$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d43a2bfc-c349-3554-8cdb-14b35e13c20a.roa File: d43a2bfc-c349-3554-8cdb-14b35e13c20a.roa (raw, json) Hash identifier: rRIQg8PMAXGAf7yimgtZGEN5iKnWdugPZkhPqlzwYcU= Subject key identifier: 03:90:E8:A8:65:82:A1:4F:DF:87:C3:C8:D6:04:79:47:9F:99:90:76 Certificate issuer: /CN=d224b810-e5a4-43a2-979c-2e1cb798af38 Certificate serial: 010D0C9F4328584ECD6FC84B5DA14AEC51D71A00 Authority key identifier: 33:77:9D:2F:04:C1:D7:83:B2:EC:B1:BE:01:98:62:45:36:4C:70:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d43a2bfc-c349-3554-8cdb-14b35e13c20a.roa Signing time: Tue 11 Aug 2026 14:54:27 +0000 ROA not before: Tue 11 Aug 2026 14:54:27 +0000 ROA not after: Mon 09 Nov 2026 15:54:27 +0000 asID: 21959 IP address blocks: 208.67.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d224b810-e5a4-43a2-979c-2e1cb798af38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d224b810-e5a4-43a2-979c-2e1cb798af38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:6f:c8:4b:5d:a1:4a:ec:51:d7:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d224b810-e5a4-43a2-979c-2e1cb798af38 Validity Not Before: Aug 11 14:54:27 2026 GMT Not After : Nov 9 15:54:27 2026 GMT Subject: CN=558cc67a-7dd6-4462-9d35-6bbd82319ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:91:00:d8:15:b6:a7:66:38:12:6f:59:f6: 42:f6:f8:0d:fc:40:f9:82:a1:b2:17:86:41:4d:f6: fb:ae:3d:e7:4f:2a:11:46:d0:16:98:53:66:b0:14: 69:40:33:74:f6:f5:99:43:64:2b:0e:aa:57:c1:c1: f9:ea:d1:47:6e:a2:2d:0e:30:0a:ab:18:81:bb:35: 11:fd:b6:f0:8d:0f:fd:b8:79:df:76:21:f6:3c:7b: cc:68:a3:d8:f7:ee:9a:04:23:bc:39:d4:af:c6:88: 35:c8:d5:41:7a:a2:53:36:9e:27:a6:b1:28:4f:9d: 87:8c:1c:ea:6a:77:49:18:d9:60:f3:2b:76:2c:36: b1:5b:b2:ec:75:79:b4:a3:31:e9:4b:e6:b4:86:e9: 37:e1:90:b1:a5:69:95:9f:eb:67:49:ce:c1:b6:32: 37:d1:e5:df:a0:42:7a:86:97:81:f7:dd:07:88:f4: 5d:41:0d:23:4d:87:33:ab:a3:25:ec:ab:03:1b:a8: 79:58:62:ca:a6:b7:fe:1b:96:de:4f:eb:c8:79:9f: 63:55:00:65:c8:5e:2c:c3:89:a1:d3:cc:62:33:4f: 7c:78:65:eb:42:03:18:13:a1:b0:6b:f6:ea:9a:dd: ed:4c:45:ce:b0:a2:ae:35:73:b7:f2:99:9c:0b:c5: f3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:90:E8:A8:65:82:A1:4F:DF:87:C3:C8:D6:04:79:47:9F:99:90:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d43a2bfc-c349-3554-8cdb-14b35e13c20a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38/d224b810-e5a4-43a2-979c-2e1cb798af38.crl X509v3 Authority Key Identifier: keyid:33:77:9D:2F:04:C1:D7:83:B2:EC:B1:BE:01:98:62:45:36:4C:70:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d224b810-e5a4-43a2-979c-2e1cb798af38.cer sbgp-ipAddrBlock: critical IPv4: 208.67.