E:42:93:52:E6:9F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:93:bb:24:ac:22:35:0e:84:60:39:45:d3:d2:db:ea:1e:c7: ab:cf:e2:3c:25:1e:54:fe:2c:81:0f:bf:8a:e9:da:23:16:8b: 00:4b:ac:72:e9:a7:d3:fc:f1:d6:88:8d:cd:59:18:53:fc:fb: e6:72:23:61:53:db:ce:33:cd:9f:53:4e:f5:6c:53:37:78:4b: d9:a8:30:4f:4a:6b:65:cd:bf:ed:e1:71:c1:73:0c:c1:e7:e5: 4c:81:31:27:50:43:b8:77:07:7d:94:db:60:e7:61:c1:2e:65: dd:5f:ec:a7:0f:ae:7a:52:a1:93:40:f0:fa:3f:32:20:9c:77: bd:8d:36:90:b6:29:3d:e6:9f:16:26:2c:88:f2:1c:b9:f3:33: 2e:21:c4:e2:f0:00:4d:b2:91:40:89:43:e9:de:6d:cc:e1:4f: 9b:36:d1:88:34:50:50:c2:ad:51:33:60:96:77:59:ae:8a:42: 17:3d:9f:37:d5:cb:a6:5b:17:5e:83:9b:ed:fd:01:3f:3b:40: e5:b3:33:97:50:8b:f7:c5:d4:cd:96:b5:ce:73:8a:da:42:c7: c4:79:a2:ef:31:51:97:a6:ae:01:9d:65:70:14:49:49:30:77: 98:1f:38:df:46:bb:59:a8:e5:6b:7f:2e:37:af:9c:cc:88:73: fd:b7:c2:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br1G4OLiOHuruVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk NzhlMzBlYmEtMjVhYi00ODQyLTgyYzktYzg0N2UyOGQ5MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuquZU2nHnqIIUt5CuzBHN1Wxw4qB1s9POkU CrkC4+S4GcIh1DQCFFihLooPXdIllmK/HqvKy5VRcoi3LXiRDJgmb+IzyR22NiiX xEJ/UEYoxQFtLZ2IqYgncdUhXsArijptuYMv95a1h6WioVxNss8QD23qk7EobAc9 bGG5VXkyqmY5H6/6mWt/O+id+h0TINsr76hENw2C6daYfQ7x8cPL6/OWdgLsPXLN yrQGWqxFzR1jd8yRmmCUNLYXESWpbJARKjzRSt5Xrqw/oiD1cQJIvNkDH82EG28D g8213YOAo6DFGkU2CosDjDSNzjnjcEl4DQkrAtQhAwIdOEmNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSuBoew/ot7dCRBW9NOQpNS5p8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjYzMGUxY2EtYTkwMy0z OTVhLTgyNDQtZmE4YzQxZGI0MmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuTuySsIjUOhGA5RdPS2+oex6vP4jwlHlT+LIEPv4rp2iMWiwBLrHLp p9P88daIjc1ZGFP8++ZyI2FT284zzZ9TTvVsUzd4S9moME9Ka2XNv+3hccFzDMHn 5UyBMSdQQ7h3B32U22DnYcEuZd1f7KcPrnpSoZNA8Po/MiCcd72NNpC2KT3mnxYm LIjyHLnzMy4hxOLwAE2ykUCJQ+nebczhT5s20Yg0UFDCrVEzYJZ3Wa6KQhc9nzfV y6ZbF16Dm+39AT87QOWzM5dQi/fF1M2Wtc5zitpCx8R5ou8xUZemrgGdZXAUSUkw d5gfON9Gu1mo5Wt/LjevnMyIc/23wv4= -----END CERTIFICATE-----Generated at Thu Jul 16 03:05:00 2026 by rpki-client