$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa File: a2212d2b-8250-3896-b964-9c6440e53224.roa (raw, json) Hash identifier: 7WABZztZgR8g4Uu7fxRsT0Gew0W8mST61C47c0/q840= Subject key identifier: 17:AE:D5:3F:52:B3:62:9D:C2:1B:C1:C3:B5:AE:F2:81:74:7B:99:7D Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584EDC91F49B99CC0EE6E5F42980 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 26658 IP address blocks: 172.87.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:f4:9b:99:cc:0e:e6:e5:f4:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=94934ac2-aa71-4137-8052-4b58082cbbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:f5:99:0a:87:6d:5b:62:e0:d1:a8:cc:de: 2b:2a:17:75:4d:b8:87:78:94:24:1c:ae:32:0d:09: 04:c1:24:26:ee:71:39:57:85:fa:25:e2:ed:1b:86: d2:4c:8d:93:d2:e1:94:48:4e:03:99:08:87:ad:3d: ce:4d:c1:09:e9:14:3f:f7:21:22:c1:37:75:1d:23: 46:57:45:77:30:39:fd:4e:ae:37:03:d4:54:ca:91: b9:2b:2c:42:15:98:71:7d:fa:1c:10:89:a7:c8:39: f0:80:db:29:0c:dc:8d:ba:40:bb:f2:04:9b:7b:ea: 09:8e:80:5b:cf:f9:04:da:74:70:23:8d:f5:81:d0: d0:de:29:46:be:11:56:72:7f:67:22:cc:f2:07:ad: c4:0c:bc:20:e2:29:f3:e4:60:c2:9e:52:48:6b:dc: 28:75:51:53:24:65:c1:b7:57:da:8a:23:a4:49:2b: b9:4f:5b:87:94:c1:ac:b4:77:90:88:be:70:be:fd: 01:32:23:29:7b:a5:84:79:94:52:ac:67:f7:d9:b1: c5:61:63:ad:61:bf:21:8f:6e:4d:e0:69:f5:a4:63: 05:d5:26:79:0d:4e:5c:38:75:ee:f5:ee:a6:34:9c: 0e:e6:27:5b:87:bd:f6:3b:6b:8d:69:f9:e6:ea:84: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AE:D5:3F:52:B3:62:9D:C2:1B:C1:C3:B5:AE:F2:81:74:7B:99:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0c:54:4d:14:60:6f:65:5c:06:b0:3e:c6:ae:32:09:06:c5: 37:a4:da:33:66:24:9f:39:43:f6:42:de:73:2b:a7:17:33:7d: a0:37:be:ec:91:61:d5:38:54:3a:3c:a7:13:a4:43:9d:89:f5: fa:ac:d1:8e:96:e9:d5:51:f9:df:c0:ac:39:50:52:28:5d:1f: ba:a3:48:86:41:be:60:72:ce:2f:19:32:91:47:fd:c7:84:98: 0d:aa:7e:fe:6c:af:88:1d:ad:7a:07:53:fd:91:e1:2b:c6:6f: 25:5c:a0:9d:94:2a:86:92:24:df:9d:f0:53:da:ed:55:96:dd: f1:58:7a:8e:7f:ec:13:44:5e:1f:a7:e7:30:63:da:4c:91:77: 4d:6a:6f:ef:15:62:e8:b4:4c:5b:fb:02:8e:4d:31:19:f4:e5: cc:52:0c:e6:14:99:7d:ce:c1:90:93:0a:40:f7:63:d5:4b:7e: ab:0f:e2:06:60:70:77:36:4d:3b:14:fe:bd:72:f4:38:5e:66: ef:26:50:d5:9a:e1:75:ee:cb:d8:c7:89:78:3d:3c:42:d2:32: 0b:93:aa:72:a2:36:c4:e7:e4:1d:1d:e2:33:04:90:0a:61:e5: 70:a7:6b:d5:ea:58:c7:6b:fa:22:0e:a0:d3:84:b3:ea:ca:19: 18:b3:72:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfSbmcwO5uX0KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk OTQ5MzRhYzItYWE3MS00MTM3LTgwNTItNGI1ODA4MmNiYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHr1mQqHbVti4NGozN4rKhd1TbiHeJQkHK4y DQkEwSQm7nE5V4X6JeLtG4bSTI2T0uGUSE4DmQiHrT3OTcEJ6RQ/9yEiwTd1HSNG V0V3MDn9Tq43A9RUypG5KyxCFZhxffocEImnyDnwgNspDNyNukC78gSbe+oJjoBb z/kE2nRwI431gdDQ3ilGvhFWcn9nIszyB63EDLwg4inz5GDCnlJIa9wodVFTJGXB t1faiiOkSSu5T1uHlMGstHeQiL5wvv0BMiMpe6WEeZRSrGf32bHFYWOtYb8hj25N 4Gn1pGMF1SZ5DU5cOHXu9e6mNJwO5idbh732O2uNafnm6oQYKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeu1T9Ss2KdwhvBw7Wu8oF0e5l9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYTIyMTJkMmItODI1MC0z ODk2LWI5NjQtOWM2NDQwZTUzMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8MVE0UYG9lXAawPsauMgkGxTek2jNmJJ85Q/ZC3nMrpxczfaA3vuyR YdU4VDo8pxOkQ52J9fqs0Y6W6dVR+d/ArDlQUihdH7qjSIZBvmByzi8ZMpFH/ceE mA2qfv5sr4gdrXoHU/2R4SvGbyVcoJ2UKoaSJN+d8FPa7VWW3fFYeo5/7BNEXh+n 5zBj2kyRd01qb+8VYui0TFv7Ao5NMRn05cxSDOYUmX3OwZCTCkD3Y9VLfqsP4gZg cHc2TTsU/r1y9DheZu8mUNWa4XXuy9jHiXg9PELSMguTqnKiNsTn5B0d4jMEkAph 5XCna9XqWMdr+iIOoNOEs+rKGRizclc= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:57 2026 by rpki-client