$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/f705ee9a-95c3-3721-94df-983fdd791a34.roa File: f705ee9a-95c3-3721-94df-983fdd791a34.roa (raw, json) Hash identifier: GOwsiqLA7ZdNSIzhjoXOKz1B0G0ldEFo0d7CKXwCC3s= Subject key identifier: 2E:C1:35:47:9E:89:65:DB:08:D2:F9:64:2B:3A:4D:A7:81:45:E0:6E Certificate issuer: /CN=969db95f-7221-480e-8d12-fd6cfb8ce240 Certificate serial: 010D0C9F4328584E5DAD8B4ECD7C2B0E02A1A100 Authority key identifier: 89:F4:FA:36:E2:93:E2:81:02:DE:3B:9C:15:61:29:A9:FC:17:98:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/f705ee9a-95c3-3721-94df-983fdd791a34.roa Signing time: Thu 02 Jul 2026 14:08:22 +0000 ROA not before: Thu 02 Jul 2026 14:08:22 +0000 ROA not after: Wed 30 Sep 2026 14:08:22 +0000 asID: 402024 IP address blocks: 204.52.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:ad:8b:4e:cd:7c:2b:0e:02:a1:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969db95f-7221-480e-8d12-fd6cfb8ce240 Validity Not Before: Jul 2 14:08:22 2026 GMT Not After : Sep 30 14:08:22 2026 GMT Subject: CN=890d1f92-0148-4f68-8b1d-7b4ac9bd5aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:23:cb:df:02:08:24:92:b9:41:12:28:d6: ca:b1:22:2f:43:46:86:02:04:ad:fc:f2:7e:43:51: 32:1c:65:39:88:5f:42:62:b7:4b:a5:f1:bd:bd:e0: 99:7b:84:77:c3:ba:03:9f:0e:14:a1:f2:74:8f:b2: 6a:4a:39:b3:ea:7e:0c:e0:ee:56:c0:20:6d:83:b2: 3a:74:20:59:1e:7f:32:ff:01:be:b1:65:cc:c8:f6: d8:ab:1b:c4:5b:63:8f:b0:c5:f9:08:75:da:c5:27: 40:80:2d:ae:0a:7a:86:a5:e2:13:fb:c5:2b:e9:80: 0c:d3:4e:36:16:e4:d0:ad:44:dd:99:28:fd:0d:c9: 40:b4:e1:76:e1:cb:bb:23:19:08:72:67:10:0a:db: 87:1b:28:41:2e:19:9c:db:b3:bf:66:d5:04:5b:fa: 71:6a:a4:fb:07:73:e9:cf:4f:2f:6a:37:b6:0f:fe: c8:8a:6c:01:4a:c4:32:a5:95:47:01:6c:e7:19:67: be:ba:76:4d:84:9d:70:72:7d:3f:e5:d2:52:32:7f: 67:b0:af:37:73:73:56:60:a3:3f:40:5a:67:e8:85: 3a:8e:18:67:a0:0a:7d:41:d7:dd:48:86:0d:84:4c: 7d:33:87:e6:21:46:73:35:e3:07:0f:04:07:17:45: fd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:35:47:9E:89:65:DB:08:D2:F9:64:2B:3A:4D:A7:81:45:E0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/f705ee9a-95c3-3721-94df-983fdd791a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.crl X509v3 Authority Key Identifier: keyid:89:F4:FA:36:E2:93:E2:81:02:DE:3B:9C:15:61:29:A9:FC:17:98:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240.cer sbgp-ipAddrBlock: critical IPv4: 204.52.