$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa File: d44b739e-4693-3efd-8c82-67f73703b4ec.roa (raw, json) Hash identifier: sQenMXVtRJ7v2R5ggqPhMz0V5ZQMr9n/740V5MfLxTM= Subject key identifier: D8:C3:54:C3:97:9F:0D:58:21:38:56:9B:08:BC:96:9E:3C:FF:DF:DD Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F4328584EA794FF1C98C34C687A1F3780 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46149 IP address blocks: 208.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:ff:1c:98:c3:4c:68:7a:1f:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7d8b7e51-6ac9-4fdf-8e7d-6b63bbf5143e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:bc:33:4a:71:21:41:0a:24:d8:16:d4:14: 70:1c:1b:ff:40:cd:c5:e8:9e:bc:2d:15:55:c1:1a: 2c:b3:1b:e1:24:ca:2e:33:7b:d4:c6:d7:23:02:7c: 80:0d:00:58:fb:75:a6:c3:f6:e9:29:5d:02:f4:5b: b9:08:bc:40:ca:26:a4:fa:21:5b:8a:f9:42:c9:4d: c3:5e:8d:e0:41:17:1b:e6:00:f6:b9:cc:5c:c0:0c: 64:78:ad:05:bb:bf:d3:1b:2f:53:75:07:c5:47:50: a6:e8:da:4a:c1:6e:e0:e7:5d:12:ee:2e:bc:40:68: 4b:90:7d:6f:64:48:4d:06:78:b1:d1:3c:37:01:6e: bc:91:78:bc:ad:1b:e2:f9:4e:2c:f4:e9:5a:8e:b3: b4:a9:83:77:9c:c5:1d:f6:e5:55:93:b9:d8:79:e9: 2d:89:b6:6b:79:98:77:a0:ab:db:a0:dd:da:f1:ac: 6c:43:91:64:1b:86:e8:a4:45:f2:fb:22:b2:f9:38: 7e:87:2b:9a:1c:be:a4:94:1d:7c:a3:3a:42:9d:31: e8:17:7f:ec:c0:d5:13:52:f0:87:f2:7b:ea:61:09: 06:76:53:9f:af:c7:8b:0b:65:94:b1:62:93:2d:32: 12:1d:ae:37:85:e6:3c:9d:bd:c9:7a:41:64:fc:92: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C3:54:C3:97:9F:0D:58:21:38:56:9B:08:BC:96:9E:3C:FF:DF:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv4: 208.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:83:a6:b0:7e:68:84:93:f9:a1:fd:bf:08:5f:60:d2:84:08: b6:14:e0:12:bb:6d:2c:5d:92:59:1c:89:cc:73:2a:b1:a8:51: dc:91:61:46:7e:b4:de:5a:63:a7:9c:80:af:6a:37:6f:b9:e7: da:ed:b0:86:6e:c7:90:ed:23:79:b4:82:34:86:a6:e5:a8:de: 41:5e:44:9c:7c:68:02:ca:b3:79:fc:22:e1:e1:71:c9:61:86: b2:98:85:28:21:cb:0b:56:e4:37:6c:77:d6:e3:9f:68:6a:bd: 2a:79:82:71:c7:14:e4:5b:92:64:bd:f7:b9:47:f9:02:4d:e1: 26:ed:71:fc:b7:d4:ba:68:d1:92:1e:de:c8:5d:c2:42:41:d2: 2e:59:a9:96:f9:9b:93:1c:9a:5c:59:d1:e0:89:79:c0:c0:c3: 62:77:1c:49:13:2d:c3:a1:df:5e:68:69:5f:da:ce:5c:ea:98: 71:3e:41:05:b7:83:bc:13:a4:ce:53:83:22:ca:10:67:d3:36: 07:c4:0e:69:f6:6a:ee:95:35:2d:39:8d:58:0c:ef:a8:0c:eb: 8c:32:24:01:0d:3b:6e:43:3c:5c:4a:31:26:e1:cd:42:9f:dc: 63:43:89:d1:a1:91:43:4d:d6:cc:fd:4d:c5:89:c2:77:fd:be: 0e:f9:fa:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlP8cmMNMaHofN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2Q4YjdlNTEtNmFjOS00ZmRmLThlN2QtNmI2M2JiZjUxNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnq8M0pxIUEKJNgW1BRwHBv/QM3F6J68LRVV wRossxvhJMouM3vUxtcjAnyADQBY+3Wmw/bpKV0C9Fu5CLxAyiak+iFbivlCyU3D Xo3gQRcb5gD2ucxcwAxkeK0Fu7/TGy9TdQfFR1Cm6NpKwW7g510S7i68QGhLkH1v ZEhNBnix0Tw3AW68kXi8rRvi+U4s9OlajrO0qYN3nMUd9uVVk7nYeektibZreZh3 oKvboN3a8axsQ5FkG4bopEXy+yKy+Th+hyuaHL6klB18ozpCnTHoF3/swNUTUvCH 8nvqYQkGdlOfr8eLC2WUsWKTLTISHa43heY8nb3JekFk/JJtQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjDVMOXnw1YIThWmwi8lp48/9/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvZDQ0YjczOWUtNDY5My0z ZWZkLThjODItNjdmNzM3MDNiNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6DprB+aIST+aH9vwhfYNKECLYU4BK7bSxdklkcicxzKrGoUdyRYUZ+ tN5aY6ecgK9qN2+559rtsIZux5DtI3m0gjSGpuWo3kFeRJx8aALKs3n8IuHhcclh hrKYhSghywtW5Ddsd9bjn2hqvSp5gnHHFORbkmS997lH+QJN4Sbtcfy31Lpo0ZIe 3shdwkJB0i5ZqZb5m5McmlxZ0eCJecDAw2J3HEkTLcOh315oaV/azlzqmHE+QQW3 g7wTpM5TgyLKEGfTNgfEDmn2au6VNS05jVgM76gM64wyJAENO25DPFxKMSbhzUKf 3GNDidGhkUNN1sz9TcWJwnf9vg75+mk= -----END CERTIFICATE-----Generated at Tue Aug 11 12:20:08 2026 by rpki-client