$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa File: da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa (raw, json) Hash identifier: u+qwBaUK5ak7ypPWmoU/Kvbd0cp7Agx0oC/0RDLOpig= Subject key identifier: F3:B0:3A:06:8B:74:30:06:A5:D1:A1:C4:BF:DB:A7:04:E4:8A:F4:A0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5BAF52B7042646B8B2D50080 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 397601 IP address blocks: 204.2.56.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:52:b7:04:26:46:b8:b2:d5:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=4b52d113-accc-457b-9828-012b462cbd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:1a:a4:e7:65:dd:0d:49:3f:ec:17:d2:d0: f0:25:19:2b:c2:b9:64:e8:cc:16:76:c3:a1:95:69: 96:d8:ae:f9:a5:9e:ab:da:32:cf:cf:ae:fc:8e:13: 5d:83:04:74:2a:28:bb:0c:5b:7f:79:45:a2:1e:42: 2a:7e:f3:6d:57:a6:61:85:d4:54:d2:b8:65:6a:0b: cb:50:f8:30:ad:97:02:10:c3:ef:d5:3b:b7:c1:8b: 1b:78:69:10:98:c7:2f:ee:97:d2:21:a2:5f:2e:6b: 52:65:7c:50:1d:31:2d:91:77:58:a1:03:8a:e6:e1: ca:3d:8c:1f:6f:0f:75:21:75:82:2c:3d:55:a7:f7: 24:fe:c5:5b:0e:f9:4f:14:7e:0a:54:e8:b8:59:47: af:9e:cf:20:29:91:8b:41:e6:02:3c:d6:57:ea:52: c3:e8:99:83:fe:33:e7:bb:dd:9d:d0:51:b6:d2:67: 18:84:ed:4a:06:eb:36:54:60:36:f0:6e:b0:e2:8f: ca:20:90:c8:7c:fa:81:ce:2a:10:f7:d2:0d:8f:27: 36:d3:8c:f6:8c:36:c9:3b:bd:2f:eb:a9:48:95:b7: 89:03:d5:d4:df:53:92:51:1c:ba:33:f4:e4:3c:fa: 92:20:4a:e9:76:d3:9e:1a:4a:c0:16:22:c9:b1:19: 62:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:3A:06:8B:74:30:06:A5:D1:A1:C4:BF:DB:A7:04:E4:8A:F4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.56.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:60:72:81:49:14:50:25:62:7f:df:ce:c1:15:3a:08:1e:f2: f9:bd:79:57:32:91:ff:7d:e4:fb:3b:27:14:ed:f5:9f:9a:af: 14:49:26:a1:91:ed:95:38:0a:03:1d:9a:32:d9:a6:a7:31:e7: b6:af:e7:cb:d4:08:12:89:bb:4b:12:71:55:eb:38:81:12:76: 70:53:8c:78:19:cc:0e:8c:06:c4:66:c1:37:ca:bd:b3:32:64: c0:7a:70:0c:0b:6f:f4:cb:8f:62:09:9d:92:bd:0c:0d:42:72: 9c:22:13:f7:1f:8b:c6:55:13:20:c5:5b:a3:d3:a5:b9:42:7e: 86:61:8b:b4:e3:f8:f7:d7:61:bc:3c:03:56:44:32:5c:f7:91: a8:60:76:23:63:4d:5b:37:fd:8c:5b:e0:a6:78:35:bd:7a:96: b0:c9:94:3c:7a:a6:f3:c9:60:44:d9:d0:be:df:50:b2:55:9f: 48:a2:d1:09:f1:7a:e9:5e:77:fc:48:64:9d:36:39:95:c0:94: bf:53:ac:08:a6:54:fa:40:05:4f:bd:92:1e:25:81:90:b9:b5: fe:54:44:b4:98:2c:47:bb:17:26:a5:d3:66:4a:b4:ed:4e:ec: a9:9a:49:99:b1:95:b6:01:f6:1d:8e:20:d9:41:4a:f2:e6:e2: 9e:8d:f7:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5br1K3BCZGuLLVAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk NGI1MmQxMTMtYWNjYy00NTdiLTk4MjgtMDEyYjQ2MmNiZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsooapOdl3Q1JP+wX0tDwJRkrwrlk6MwWdsOh lWmW2K75pZ6r2jLPz678jhNdgwR0Kii7DFt/eUWiHkIqfvNtV6ZhhdRU0rhlagvL UPgwrZcCEMPv1Tu3wYsbeGkQmMcv7pfSIaJfLmtSZXxQHTEtkXdYoQOK5uHKPYwf bw91IXWCLD1Vp/ck/sVbDvlPFH4KVOi4WUevns8gKZGLQeYCPNZX6lLD6JmD/jPn u92d0FG20mcYhO1KBus2VGA28G6w4o/KIJDIfPqBzioQ99INjyc204z2jDbJO70v 66lIlbeJA9XU31OSURy6M/TkPPqSIErpdtOeGkrAFiLJsRliiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPOwOgaLdDAGpdGhxL/bpwTkivSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGExY2M1ZjQtMGE5ZC0z ZTA3LTk0NDMtODUzMmNjZmE2NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAI4gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmYHKBSRRQJWJ/387BFToIHvL5vXlXMpH/feT7OycU7fWfmq8USSah ke2VOAoDHZoy2aanMee2r+fL1AgSibtLEnFV6ziBEnZwU4x4GcwOjAbEZsE3yr2z MmTAenAMC2/0y49iCZ2SvQwNQnKcIhP3H4vGVRMgxVuj06W5Qn6GYYu04/j312G8 PANWRDJc95GoYHYjY01bN/2MW+CmeDW9epawyZQ8eqbzyWBE2dC+31CyVZ9IotEJ 8XrpXnf8SGSdNjmVwJS/U6wIplT6QAVPvZIeJYGQubX+VES0mCxHuxcmpdNmSrTt TuypmkmZsZW2AfYdjiDZQUry5uKejffG -----END CERTIFICATE-----Generated at Thu Jul 16 03:01:50 2026 by rpki-client