$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/654853d6-784c-3ddc-84de-46e0cf0c8d68.roa File: 654853d6-784c-3ddc-84de-46e0cf0c8d68.roa (raw, json) Hash identifier: 99SPi1iCZEnEV3ltFR0Zhed8L+Scf5qPJTU0pQ0siRo= Subject key identifier: 88:D8:6E:A5:3E:89:E6:3E:92:8A:22:DC:D3:BF:4C:33:A1:47:97:0F Certificate issuer: /CN=84bb86db-bd3c-43da-9277-f7557545f5ad Certificate serial: 010D0C9F4328584E7E950B482F460A6259951640 Authority key identifier: 1A:1A:2D:12:7D:21:DA:06:01:60:C7:C8:28:67:59:A2:77:D8:A5:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/654853d6-784c-3ddc-84de-46e0cf0c8d68.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14209 IP address blocks: 192.30.208.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:0b:48:2f:46:0a:62:59:95:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bb86db-bd3c-43da-9277-f7557545f5ad Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=9c171487-a9ea-4a07-8cdd-26421a797337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:ad:10:b8:16:05:eb:d3:32:1b:da:05:e2: 19:5c:cd:0f:30:c8:15:32:45:90:6d:f2:d3:91:67: ad:7c:bc:51:fd:de:05:8e:e4:25:c9:0b:de:25:b9: df:3b:90:d4:ba:22:c2:46:36:ff:69:e6:4a:84:c9: e5:dc:fe:9e:53:1e:6c:51:1c:e4:15:8a:89:c8:bf: 28:70:cd:cc:cb:c7:f1:ca:f5:05:07:2b:28:ac:0a: 56:b5:eb:e4:2d:71:26:ea:02:df:b3:fb:5a:65:78: e0:04:79:0f:d2:da:58:c7:16:52:c3:76:86:11:e1: 62:3f:f2:7e:0e:54:48:cc:b2:88:0f:61:cf:be:44: af:a9:ba:31:b5:e6:67:33:a9:4c:9c:c6:f7:42:76: ea:2e:c5:26:98:4d:c7:65:f8:30:87:47:18:e2:09: 3f:0b:ad:d7:b6:b5:e0:b0:dc:f4:f5:26:5d:1f:f2: db:48:eb:c7:0d:b4:e2:1c:49:ef:4b:1e:8d:46:8c: 00:6a:7b:ae:a6:9a:dd:92:8c:85:5f:15:c9:09:90: 0b:1d:5d:d8:3d:4d:a4:d0:8c:e3:0b:ce:86:02:cf: 68:87:df:91:99:e1:a5:ef:87:4f:f6:f2:54:8d:d4: e5:96:5d:5a:02:3c:5a:d2:ca:da:53:bc:d8:e6:2a: 9e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D8:6E:A5:3E:89:E6:3E:92:8A:22:DC:D3:BF:4C:33:A1:47:97:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/654853d6-784c-3ddc-84de-46e0cf0c8d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.crl X509v3 Authority Key Identifier: keyid:1A:1A:2D:12:7D:21:DA:06:01:60:C7:C8:28:67:59:A2:77:D8:A5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad.cer sbgp-ipAddrBlock: critical IPv4: 192.30.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:78:90:5b:55:45:16:c6:ef:98:24:c4:5e:c5:ea:2f:72:b9: b4:f2:83:86:29:cd:29:85:6f:2a:bf:35:55:c1:44:03:22:5a: 3d:e6:ea:44:fe:da:b3:82:62:08:03:0f:b4:6b:bb:5f:5e:11: f4:55:24:fa:fc:47:8f:01:15:fa:56:06:26:03:8e:52:a0:e2: 40:84:e1:f0:df:0f:40:8f:42:c1:52:44:f2:6b:be:46:78:11: cf:7b:5f:25:65:eb:e4:06:89:11:75:9d:83:12:42:d2:9b:24: ec:90:b8:c0:6a:86:46:5f:79:c3:a3:22:e6:21:fd:a3:af:81: cd:52:ed:94:b8:4f:96:7f:ec:01:d1:9b:97:fd:23:9b:2a:6b: 5a:88:a7:6a:eb:cd:15:41:30:2b:be:d2:d5:3b:10:39:58:09: 2f:aa:3a:26:79:8e:b2:ba:90:cd:c1:4c:47:e4:34:da:bd:fd: a9:e4:ef:b2:9e:9f:4f:b5:34:d9:58:72:48:c6:df:a5:c0:ff: ad:58:be:bc:cb:d4:c3:e1:84:c3:06:f9:cc:8d:b4:90:28:2e: e7:7b:f9:ea:62:f4:09:03:58:d5:37:ff:7b:b2:1c:b8:7a:4f: 93:ea:93:4e:24:ba:8f:cc:d6:dc:57:2f:04:0c:b9:27:52:9a: ce:bb:23:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQtIL0YKYlmVFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiYjg2ZGItYmQzYy00M2RhLTkyNzctZjc1NTc1NDVm NWFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OWMxNzE0ODctYTllYS00YTA3LThjZGQtMjY0MjFhNzk3MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9+tELgWBevTMhvaBeIZXM0PMMgVMkWQbfLT kWetfLxR/d4FjuQlyQveJbnfO5DUuiLCRjb/aeZKhMnl3P6eUx5sURzkFYqJyL8o cM3My8fxyvUFBysorApWtevkLXEm6gLfs/taZXjgBHkP0tpYxxZSw3aGEeFiP/J+ DlRIzLKID2HPvkSvqboxteZnM6lMnMb3QnbqLsUmmE3HZfgwh0cY4gk/C63XtrXg sNz09SZdH/LbSOvHDbTiHEnvSx6NRowAanuupprdkoyFXxXJCZALHV3YPU2k0Izj C86GAs9oh9+RmeGl74dP9vJUjdTlll1aAjxa0sraU7zY5iqezQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjYbqU+ieY+kooi3NO/TDOhR5cPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84NGJi ODZkYi1iZDNjLTQzZGEtOTI3Ny1mNzU1NzU0NWY1YWQvNjU0ODUzZDYtNzg0Yy0z ZGRjLTg0ZGUtNDZlMGNmMGM4ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODRiYjg2ZGItYmQzYy00M2RhLTky NzctZjc1NTc1NDVmNWFkLzg0YmI4NmRiLWJkM2MtNDNkYS05Mjc3LWY3NTU3NTQ1 ZjVhZC5jcmwwHwYDVR0jBBgwFoAUGhotEn0h2gYBYMfIKGdZonfYpaUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84NGJiODZkYi1iZDNjLTQzZGEtOTI3Ny1mNzU1 NzU0NWY1YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx4kFtVRRbG75gkxF7F6i9yubTyg4YpzSmFbyq/NVXBRAMiWj3m6kT+ 2rOCYggDD7Rru19eEfRVJPr8R48BFfpWBiYDjlKg4kCE4fDfD0CPQsFSRPJrvkZ4 Ec97XyVl6+QGiRF1nYMSQtKbJOyQuMBqhkZfecOjIuYh/aOvgc1S7ZS4T5Z/7AHR m5f9I5sqa1qIp2rrzRVBMCu+0tU7EDlYCS+qOiZ5jrK6kM3BTEfkNNq9/ank77Ke n0+1NNlYckjG36XA/61YvrzL1MPhhMMG+cyNtJAoLud7+epi9AkDWNU3/3uyHLh6 T5Pqk04kuo/M1txXLwQMuSdSms67I4Y= -----END CERTIFICATE-----Generated at Tue Jul 21 20:20:04 2026 by rpki-client