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e8:04:d0:19:eb:57:a1:63:f7:73:46:cf:9a:80:01:12:b6: ce:e2:60:a8:45:59:fa:b5:08:96:e7:28:7b:4e:6f:c5:99:b8: 28:96:b4:db:5f:bd:16:47:9e:e9:0e:f5:a9:ba:b7:d6:16:99: a0:cc:b5:28:75:fe:8c:a2:64:53:8c:c9:82:4f:54:5d:f1:6c: 99:df:10:a1:5c:1b:8f:1d:c2:8c:78:7e:dc:86:11:49:6c:8c: 6c:ec:e1:29:b9:e2:e9:9c:4c:ca:72:b0:35:9f:2b:2a:84:46: a1:6c:90:6b:cf:1a:b0:1e:19:49:96:36:3e:3f:21:08:97:2e: 4e:2b:c2:4d:fa:38:b9:10:d4:60:72:e2:00:62:b1:98:b8:1d: 1c:3f:b4:8e:20:ed:c9:d8:aa:d2:08:1d:16:2b:ce:2f:45:1b: 6e:51:f7:95:c4:44:0d:a2:12:0b:71:e9:14:af:e9:37:ab:b2: b9:0e:98:87:ad:85:66:e5:cc:7f:42:07:ab:e5:90:8f:7a:de: 4d:54:3d:e2:b8:ff:29:20:09:b0:ee:f1:c5:81:02:6d:ec:32: e9:35:8f:77:d1:d3:12:e3:3b:98:32:5f:c4:89:86:46:8f:b0: c6:96:26:23:6b:b2:f0:b9:e2:c2:67:ae:a7:e2:b9:29:c5:ee: 0d:d5:19:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Nb8hLXaFK7FHXGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIyNGI4MTAtZTVhNC00M2EyLTk3OWMtMmUxY2I3OThh ZjM4MB4XDTI2MDgxMTE0NTQyN1oXDTI2MTEwOTE1NTQyN1owLzEtMCsGA1UEAxMk NTU4Y2M2N2EtN2RkNi00NDYyLTlkMzUtNmJiZDgyMzE5ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAWRANgVtqdmOBJvWfZC9vgN/ED5gqGyF4ZB Tfb7rj3nTyoRRtAWmFNmsBRpQDN09vWZQ2QrDqpXwcH56tFHbqItDjAKqxiBuzUR /bbwjQ/9uHnfdiH2PHvMaKPY9+6aBCO8OdSvxog1yNVBeqJTNp4nprEoT52HjBzq andJGNlg8yt2LDaxW7LsdXm0ozHpS+a0huk34ZCxpWmVn+tnSc7BtjI30eXfoEJ6 hpeB990HiPRdQQ0jTYczq6Ml7KsDG6h5WGLKprf+G5beT+vIeZ9jVQBlyF4sw4mh 08xiM098eGXrQgMYE6Gwa/bqmt3tTEXOsKKuNXO38pmcC8XzqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOQ6KhlgqFP34fDyNYEeUefmZB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMjI0 YjgxMC1lNWE0LTQzYTItOTc5Yy0yZTFjYjc5OGFmMzgvZDQzYTJiZmMtYzM0OS0z NTU0LThjZGItMTRiMzVlMTNjMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDIyNGI4MTAtZTVhNC00M2EyLTk3 OWMtMmUxY2I3OThhZjM4L2QyMjRiODEwLWU1YTQtNDNhMi05NzljLTJlMWNiNzk4 YWYzOC5jcmwwHwYDVR0jBBgwFoAUM3edLwTB14Oy7LG+AZhiRTZMcM8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMjI0YjgxMC1lNWE0LTQzYTItOTc5Yy0yZTFj Yjc5OGFmMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/oBNAZ61ehY/dzRs+agAESts7iYKhFWfq1CJbnKHtOb8WZuCiWtNtf vRZHnukO9am6t9YWmaDMtSh1/oyiZFOMyYJPVF3xbJnfEKFcG48dwox4ftyGEUls jGzs4Sm54umcTMpysDWfKyqERqFskGvPGrAeGUmWNj4/IQiXLk4rwk36OLkQ1GBy 4gBisZi4HRw/tI4g7cnYqtIIHRYrzi9FG25R95XERA2iEgtx6RSv6TersrkOmIet hWblzH9CB6vlkI963k1UPeK4/ykgCbDu8cWBAm3sMuk1j3fR0xLjO5gyX8SJhkaP sMaWJiNrsvC54sJnrqfiuSnF7g3VGYc= -----END CERTIFICATE-----Generated at Sat Aug 22 17:56:57 2026 by rpki-client