$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/060a7d86-c23d-3c4e-8f16-8a2797116d92.roa File: 060a7d86-c23d-3c4e-8f16-8a2797116d92.roa (raw, json) Hash identifier: XyGVPv/vNJIIlrujIDRP/MYHwf4zOUBDjdGVMm0z6y4= Subject key identifier: F3:D2:AC:5B:1B:BB:DD:30:CE:5F:B3:AB:56:2E:35:83:C3:8A:E2:C1 Certificate issuer: /CN=8cb2cf59-f4a5-4440-8588-1f835a0e0201 Certificate serial: 010D0C9F4328584E6C3CF995C94DDB7C1642E4A0 Authority key identifier: 31:79:91:C7:76:3C:9F:9D:FF:4C:BD:AC:92:D0:B4:35:BD:F2:65:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/060a7d86-c23d-3c4e-8f16-8a2797116d92.roa Signing time: Tue 07 Jul 2026 19:18:40 +0000 ROA not before: Tue 07 Jul 2026 19:18:40 +0000 ROA not after: Mon 05 Oct 2026 19:18:40 +0000 asID: 402686 IP address blocks: 192.231.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:3c:f9:95:c9:4d:db:7c:16:42:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb2cf59-f4a5-4440-8588-1f835a0e0201 Validity Not Before: Jul 7 19:18:40 2026 GMT Not After : Oct 5 19:18:40 2026 GMT Subject: CN=37a1ec4f-7f2d-49b6-abd4-60ceec88dbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:43:e3:33:69:61:ca:53:46:b6:3d:08:25: e8:9a:3b:0e:a6:b5:02:2d:c0:79:fc:82:57:22:72: 8d:3f:2c:a5:ba:b4:b9:4e:59:3d:89:01:08:26:10: e3:7d:95:58:9c:2a:1c:d8:0a:9e:a2:02:5b:2d:44: 21:89:28:1d:19:c9:56:45:d6:b5:d5:0d:52:c1:23: ed:b3:76:f8:7e:a9:a1:06:51:6d:8f:6e:de:fc:a9: db:f9:61:90:81:e2:73:98:e9:75:3f:dd:4f:70:38: 7c:9f:22:c9:50:85:82:2c:67:54:59:2c:cc:01:94: cf:bf:a2:df:5a:b0:af:0a:67:6d:9f:14:36:95:2e: d4:1d:d1:d1:de:8b:a9:b1:a5:fd:41:c5:7e:15:13: ad:63:07:e8:fe:7c:9e:fa:af:d4:03:5c:58:d6:8f: de:31:37:5b:84:f6:08:8f:dd:b2:f7:63:ad:cf:fc: 1b:43:18:bf:81:3a:b1:58:e1:f6:f1:1a:b1:ad:98: d3:9a:55:33:30:b3:27:c0:03:15:66:e9:cb:99:67: 61:f2:55:91:ac:19:b1:c8:b1:e8:0f:73:0b:45:68: 44:ec:0b:4e:49:33:43:4d:e3:28:1e:76:3e:8a:40: e9:5c:75:42:dc:22:6e:b7:6f:92:70:34:7a:75:5a: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D2:AC:5B:1B:BB:DD:30:CE:5F:B3:AB:56:2E:35:83:C3:8A:E2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/060a7d86-c23d-3c4e-8f16-8a2797116d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.crl X509v3 Authority Key Identifier: keyid:31:79:91:C7:76:3C:9F:9D:FF:4C:BD:AC:92:D0:B4:35:BD:F2:65:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer sbgp-ipAddrBlock: critical IPv4: 192.231.