$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/961e218f-e6a8-392a-bd8b-e2150dd89c85.roa File: 961e218f-e6a8-392a-bd8b-e2150dd89c85.roa (raw, json) Hash identifier: IvgEqhRv5l+VQ0F4rk94Jeu6tsZ181L+qv1CMwbMPBU= Subject key identifier: D6:92:99:F8:EF:AB:4D:11:8A:B5:E6:44:44:4F:B1:0F:95:27:2E:08 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E86F4E70AD3C3DBA16F234D40 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/961e218f-e6a8-392a-bd8b-e2150dd89c85.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 62651 IP address blocks: 207.204.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:e7:0a:d3:c3:db:a1:6f:23:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=d60be581-375c-4fcd-aa50-7b3b8b679f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a0:a7:95:ee:b3:ab:b9:78:a9:c8:72:bd:6c: 79:ee:0f:52:3a:c2:49:2d:61:05:f3:d5:d1:3e:d6: ff:d2:28:78:33:4c:13:b0:80:3d:56:29:e4:a4:fa: 9b:9c:a5:2f:81:64:b9:4b:3e:df:3f:6b:8e:d3:65: 6d:33:39:71:6c:fd:fb:83:ed:8a:ab:6d:3a:ae:93: ac:0c:4a:01:9b:61:2b:bc:33:d6:12:7a:1d:e2:61: d0:9c:c3:e8:e4:da:50:5a:62:6d:64:5c:22:de:67: b9:95:dd:68:36:f7:a5:75:dc:1a:48:e3:77:bc:b7: 9f:f7:81:4a:12:79:95:46:ca:bc:62:69:1a:6a:0f: bb:1d:64:4f:02:1d:69:c6:e3:38:80:37:36:52:17: b4:7b:25:92:72:6d:a4:ee:56:5b:f8:aa:ea:90:21: 16:d5:66:1f:e6:f8:3a:6c:cb:22:52:22:60:48:2c: b1:81:bd:c3:c6:90:25:53:23:95:a8:c2:b7:77:b6: a2:37:42:3b:71:88:ce:d2:e6:c7:2b:82:50:fd:11: 1b:25:0f:99:10:ca:bf:29:d8:11:16:8f:2a:6d:24: 2d:16:08:7c:ab:9f:82:31:6f:f1:32:5b:99:5b:69: c5:4c:e1:e6:6b:7e:b5:45:45:d6:22:4c:e0:26:d6: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:99:F8:EF:AB:4D:11:8A:B5:E6:44:44:4F:B1:0F:95:27:2E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/961e218f-e6a8-392a-bd8b-e2150dd89c85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2b:69:b2:3b:52:40:2b:69:25:12:ba:be:9a:02:fa:10:e9: e3:76:08:dd:a2:5d:82:61:95:54:e6:50:cf:61:c2:94:5e:d4: d1:9e:7b:9b:eb:d6:60:ca:9e:2a:14:3c:d3:b9:38:19:b7:d1: df:8f:88:68:78:37:37:01:00:50:8b:b0:0d:17:f7:bf:2a:49: 93:62:c8:7a:ce:4f:0c:11:aa:bb:03:cb:e5:98:d2:da:c8:fa: 58:38:2a:48:d0:9e:9c:29:c7:85:05:75:e7:48:db:dd:94:02: bf:bb:c8:8e:5b:27:a8:4a:db:0d:6a:1b:f1:4d:fa:97:b7:c6: 85:54:b3:15:d3:31:7e:b0:5f:05:4b:ec:c1:e3:ab:5d:12:c6: 18:ce:c9:d1:03:78:28:71:bc:ad:c3:a2:40:a3:13:19:8e:2f: 80:2f:0e:54:c7:6a:25:a9:f7:21:a8:10:d3:fb:39:ab:71:89: a5:58:cc:c5:2f:28:08:64:26:48:3e:d3:d4:a6:3d:03:60:a5: de:a4:ac:c0:4e:de:0b:1d:dd:b5:d4:6d:5a:5f:55:8d:b5:38: 32:4f:1a:b7:b7:03:22:d4:27:78:e5:d8:cf:91:d1:ea:f1:a7: 21:61:76:ab:6b:08:49:5a:c2:34:f7:fb:c0:69:61:9b:12:dc: 56:ac:49:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9OcK08PboW8jTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZDYwYmU1ODEtMzc1Yy00ZmNkLWFhNTAtN2IzYjhiNjc5ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6Cnle6zq7l4qchyvWx57g9SOsJJLWEF89XR Ptb/0ih4M0wTsIA9VinkpPqbnKUvgWS5Sz7fP2uO02VtMzlxbP37g+2Kq206rpOs DEoBm2ErvDPWEnod4mHQnMPo5NpQWmJtZFwi3me5ld1oNvelddwaSON3vLef94FK EnmVRsq8Ymkaag+7HWRPAh1pxuM4gDc2Uhe0eyWScm2k7lZb+KrqkCEW1WYf5vg6 bMsiUiJgSCyxgb3DxpAlUyOVqMK3d7aiN0I7cYjO0ubHK4JQ/REbJQ+ZEMq/KdgR Fo8qbSQtFgh8q5+CMW/xMluZW2nFTOHma361RUXWIkzgJtb/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaSmfjvq00RirXmRERPsQ+VJy4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOTYxZTIxOGYtZTZhOC0z OTJhLWJkOGItZTIxNTBkZDg5Yzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACArabI7UkAraSUSur6aAvoQ6eN2CN2iXYJhlVTmUM9hwpRe1NGee5vr 1mDKnioUPNO5OBm30d+PiGh4NzcBAFCLsA0X978qSZNiyHrOTwwRqrsDy+WY0trI +lg4KkjQnpwpx4UFdedI292UAr+7yI5bJ6hK2w1qG/FN+pe3xoVUsxXTMX6wXwVL 7MHjq10SxhjOydEDeChxvK3DokCjExmOL4AvDlTHaiWp9yGoENP7OatxiaVYzMUv KAhkJkg+09SmPQNgpd6krMBO3gsd3bXUbVpfVY21ODJPGre3AyLUJ3jl2M+R0erx pyFhdqtrCElawjT3+8BpYZsS3FasSbE= -----END CERTIFICATE-----Generated at Tue Jul 21 22:33:43 2026 by rpki-client