$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/4cc938f9-89af-3b86-8e0e-b60932c80540.roa File: 4cc938f9-89af-3b86-8e0e-b60932c80540.roa (raw, json) Hash identifier: W3NQ4dysti6WJU0QY2E/WJxPnnwsBmBLo1nU14TSSXc= Subject key identifier: 01:D1:71:A3:F7:B8:D7:A5:F2:E6:6A:74:F8:6C:23:C8:5D:F1:39:56 Certificate issuer: /CN=d224b810-e5a4-43a2-979c-2e1cb798af38 Certificate serial: 010D0C9F4328584ECD70B6E4934D4DD70A5763C0 Authority key identifier: 33:77:9D:2F:04:C1:D7:83:B2:EC:B1:BE:01:98:62:45:36:4C:70:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/4cc938f9-89af-3b86-8e0e-b60932c80540.roa Signing time: Tue 11 Aug 2026 14:56:20 +0000 ROA not before: Tue 11 Aug 2026 14:56:20 +0000 ROA not after: Mon 09 Nov 2026 15:56:20 +0000 asID: 21959 IP address blocks: 208.67.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d224b810-e5a4-43a2-979c-2e1cb798af38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d224b810-e5a4-43a2-979c-2e1cb798af38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:70:b6:e4:93:4d:4d:d7:0a:57:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d224b810-e5a4-43a2-979c-2e1cb798af38 Validity Not Before: Aug 11 14:56:20 2026 GMT Not After : Nov 9 15:56:20 2026 GMT Subject: CN=0e65269c-c53d-4171-9ce3-519e3c3c25f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:51:bc:85:82:6f:a3:af:77:86:a9:42:41: 47:07:df:d3:95:6f:50:b6:68:96:ec:16:54:c5:16: d7:87:a9:e8:9a:a2:b0:61:44:f4:09:e2:d7:15:ae: 96:c9:4c:57:6d:c8:99:ea:93:0d:31:9d:dd:1a:2f: 7a:7a:c1:51:a9:6e:9f:f3:49:c7:7a:33:1d:6a:cd: 39:d2:b5:a6:26:2b:49:ec:52:0b:75:a8:bc:41:e5: 47:80:1a:64:cb:52:64:0e:90:84:2c:97:59:20:5d: 88:f7:f2:a1:a3:7f:70:5c:a9:69:53:cb:ac:66:0a: 54:ba:c6:e3:bb:60:93:8e:6f:54:99:40:66:dc:19: b4:57:6c:be:54:ef:76:57:d5:2c:4a:61:00:91:7c: 81:92:5b:97:9f:79:45:b8:58:c3:42:3c:16:46:08: 3a:90:ef:e7:e4:40:cb:c7:47:a4:48:7a:72:48:5c: cd:b8:ab:e4:0e:ac:0f:f1:e2:b6:6b:21:fc:a7:47: 81:07:f0:e0:fe:88:a0:a6:a0:11:20:ad:ea:50:45: 41:c0:e3:5e:8a:12:86:08:ce:21:ee:ee:23:35:91: 69:a5:b6:63:f2:06:f3:d8:bc:b8:b8:10:ee:1d:c5: cd:98:cf:10:b8:c7:71:a4:9d:74:3e:4b:dd:65:35: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:71:A3:F7:B8:D7:A5:F2:E6:6A:74:F8:6C:23:C8:5D:F1:39:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/4cc938f9-89af-3b86-8e0e-b60932c80540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d224b810-e5a4-43a2-979c-2e1cb798af38.crl X509v3 Authority Key Identifier: keyid:33:77:9D:2F:04:C1:D7:83:B2:EC:B1:BE:01:98:62:45:36:4C:70:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38.cer sbgp-ipAddrBlock: critical IPv4: 208.67.