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9d:09:da:8d:d0:55:aa:70:5c:43:54:11:56:0f:1b:e4:9e: 72:0d:de:f1:8c:96:10:dd:56:25:6d:c4:51:17:c0:09:a0:f1: 3f:8f:2c:b4:ba:64:0a:17:38:78:a7:ae:30:ed:93:fc:e3:15: bc:6b:15:b5:da:fa:78:3a:3d:bc:a5:2e:d0:bb:6d:0e:f1:56: d8:07:f3:b2:03:aa:e2:d0:10:f4:d7:03:c2:ba:ab:7e:4e:49: 69:c1:e5:54:9a:98:5d:83:26:01:87:db:ff:48:63:ec:a7:b0: 3e:ef:ae:c0:42:9a:05:5c:28:88:58:4c:c8:07:55:f7:3b:e9: e1:f7:8d:ba:1a:69:11:bd:b8:fc:c4:57:79:d7:1a:32:ef:b9: 8c:e0:19:47:ae:a7:c4:bb:59:87:e3:1e:d6:47:0b:3f:79:b3: 41:71:2a:b3:23:0f:97:d3:bb:8a:a4:2d:66:47:e5:c8:f4:36: ef:7b:db:00:47:bd:bb:ae:f2:23:b6:07:ca:f6:b6:bf:aa:ad: ea:28:d9:c2:40:03:05:e6:ed:ae:69:6d:06:59:17:e8:bf:56: a2:2b:0d:ef:0d:c0:6c:b8:16:9b:f8:18:4a:26:45:a4:cf:7d: d6:34:de:c6:60:4e:79:95:db:c4:11:74:c9:27:3a:7e:53:72: a5:ec:0b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sPPmVyU3bfBZC5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMmNmNTktZjRhNS00NDQwLTg1ODgtMWY4MzVhMGUw MjAxMB4XDTI2MDcwNzE5MTg0MFoXDTI2MTAwNTE5MTg0MFowLzEtMCsGA1UEAxMk MzdhMWVjNGYtN2YyZC00OWI2LWFiZDQtNjBjZWVjODhkYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtdD4zNpYcpTRrY9CCXomjsOprUCLcB5/IJX InKNPyylurS5Tlk9iQEIJhDjfZVYnCoc2AqeogJbLUQhiSgdGclWRda11Q1SwSPt s3b4fqmhBlFtj27e/Knb+WGQgeJzmOl1P91PcDh8nyLJUIWCLGdUWSzMAZTPv6Lf WrCvCmdtnxQ2lS7UHdHR3oupsaX9QcV+FROtYwfo/nye+q/UA1xY1o/eMTdbhPYI j92y92Otz/wbQxi/gTqxWOH28RqxrZjTmlUzMLMnwAMVZunLmWdh8lWRrBmxyLHo D3MLRWhE7AtOSTNDTeMoHnY+ikDpXHVC3CJut2+ScDR6dVp7KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPSrFsbu90wzl+zq1YuNYPDiuLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Y2Iy Y2Y1OS1mNGE1LTQ0NDAtODU4OC0xZjgzNWEwZTAyMDEvMDYwYTdkODYtYzIzZC0z YzRlLThmMTYtOGEyNzk3MTE2ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGNiMmNmNTktZjRhNS00NDQwLTg1 ODgtMWY4MzVhMGUwMjAxLzhjYjJjZjU5LWY0YTUtNDQ0MC04NTg4LTFmODM1YTBl MDIwMS5jcmwwHwYDVR0jBBgwFoAUMXmRx3Y8n53/TL2sktC0Nb3yZTowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Y2IyY2Y1OS1mNGE1LTQ0NDAtODU4OC0xZjgz NWEwZTAyMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOfmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGdCdqN0FWqcFxDVBFWDxvknnIN3vGMlhDdViVtxFEXwAmg8T+PLLS6 ZAoXOHinrjDtk/zjFbxrFbXa+ng6PbylLtC7bQ7xVtgH87IDquLQEPTXA8K6q35O SWnB5VSamF2DJgGH2/9IY+ynsD7vrsBCmgVcKIhYTMgHVfc76eH3jboaaRG9uPzE V3nXGjLvuYzgGUeup8S7WYfjHtZHCz95s0FxKrMjD5fTu4qkLWZH5cj0Nu972wBH vbuu8iO2B8r2tr+qreoo2cJAAwXm7a5pbQZZF+i/VqIrDe8NwGy4Fpv4GEomRaTP fdY03sZgTnmV28QRdMknOn5TcqXsC30= -----END CERTIFICATE-----Generated at Tue Jul 21 20:17:13 2026 by rpki-client