$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa File: 2d0193d3-f77e-31d9-a549-a3f230e8d931.roa (raw, json) Hash identifier: tE+Qw1RUFEsndblUR8a8cxU43hrRDNgra+Z3EsZUl1Q= Subject key identifier: AF:FF:00:02:37:C7:BE:6D:23:F6:80:CE:B2:0A:E5:40:3A:1E:86:31 Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f Certificate serial: 010D0C9F4328584E31CF82A17D993C5E1DD7CBC0 Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 9009 IP address blocks: 172.85.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:82:a1:7d:99:3c:5e:1d:d7:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=0735feef-13eb-4224-9557-78d95a0969cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:d6:2a:ed:a5:fe:cb:aa:81:32:ad:d2:06: 39:6a:df:63:44:7f:6b:5e:31:36:29:d0:ce:ca:3c: e4:b9:17:99:02:fb:c8:fe:d8:71:60:35:1c:b0:d0: 15:6e:08:5a:dd:45:2d:a4:b4:41:98:0f:26:07:3e: 7a:2d:fd:7c:d6:8f:c7:4b:02:e6:86:d4:55:b6:24: 59:dd:3a:59:27:b9:1e:1f:4b:c1:03:a1:d1:a6:68: 14:0d:46:17:4c:3c:7c:2a:56:5a:ca:fd:7c:fb:b1: b8:5a:1b:98:44:ff:8d:9d:06:e2:40:ea:2a:67:98: 4d:c0:d1:32:80:aa:5d:16:83:f0:0c:d6:92:9c:34: 84:4b:de:87:c6:0e:8e:7e:73:75:25:f6:7d:52:00: ca:76:9a:d2:5b:ff:0d:12:94:c8:fd:23:5e:79:ea: 75:da:79:76:d3:47:fb:f7:d7:80:9d:e8:e5:5c:39: f5:b4:20:22:7f:42:37:9b:dd:fe:da:d5:18:d9:65: 96:21:13:d9:e8:d6:74:74:dd:f6:cd:e2:a0:eb:ee: 91:6f:b9:e7:9a:7b:46:ac:7e:30:45:14:e2:17:b1: 6f:96:06:f9:60:65:e4:96:c5:e8:0c:1b:f3:47:75: 22:bc:65:ea:cb:81:2f:fd:cf:94:94:37:f4:e9:de: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FF:00:02:37:C7:BE:6D:23:F6:80:CE:B2:0A:E5:40:3A:1E:86:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl X509v3 Authority Key Identifier: keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer sbgp-ipAddrBlock: critical IPv4: 172.85.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:81:13:6d:af:92:0d:1f:1c:ff:88:64:35:c8:e3:a7:80:57: c5:a9:56:72:bd:ed:09:2a:86:a6:4f:d5:b3:1c:48:88:8c:ec: 49:4a:5f:c9:93:25:27:9f:a8:65:5f:84:2e:33:8c:e5:8c:c9: 9b:f8:08:61:66:2a:8d:80:70:a3:86:2e:0e:aa:04:20:68:46: 82:e0:6b:bc:be:a4:1f:c8:06:3c:59:a9:f3:3b:f9:91:8b:cb: 0e:67:84:a6:a2:41:6a:b7:2c:bb:ad:13:be:d3:f8:1c:05:f5: 46:79:7e:4b:fe:fe:51:2c:ea:91:49:10:aa:3b:3b:0e:81:cd: 2b:d0:e7:a8:ec:5b:24:a7:92:9a:83:f6:6b:20:36:7a:d2:80: fb:6a:bd:ce:6e:aa:52:b7:31:27:29:07:2d:58:83:1d:b6:55: 3a:32:c3:30:0b:ce:f5:d0:26:cd:02:da:f2:a9:54:36:2f:4d: 1f:70:f4:22:26:7a:7f:72:66:75:66:3b:42:a2:77:3c:91:fe: aa:22:c9:05:b6:08:c7:b1:b4:e7:df:22:c8:b0:84:6a:3f:57: 9a:12:49:6d:99:b4:e3:5e:b9:6c:b5:40:37:34:5d:40:22:a5: 6e:2c:9a:99:4e:f4:7a:a8:bc:33:fa:ed:8a:3f:66:19:25:c3: e2:41:7a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz4KhfZk8Xh3Xy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1 OTFmMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MDczNWZlZWYtMTNlYi00MjI0LTk1NTctNzhkOTVhMDk2OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS/WKu2l/suqgTKt0gY5at9jRH9rXjE2KdDO yjzkuReZAvvI/thxYDUcsNAVbgha3UUtpLRBmA8mBz56Lf181o/HSwLmhtRVtiRZ 3TpZJ7keH0vBA6HRpmgUDUYXTDx8KlZayv18+7G4WhuYRP+NnQbiQOoqZ5hNwNEy gKpdFoPwDNaSnDSES96Hxg6OfnN1JfZ9UgDKdprSW/8NEpTI/SNeeep12nl200f7 99eAnejlXDn1tCAif0I3m93+2tUY2WWWIRPZ6NZ0dN32zeKg6+6Rb7nnmntGrH4w RRTiF7Fvlgb5YGXklsXoDBvzR3UivGXqy4Ev/c+UlDf06d7YkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK//AAI3x75tI/aAzrIK5UA6HoYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5 OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvMmQwMTkzZDMtZjc3ZS0z MWQ5LWE1NDktYTNmMjMwZThkOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2 NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeBE22vkg0fHP+IZDXI46eAV8WpVnK97QkqhqZP1bMcSIiM7ElKX8mT JSefqGVfhC4zjOWMyZv4CGFmKo2AcKOGLg6qBCBoRoLga7y+pB/IBjxZqfM7+ZGL yw5nhKaiQWq3LLutE77T+BwF9UZ5fkv+/lEs6pFJEKo7Ow6BzSvQ56jsWySnkpqD 9msgNnrSgPtqvc5uqlK3MScpBy1Ygx22VToywzALzvXQJs0C2vKpVDYvTR9w9CIm en9yZnVmO0KidzyR/qoiyQW2CMextOffIsiwhGo/V5oSSW2ZtONeuWy1QDc0XUAi pW4smplO9HqovDP67Yo/Zhklw+JBep8= -----END CERTIFICATE-----Generated at Mon Jul 20 23:43:10 2026 by rpki-client