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e5:82:60:33:66:73:16:e9:4c:19:f3:d6:18:ba:43:f1:30: 0f:83:20:68:0f:05:66:0c:45:5d:43:e0:49:ba:d4:e4:34:d6: 47:85:3d:b3:e1:3d:e2:4e:29:8d:f9:cf:c4:5b:36:84:41:8e: 4a:e1:c9:bd:08:8c:e7:19:bd:8a:9d:82:1d:a2:f4:cc:0d:49: 3a:cf:66:1a:99:9a:f2:f0:39:f5:8e:8e:6b:6b:b0:d2:6f:31: 89:8c:af:cd:88:6e:19:2a:72:a8:fd:cd:6a:e3:98:7a:51:57: 2b:1d:5d:cc:76:ba:81:2b:d8:57:b5:87:45:4b:e9:17:56:91: 87:3f:7d:bc:52:96:32:00:2d:cb:cc:66:d9:64:24:4e:bd:7d: d2:2c:08:cd:28:c1:92:05:65:69:b8:28:ea:37:60:07:d7:32: 41:20:90:11:66:38:f3:59:c5:6a:86:68:f3:5b:47:22:5b:1f: e5:0f:26:fc:f0:9e:60:25:1c:05:9f:99:97:de:84:c5:42:ae: f2:64:49:8e:5d:59:44:aa:23:f1:83:e4:a3:39:1e:26:87:3d: 01:ea:c7:df:6c:83:25:ec:08:5f:29:3e:2f:68:ce:8e:bf:e6: 3c:96:b5:5c:e5:4e:9b:9e:81:d3:4e:32:af:15:7d:a7:33:66: 1e:ce:46:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NcLbkk01N1wpXY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIyNGI4MTAtZTVhNC00M2EyLTk3OWMtMmUxY2I3OThh ZjM4MB4XDTI2MDgxMTE0NTYyMFoXDTI2MTEwOTE1NTYyMFowLzEtMCsGA1UEAxMk MGU2NTI2OWMtYzUzZC00MTcxLTljZTMtNTE5ZTNjM2MyNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJFRvIWCb6Ovd4apQkFHB9/TlW9QtmiW7BZU xRbXh6nomqKwYUT0CeLXFa6WyUxXbciZ6pMNMZ3dGi96esFRqW6f80nHejMdas05 0rWmJitJ7FILdai8QeVHgBpky1JkDpCELJdZIF2I9/Kho39wXKlpU8usZgpUusbj u2CTjm9UmUBm3Bm0V2y+VO92V9UsSmEAkXyBkluXn3lFuFjDQjwWRgg6kO/n5EDL x0ekSHpySFzNuKvkDqwP8eK2ayH8p0eBB/Dg/oigpqARIK3qUEVBwONeihKGCM4h 7u4jNZFppbZj8gbz2Ly4uBDuHcXNmM8QuMdxpJ10PkvdZTVOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHRcaP3uNel8uZqdPhsI8hd8TlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMjI0 YjgxMC1lNWE0LTQzYTItOTc5Yy0yZTFjYjc5OGFmMzgvNGNjOTM4ZjktODlhZi0z Yjg2LThlMGUtYjYwOTMyYzgwNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDIyNGI4MTAtZTVhNC00M2EyLTk3 OWMtMmUxY2I3OThhZjM4L2QyMjRiODEwLWU1YTQtNDNhMi05NzljLTJlMWNiNzk4 YWYzOC5jcmwwHwYDVR0jBBgwFoAUM3edLwTB14Oy7LG+AZhiRTZMcM8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMjI0YjgxMC1lNWE0LTQzYTItOTc5Yy0yZTFj Yjc5OGFmMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnlgmAzZnMW6UwZ89YYukPxMA+DIGgPBWYMRV1D4Em61OQ01keFPbPh PeJOKY35z8RbNoRBjkrhyb0IjOcZvYqdgh2i9MwNSTrPZhqZmvLwOfWOjmtrsNJv MYmMr82Ibhkqcqj9zWrjmHpRVysdXcx2uoEr2Fe1h0VL6RdWkYc/fbxSljIALcvM ZtlkJE69fdIsCM0owZIFZWm4KOo3YAfXMkEgkBFmOPNZxWqGaPNbRyJbH+UPJvzw nmAlHAWfmZfehMVCrvJkSY5dWUSqI/GD5KM5HiaHPQHqx99sgyXsCF8pPi9ozo6/ 5jyWtVzlTpuegdNOMq8VfaczZh7ORjs= -----END CERTIFICATE-----Generated at Sat Aug 22 17:57:07 2026 by rpki-client