$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/c3e8a232-bbc6-3071-b693-fdea9dec9228.roa File: c3e8a232-bbc6-3071-b693-fdea9dec9228.roa (raw, json) Hash identifier: F8esM62H9LRuTg4DPvUBexcXJL+SThRHLvCQR08PHCs= Subject key identifier: A5:37:B9:7E:57:24:E7:57:B2:26:5B:4E:65:89:A1:67:27:89:11:92 Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Certificate serial: 010D0C9F4328584EC1063354A2E7B4AF3CF500C0 Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/c3e8a232-bbc6-3071-b693-fdea9dec9228.roa Signing time: Fri 07 Aug 2026 04:12:01 +0000 ROA not before: Fri 07 Aug 2026 04:12:01 +0000 ROA not after: Thu 05 Nov 2026 05:12:01 +0000 asID: 394177 IP address blocks: 216.109.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c1:06:33:54:a2:e7:b4:af:3c:f5:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c Validity Not Before: Aug 7 04:12:01 2026 GMT Not After : Nov 5 05:12:01 2026 GMT Subject: CN=ad04eb01-6607-47f0-ac3f-b5bf149a82bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:e2:b7:32:1a:0e:02:ae:d5:6b:c1:b4:9a: 6f:84:ea:aa:9b:85:67:43:67:87:80:a3:e7:41:61: 93:74:68:65:26:67:13:ad:f5:39:13:30:9c:f9:70: 84:7b:ae:23:9d:9a:1f:bc:00:87:f2:c0:d5:1e:b2: 88:01:22:9f:5a:02:a5:40:ef:e3:ec:35:43:41:5e: 3f:ae:24:b6:57:41:a9:16:cd:0b:ab:28:96:5e:d1: 49:42:62:06:73:9d:57:b0:cf:d8:31:70:ad:3b:42: 10:88:ba:e4:12:60:9c:5b:88:38:3f:63:e3:8d:3e: 38:33:42:68:86:3f:52:ba:4c:87:9b:90:49:cc:32: 84:f4:b0:ae:e9:96:d1:ee:ee:da:90:29:20:68:58: 1c:4b:a8:22:71:91:eb:81:21:ad:79:7f:59:2a:46: 91:fd:05:04:74:25:7b:f2:38:68:de:c6:43:2a:d1: 61:f0:2c:fc:14:ba:f8:e5:6a:36:75:f9:a4:ba:77: 98:fd:69:c2:0c:e8:9b:81:78:67:de:da:6c:14:be: f8:eb:3e:89:5f:54:1a:37:9b:68:cd:7c:48:9d:35: 67:32:0e:9d:c1:85:28:61:fb:de:77:19:2b:cb:6a: ea:f3:0c:64:43:08:bd:e9:04:2a:3e:5e:67:93:7f: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:37:B9:7E:57:24:E7:57:B2:26:5B:4E:65:89:A1:67:27:89:11:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/c3e8a232-bbc6-3071-b693-fdea9dec9228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl X509v3 Authority Key Identifier: keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer sbgp-ipAddrBlock: critical IPv4: 216.109.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e9:7c:5b:8e:76:56:02:63:76:27:36:a2:a6:34:9a:60:37: fa:f8:56:e6:1e:3b:70:5f:1a:ef:45:59:4a:19:01:97:0f:00: 48:46:84:90:b1:f6:cf:1f:3b:16:70:53:ac:d5:9e:04:f9:e4: 14:8e:db:3a:16:0d:4c:47:fb:68:c3:c7:4d:d6:06:c4:9e:62: 77:66:9d:2d:74:16:fd:73:f2:1c:7d:b2:3c:03:9d:a0:6e:c5: df:73:8a:dd:c2:1a:51:02:bd:01:b7:7a:ee:54:25:a6:a9:68: 43:fa:8e:b9:91:6e:57:ec:3f:7e:cb:7b:7e:7b:c5:a1:89:77: 9f:57:da:3b:80:a6:ac:93:31:29:60:03:45:98:8c:79:75:26: aa:ea:b7:fc:c8:31:bd:3e:c7:89:76:a4:92:d7:08:9d:ed:e4: da:16:ab:f4:b4:5c:66:e9:6d:f5:cb:6c:45:e4:11:f5:eb:00: b8:3a:37:1b:6a:5a:3f:ee:96:4f:39:b5:41:e8:67:ab:ad:6a: 69:30:c1:57:e1:98:be:76:34:72:06:17:44:a9:ea:29:25:33: 74:77:b3:5c:db:41:e5:5c:c9:74:1a:34:f4:92:de:75:a4:48: af:50:ef:0f:31:81:87:3c:8e:32:56:1d:54:99:62:b7:30:24: 6b:b7:b8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7BBjNUoue0rzz1AMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4 ZTljMB4XDTI2MDgwNzA0MTIwMVoXDTI2MTEwNTA1MTIwMVowLzEtMCsGA1UEAxMk YWQwNGViMDEtNjYwNy00N2YwLWFjM2YtYjViZjE0OWE4MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPitzIaDgKu1WvBtJpvhOqqm4VnQ2eHgKPn QWGTdGhlJmcTrfU5EzCc+XCEe64jnZofvACH8sDVHrKIASKfWgKlQO/j7DVDQV4/ riS2V0GpFs0LqyiWXtFJQmIGc51XsM/YMXCtO0IQiLrkEmCcW4g4P2PjjT44M0Jo hj9SukyHm5BJzDKE9LCu6ZbR7u7akCkgaFgcS6gicZHrgSGteX9ZKkaR/QUEdCV7 8jho3sZDKtFh8Cz8FLr45Wo2dfmkuneY/WnCDOibgXhn3tpsFL746z6JX1QaN5to zXxInTVnMg6dwYUoYfvedxkry2rq8wxkQwi96QQqPl5nk3/WIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU3uX5XJOdXsiZbTmWJoWcniRGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3 ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvYzNlOGEyMzItYmJjNi0z MDcxLWI2OTMtZmRlYTlkZWM5MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4 YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1 YzZmMDhlOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2G2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/pfFuOdlYCY3YnNqKmNJpgN/r4VuYeO3BfGu9FWUoZAZcPAEhGhJCx 9s8fOxZwU6zVngT55BSO2zoWDUxH+2jDx03WBsSeYndmnS10Fv1z8hx9sjwDnaBu xd9zit3CGlECvQG3eu5UJaapaEP6jrmRblfsP37Le357xaGJd59X2juApqyTMSlg A0WYjHl1Jqrqt/zIMb0+x4l2pJLXCJ3t5NoWq/S0XGbpbfXLbEXkEfXrALg6Nxtq Wj/ulk85tUHoZ6utamkwwVfhmL52NHIGF0Sp6iklM3R3s1zbQeVcyXQaNPSS3nWk SK9Q7w8xgYc8jjJWHVSZYrcwJGu3uBE= -----END CERTIFICATE-----Generated at Tue Aug 11 11:45:22 2026 by rpki-client