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f6:53:36:da:63:cd:fa:8a:43:94:a6:4b:6c:b6:2e:5f:52: c1:58:5a:97:a8:cd:2c:1d:25:af:36:b4:56:15:5c:df:20:7d: ed:3f:6b:4e:fa:7b:70:0d:d6:91:eb:a5:63:dc:01:d8:ed:49: c3:cc:8f:ec:2d:bc:21:a2:d3:1e:af:1a:a9:a4:4b:77:52:71: 68:8d:1c:bc:0f:b9:9b:de:ee:dc:ef:7f:ad:24:df:ea:47:97: f7:e0:fa:ef:d8:3d:76:59:1f:46:af:e1:ee:c4:f6:b0:14:ea: e0:51:8b:56:cd:ac:0f:aa:d5:e1:6c:44:56:63:5d:f2:a3:b9: 6f:b2:a0:a1:48:30:e6:bb:10:6a:d7:8b:e9:65:ea:2e:3d:94: 63:11:23:40:84:3e:62:dd:81:26:b5:e3:f5:1f:2f:6c:a9:d3: 3b:e6:04:f0:da:86:63:d0:46:17:e7:ef:0f:62:d1:c1:47:ed: 4f:86:9e:e3:0c:f3:a4:8f:71:d7:0b:36:77:ab:ac:a8:d0:6c: e0:09:63:38:dd:55:a4:4e:0a:1b:19:fd:4f:f6:67:34:06:c2: f1:56:5d:68:82:e2:54:35:f5:10:a9:8f:1f:e7:0c:c8:fe:f1: c5:40:04:2f:b2:fa:ab:36:b8:78:9a:df:2a:72:2e:6e:40:bb: c7:dc:40:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5drYtOzXwrDgKhoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5ZGI5NWYtNzIyMS00ODBlLThkMTItZmQ2Y2ZiOGNl MjQwMB4XDTI2MDcwMjE0MDgyMloXDTI2MDkzMDE0MDgyMlowLzEtMCsGA1UEAxMk ODkwZDFmOTItMDE0OC00ZjY4LThiMWQtN2I0YWM5YmQ1YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBEjy98CCCSSuUESKNbKsSIvQ0aGAgSt/PJ+ Q1EyHGU5iF9CYrdLpfG9veCZe4R3w7oDnw4UofJ0j7JqSjmz6n4M4O5WwCBtg7I6 dCBZHn8y/wG+sWXMyPbYqxvEW2OPsMX5CHXaxSdAgC2uCnqGpeIT+8Ur6YAM0042 FuTQrUTdmSj9DclAtOF24cu7IxkIcmcQCtuHGyhBLhmc27O/ZtUEW/pxaqT7B3Pp z08vaje2D/7IimwBSsQypZVHAWznGWe+unZNhJ1wcn0/5dJSMn9nsK83c3NWYKM/ QFpn6IU6jhhnoAp9QdfdSIYNhEx9M4fmIUZzNeMHDwQHF0X9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7BNUeeiWXbCNL5ZCs6TaeBReBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85Njlk Yjk1Zi03MjIxLTQ4MGUtOGQxMi1mZDZjZmI4Y2UyNDAvZjcwNWVlOWEtOTVjMy0z NzIxLTk0ZGYtOTgzZmRkNzkxYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTY5ZGI5NWYtNzIyMS00ODBlLThk MTItZmQ2Y2ZiOGNlMjQwLzk2OWRiOTVmLTcyMjEtNDgwZS04ZDEyLWZkNmNmYjhj ZTI0MC5jcmwwHwYDVR0jBBgwFoAUifT6NuKT4oEC3jucFWEpqfwXmEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85NjlkYjk1Zi03MjIxLTQ4MGUtOGQxMi1mZDZj ZmI4Y2UyNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv2UzbaY836ikOUpktsti5fUsFYWpeozSwdJa82tFYVXN8gfe0/a076 e3AN1pHrpWPcAdjtScPMj+wtvCGi0x6vGqmkS3dScWiNHLwPuZve7tzvf60k3+pH l/fg+u/YPXZZH0av4e7E9rAU6uBRi1bNrA+q1eFsRFZjXfKjuW+yoKFIMOa7EGrX i+ll6i49lGMRI0CEPmLdgSa14/UfL2yp0zvmBPDahmPQRhfn7w9i0cFH7U+GnuMM 86SPcdcLNnerrKjQbOAJYzjdVaROChsZ/U/2ZzQGwvFWXWiC4lQ19RCpjx/nDMj+ 8cVABC+y+qs2uHia3ypyLm5Au8fcQJ0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:03 2026 by rpki-client