$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/4aeaee1e-1d4e-3317-9efe-151695d702d0.roa File: 4aeaee1e-1d4e-3317-9efe-151695d702d0.roa (raw, json) Hash identifier: RGwlJScVfX0CjiBXUNm6ylwAv2Qnf3on4kSXwHyJ/YA= Subject key identifier: DE:CE:6E:0D:F2:8D:66:90:50:AE:2A:D2:AB:A7:73:24:B3:02:C1:22 Certificate issuer: /CN=35f87494-f17b-4780-a8d9-0e3d5a3e43d6 Certificate serial: 010D0C9F4328584E5E66763FCA5F03E0974F1300 Authority key identifier: 56:76:51:0D:6F:88:F9:45:61:BC:1D:D5:D1:14:6D:50:97:57:05:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/4aeaee1e-1d4e-3317-9efe-151695d702d0.roa Signing time: Thu 02 Jul 2026 20:20:57 +0000 ROA not before: Thu 02 Jul 2026 20:20:57 +0000 ROA not after: Wed 30 Sep 2026 20:20:57 +0000 asID: 402568 IP address blocks: 204.17.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:66:76:3f:ca:5f:03:e0:97:4f:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f87494-f17b-4780-a8d9-0e3d5a3e43d6 Validity Not Before: Jul 2 20:20:57 2026 GMT Not After : Sep 30 20:20:57 2026 GMT Subject: CN=b4780ea7-9b30-4581-a519-70101a4ec3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:6d:2a:9e:cb:f6:5b:89:99:73:43:2d:4c: 72:23:04:9b:42:fe:92:70:40:fa:91:35:b9:e1:51: 90:36:48:6e:03:ed:af:19:e0:c8:62:03:23:42:72: 60:0b:77:0a:9c:ba:72:0e:49:11:30:5a:f2:30:23: 00:10:f1:c3:cb:ea:58:ff:06:c4:c1:98:c3:c8:e6: ff:90:1a:41:d7:eb:52:37:51:77:a0:22:c9:7d:91: 28:fb:3c:61:62:66:ab:91:78:3d:03:06:36:5d:e0: f8:01:1b:e2:22:61:bb:a2:f4:01:03:79:29:1f:36: 02:54:66:fd:b2:b8:54:81:39:18:03:03:fb:1b:6d: d4:2f:a0:4b:39:14:38:1d:29:5c:b1:78:73:31:35: b0:ab:1f:68:00:33:82:9f:eb:7b:b9:87:28:27:a7: ab:f8:68:f8:47:6b:f3:07:b6:72:cd:de:46:ae:8b: fe:6b:86:14:28:aa:c5:71:d8:52:39:66:a1:a6:bf: 68:88:8a:e4:c7:6a:f4:5c:f5:ff:6e:f1:0a:d5:8d: 00:d9:50:a3:00:aa:fc:4d:82:54:6d:3d:99:4d:bc: 57:26:2c:89:a7:a0:41:aa:c7:51:2d:5b:61:26:d2: 53:df:b2:9c:f8:d1:5e:2d:e5:9e:f1:fb:4a:33:6d: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CE:6E:0D:F2:8D:66:90:50:AE:2A:D2:AB:A7:73:24:B3:02:C1:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/4aeaee1e-1d4e-3317-9efe-151695d702d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.crl X509v3 Authority Key Identifier: keyid:56:76:51:0D:6F:88:F9:45:61:BC:1D:D5:D1:14:6D:50:97:57:05:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.cer sbgp-ipAddrBlock: critical IPv4: 204.17.