$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa File: 8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa (raw, json) Hash identifier: Rzq1oETs2fbUUcJQ/XY3LsyYLCiIf7ZlF8tVS08tcAQ= Subject key identifier: 0B:A1:90:DA:9E:E9:46:76:2A:4B:15:2C:58:E4:97:B2:8F:72:44:06 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584EF18204E9159E4F2CD13FDE80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 6505 IP address blocks: 200.30.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:04:e9:15:9e:4f:2c:d1:3f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=645bb2f1-54fc-45f0-8dc9-0a8586e84aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:e2:85:ad:14:24:1f:b3:f0:85:6e:6f:e8: 38:05:ae:8c:29:37:1b:8e:88:0a:cc:15:c6:e8:0a: 33:b5:d9:68:f0:45:03:bf:4b:c8:7f:9f:13:3d:c3: c4:13:9a:4c:b5:08:bc:a3:46:fe:cf:c3:d5:07:2b: 07:86:82:7f:d9:e7:29:71:5c:cb:ba:91:2c:c4:8b: c6:e4:e4:78:48:c4:b5:83:fd:e4:da:5e:c6:a8:82: 10:2f:d3:2f:e5:d8:e1:fc:6c:cf:31:5f:84:9e:38: 3b:3d:f7:ac:ad:64:ae:cb:6e:b6:72:e4:d0:25:76: 85:21:df:79:8d:a6:96:d1:51:09:33:bf:3d:a8:4a: 1a:a1:e9:5b:e1:ed:ea:96:6d:da:87:33:75:74:dc: 8d:4e:36:63:2d:11:e2:8d:2b:ae:c9:dc:a6:ba:fc: eb:59:f6:bf:cc:8e:8b:e6:98:1d:12:21:e8:9b:58: 0b:3b:2e:cc:25:2c:48:c2:69:71:64:24:fa:28:6d: 2d:9e:76:a5:a5:36:2d:85:1f:71:a3:cb:2e:06:24: 6a:55:d7:fc:7a:a2:fe:e1:9a:09:0a:3f:e4:42:c3: 33:3e:49:9b:2d:d8:43:8f:c9:a1:91:3e:3f:e9:c7: 3e:e2:18:eb:21:42:47:e0:21:1a:58:52:44:e8:c3: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A1:90:DA:9E:E9:46:76:2A:4B:15:2C:58:E4:97:B2:8F:72:44:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/8f85dfe2-a69e-3cce-93e8-4bbe67282d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 200.30.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:19:b8:6a:06:8c:7d:7d:a2:a6:b3:63:d8:b6:c9:2f:8d:58: c6:7c:04:c7:52:a6:69:f2:27:2e:8c:d9:fb:f6:da:63:bd:32: 1e:74:64:a7:93:a7:50:42:cf:38:42:11:2b:fe:aa:71:bf:7d: 3a:30:25:ce:7d:30:21:c9:f9:d4:ca:41:59:3e:08:27:28:0b: 86:41:b4:28:1e:12:b1:72:c0:0a:ac:38:1d:f0:ae:5b:cf:bf: 1c:7f:c9:bb:80:02:cc:0d:5e:ca:da:77:08:d8:ef:4c:20:1e: b8:b3:33:8f:2f:e6:4b:bf:bd:88:8f:db:1b:91:cb:f9:df:54: 32:4e:46:2e:72:76:b8:bb:cc:d2:e2:b3:43:5c:98:65:18:a5: 48:99:a3:1c:71:7b:70:9b:6d:ee:9e:6d:ab:72:ea:de:99:d7: 68:41:1a:2a:0c:2c:f7:b7:c3:77:61:17:bf:37:15:61:76:9e: 0e:34:38:15:bf:56:92:b8:36:37:42:51:54:62:63:0d:5a:34: 40:2e:fe:b0:70:26:3b:a2:02:d7:23:5c:8c:d3:00:32:c2:f1: eb:75:b8:1f:7c:1d:cd:d8:91:83:ca:85:a9:04:7c:a7:0c:c4: 21:a1:3e:26:21:3a:03:19:30:2b:46:14:92:31:63:58:ea:c8: 2d:28:09:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggTpFZ5PLNE/3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NjQ1YmIyZjEtNTRmYy00NWYwLThkYzktMGE4NTg2ZTg0YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQXiha0UJB+z8IVub+g4Ba6MKTcbjogKzBXG 6Aoztdlo8EUDv0vIf58TPcPEE5pMtQi8o0b+z8PVBysHhoJ/2ecpcVzLupEsxIvG 5OR4SMS1g/3k2l7GqIIQL9Mv5djh/GzPMV+Enjg7PfesrWSuy262cuTQJXaFId95 jaaW0VEJM789qEoaoelb4e3qlm3ahzN1dNyNTjZjLRHijSuuydymuvzrWfa/zI6L 5pgdEiHom1gLOy7MJSxIwmlxZCT6KG0tnnalpTYthR9xo8suBiRqVdf8eqL+4ZoJ Cj/kQsMzPkmbLdhDj8mhkT4/6cc+4hjrIUJH4CEaWFJE6MPo4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuhkNqe6UZ2KksVLFjkl7KPckQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvOGY4NWRmZTItYTY5ZS0z Y2NlLTkzZTgtNGJiZTY3MjgyZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyB4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMZuGoGjH19oqazY9i2yS+NWMZ8BMdSpmnyJy6M2fv22mO9Mh50ZKeT p1BCzzhCESv+qnG/fTowJc59MCHJ+dTKQVk+CCcoC4ZBtCgeErFywAqsOB3wrlvP vxx/ybuAAswNXsradwjY70wgHrizM48v5ku/vYiP2xuRy/nfVDJORi5ydri7zNLi s0NcmGUYpUiZoxxxe3Cbbe6ebaty6t6Z12hBGioMLPe3w3dhF783FWF2ng40OBW/ VpK4NjdCUVRiYw1aNEAu/rBwJjuiAtcjXIzTADLC8et1uB98Hc3YkYPKhakEfKcM xCGhPiYhOgMZMCtGFJIxY1jqyC0oCWc= -----END CERTIFICATE-----Generated at Thu Sep 10 20:41:31 2026 by rpki-client