$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21dde04a-e4b4-3f31-baf7-4da511309ec2.roa File: 21dde04a-e4b4-3f31-baf7-4da511309ec2.roa (raw, json) Hash identifier: 4+A6XUzLbc4TxlRpGH8lI7lmEh3DyvO5B/Ts8gI2wE4= Subject key identifier: 25:11:BF:C8:E6:D8:A3:40:9C:0B:00:66:03:78:5F:AB:9D:AF:D1:B3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584E3FC486C6C0775C8C2BBE7580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21dde04a-e4b4-3f31-baf7-4da511309ec2.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 396982 IP address blocks: 8.231.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:86:c6:c0:77:5c:8c:2b:be:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=d3681868-ee4d-46b5-9b19-4fc666bf00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:b0:23:10:6e:29:c3:39:6b:44:0d:5e:70: 21:72:c5:aa:0e:1b:df:87:50:95:ec:5d:64:38:42: e0:60:f2:08:31:67:6e:b1:55:5b:d2:98:16:d4:02: 41:68:11:5f:95:63:ba:44:78:37:59:72:6c:14:4a: 93:ec:7c:12:89:fb:33:39:60:99:f7:7e:07:73:ef: 9c:cf:ca:15:ef:38:26:5a:91:56:b7:21:77:15:2c: c9:b3:97:e9:d4:c6:50:49:13:d9:ba:40:5d:ad:0a: da:1c:5a:56:87:da:82:f8:b4:81:10:ba:5b:81:c0: d6:5a:0a:28:11:3d:70:4a:5b:f4:0f:a5:f2:c3:2d: a1:d7:5a:82:5d:fc:65:c8:dd:11:fa:f9:d0:0b:4a: 6e:ae:31:91:da:28:e8:63:8f:ac:41:fa:6c:5d:9b: c0:a7:25:50:ea:de:3f:79:24:23:d7:cb:01:5e:0e: da:4f:8f:b9:7e:4b:20:b9:0d:cb:b5:5c:fb:b4:4b: aa:87:84:d9:5f:86:96:53:08:8a:9a:ff:aa:83:1d: c5:d5:ae:a5:8e:e9:52:ed:ff:9a:31:35:ad:ba:f2: 97:ea:22:a6:52:2d:9f:e7:d7:a0:eb:c3:f0:c1:4d: ca:4b:09:1f:dd:cd:ed:09:fe:66:c9:07:2b:5e:ee: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:11:BF:C8:E6:D8:A3:40:9C:0B:00:66:03:78:5F:AB:9D:AF:D1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21dde04a-e4b4-3f31-baf7-4da511309ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 8.231.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:2f:cd:fb:8d:01:8e:03:a8:b0:c3:f8:e0:1c:22:94:71:71: ba:35:f9:d5:76:15:e3:7c:ef:ed:de:45:5b:ba:71:16:a7:75: 98:1b:8d:55:99:d3:c9:ff:79:02:f4:5e:95:43:d9:88:06:71: 6b:16:f3:0b:36:83:95:50:f1:ec:df:aa:53:91:a0:81:61:31: 28:a6:5d:c8:cf:82:cb:78:b4:41:50:bf:73:80:be:1e:bc:0b: 6e:57:d9:90:ff:c6:06:fe:1a:74:f7:3d:f7:23:66:09:71:4d: d9:74:81:fd:78:f1:7b:00:2b:1f:66:d3:e6:c8:b2:33:24:5a: c3:9e:13:97:a9:f3:42:c0:95:79:78:3b:eb:66:cb:2e:b9:95: 9d:b0:9f:06:f0:ad:3c:24:55:e7:64:35:92:fb:98:fc:0a:59: 49:12:7c:de:fb:70:a7:35:04:51:d6:cc:6f:0b:56:26:39:b9: 0a:2a:5c:0d:1f:55:12:16:1c:e3:56:e8:e4:6c:e9:fa:ff:35: fd:e3:a9:1f:af:92:d8:b9:1e:44:dd:11:e6:9c:1a:f7:52:67: 3c:86:99:89:f8:7b:59:12:df:3d:e6:34:4f:32:c0:db:8a:1c: a7:ab:db:06:72:fd:40:b7:8b:a6:69:37:f5:67:5b:48:5b:94: 3d:73:b0:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xIbGwHdcjCu+dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk ZDM2ODE4NjgtZWU0ZC00NmI1LTliMTktNGZjNjY2YmYwMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp6wIxBuKcM5a0QNXnAhcsWqDhvfh1CV7F1k OELgYPIIMWdusVVb0pgW1AJBaBFflWO6RHg3WXJsFEqT7HwSifszOWCZ934Hc++c z8oV7zgmWpFWtyF3FSzJs5fp1MZQSRPZukBdrQraHFpWh9qC+LSBELpbgcDWWgoo ET1wSlv0D6Xywy2h11qCXfxlyN0R+vnQC0purjGR2ijoY4+sQfpsXZvApyVQ6t4/ eSQj18sBXg7aT4+5fksguQ3LtVz7tEuqh4TZX4aWUwiKmv+qgx3F1a6ljulS7f+a MTWtuvKX6iKmUi2f59eg68PwwU3KSwkf3c3tCf5myQcrXu6iUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCURv8jm2KNAnAsAZgN4X6udr9GzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjFkZGUwNGEtZTRiNC0z ZjMxLWJhZjctNGRhNTExMzA5ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECOcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwvzfuNAY4DqLDD+OAcIpRxcbo1+dV2FeN87+3eRVu6cRandZgbjVWZ 08n/eQL0XpVD2YgGcWsW8ws2g5VQ8ezfqlORoIFhMSimXcjPgst4tEFQv3OAvh68 C25X2ZD/xgb+GnT3PfcjZglxTdl0gf148XsAKx9m0+bIsjMkWsOeE5ep80LAlXl4 O+tmyy65lZ2wnwbwrTwkVedkNZL7mPwKWUkSfN77cKc1BFHWzG8LViY5uQoqXA0f VRIWHONW6ORs6fr/Nf3jqR+vkti5HkTdEeacGvdSZzyGmYn4e1kS3z3mNE8ywNuK HKer2wZy/UC3i6ZpN/VnW0hblD1zsJM= -----END CERTIFICATE-----Generated at Wed Jul 8 17:35:08 2026 by rpki-client