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4f:db:a2:06:77:8e:50:1f:89:51:7f:40:6c:ec:3c:7f:1e: 4d:d7:7b:23:ea:35:0c:99:2a:de:8e:e1:8a:90:b7:4f:f1:6e: 21:ac:1c:b1:34:41:f3:b2:ee:a2:fc:53:5a:5b:9f:9b:fe:69: 5a:ac:56:e8:ea:fa:8a:ea:61:32:18:8a:c4:c8:68:c6:06:d4: 84:73:c1:f6:04:67:63:d7:4d:a8:1f:10:99:c8:7c:97:16:5d: c2:3d:4b:f7:d3:b8:c2:74:a3:f7:27:e7:9b:81:f9:bf:06:71: 32:e1:69:07:33:48:eb:98:e7:9a:da:11:a3:e8:eb:89:c8:d3: e2:af:6e:32:68:44:bf:7c:47:37:b5:c0:ad:8c:c3:95:d6:17: 2b:0f:05:9f:f6:3f:d0:f3:5f:bc:68:10:d2:d3:63:2d:76:e4: 83:8b:6e:61:79:f4:2c:28:75:68:06:0b:49:2d:53:3b:dc:e1: fd:95:04:45:25:5c:16:8c:69:4a:01:04:86:1f:2c:1c:ee:b9: 20:b1:24:08:3f:b8:46:bd:be:cd:4b:70:c3:62:cd:f5:fb:ca: 8d:28:63:ab:a9:b9:99:91:cf:5b:4e:9a:90:55:33:57:08:50: a1:67:ac:bb:35:e5:62:50:9b:fa:fe:b6:0b:7d:60:6f:2d:60: 83:a1:95:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eZnY/yl8D4JdPEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVmODc0OTQtZjE3Yi00NzgwLWE4ZDktMGUzZDVhM2U0 M2Q2MB4XDTI2MDcwMjIwMjA1N1oXDTI2MDkzMDIwMjA1N1owLzEtMCsGA1UEAxMk YjQ3ODBlYTctOWIzMC00NTgxLWE1MTktNzAxMDFhNGVjM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBltKp7L9luJmXNDLUxyIwSbQv6ScED6kTW5 4VGQNkhuA+2vGeDIYgMjQnJgC3cKnLpyDkkRMFryMCMAEPHDy+pY/wbEwZjDyOb/ kBpB1+tSN1F3oCLJfZEo+zxhYmarkXg9AwY2XeD4ARviImG7ovQBA3kpHzYCVGb9 srhUgTkYAwP7G23UL6BLORQ4HSlcsXhzMTWwqx9oADOCn+t7uYcoJ6er+Gj4R2vz B7Zyzd5Grov+a4YUKKrFcdhSOWahpr9oiIrkx2r0XPX/bvEK1Y0A2VCjAKr8TYJU bT2ZTbxXJiyJp6BBqsdRLVthJtJT37Kc+NFeLeWe8ftKM21Z9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7Obg3yjWaQUK4q0quncySzAsEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWY4 NzQ5NC1mMTdiLTQ3ODAtYThkOS0wZTNkNWEzZTQzZDYvNGFlYWVlMWUtMWQ0ZS0z MzE3LTllZmUtMTUxNjk1ZDcwMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzVmODc0OTQtZjE3Yi00NzgwLWE4 ZDktMGUzZDVhM2U0M2Q2LzM1Zjg3NDk0LWYxN2ItNDc4MC1hOGQ5LTBlM2Q1YTNl NDNkNi5jcmwwHwYDVR0jBBgwFoAUVnZRDW+I+UVhvB3V0RRtUJdXBTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNWY4NzQ5NC1mMTdiLTQ3ODAtYThkOS0wZTNk NWEzZTQzZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRP26IGd45QH4lRf0Bs7Dx/Hk3XeyPqNQyZKt6O4YqQt0/xbiGsHLE0 QfOy7qL8U1pbn5v+aVqsVujq+orqYTIYisTIaMYG1IRzwfYEZ2PXTagfEJnIfJcW XcI9S/fTuMJ0o/cn55uB+b8GcTLhaQczSOuY55raEaPo64nI0+KvbjJoRL98Rze1 wK2Mw5XWFysPBZ/2P9DzX7xoENLTYy125IOLbmF59CwodWgGC0ktUzvc4f2VBEUl XBaMaUoBBIYfLBzuuSCxJAg/uEa9vs1LcMNizfX7yo0oY6upuZmRz1tOmpBVM1cI UKFnrLs15WJQm/r+tgt9YG8tYIOhlaw= -----END CERTIFICATE-----Generated at Tue Jul 21 20:57:45 2026 by rpki-client