$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/23d2d37b-9ca2-36be-a3ea-462e448e0309.roa File: 23d2d37b-9ca2-36be-a3ea-462e448e0309.roa (raw, json) Hash identifier: q91bfTsdUIfUVNF0CdfTRXFQ3qfT06Q1n1WzM34Vt3s= Subject key identifier: 16:45:72:C3:6D:4A:8A:75:D6:31:BD:DF:D4:E7:63:B0:96:E2:49:65 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584ECFA85E02AD83A6F14BC54840 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/23d2d37b-9ca2-36be-a3ea-462e448e0309.roa Signing time: Wed 12 Aug 2026 10:00:05 +0000 ROA not before: Wed 12 Aug 2026 10:00:05 +0000 ROA not after: Tue 10 Nov 2026 11:00:05 +0000 asID: 22843 IP address blocks: 208.56.60.0/24 maxlen: 24 208.56.61.0/24 maxlen: 24 208.56.62.0/24 maxlen: 24 208.56.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cf:a8:5e:02:ad:83:a6:f1:4b:c5:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Aug 12 10:00:05 2026 GMT Not After : Nov 10 11:00:05 2026 GMT Subject: CN=2305722d-0b72-4eba-9d67-2d87c6222f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:8a:06:9c:b9:92:b1:32:cb:a7:33:63:e6: cc:73:fe:86:66:68:5b:12:c4:43:d5:d3:4f:b1:6e: 4a:bf:cc:6c:7c:a0:c8:62:f3:72:a0:f2:e9:78:a8: 04:38:97:21:94:90:01:ca:51:20:57:fa:48:85:fd: 9f:eb:29:a8:d8:1f:8e:eb:9c:d9:aa:d9:b3:df:cb: 50:58:d2:34:e5:c6:6f:fc:64:28:7f:c1:58:31:92: c8:a7:60:f4:e3:84:7c:d2:be:e5:58:ee:6a:02:44: b6:35:01:dd:90:66:21:07:3f:9b:c1:b2:8c:6d:cd: 55:a4:01:04:16:e9:d4:be:e8:ec:1a:70:93:e0:9a: 4a:3d:6d:30:dd:35:5e:bb:db:e5:6b:3b:20:86:5b: 3c:d4:92:e4:78:ce:91:48:d7:6e:c7:ef:d8:a1:e4: 7d:77:41:ec:72:98:68:8b:61:86:fc:82:66:8b:1a: 73:79:27:d8:6b:0c:d6:b5:ba:f9:4d:33:61:86:a0: 53:80:d6:c9:f9:03:53:2e:8e:bf:46:08:36:d8:43: ff:c1:5a:8d:49:81:a9:0d:64:17:99:dc:33:64:88: f0:f2:fb:f2:31:8d:7f:e0:f8:9e:af:76:49:af:87: 9a:30:21:44:3f:fa:42:e4:62:7a:a5:ea:3c:d5:d8: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:45:72:C3:6D:4A:8A:75:D6:31:BD:DF:D4:E7:63:B0:96:E2:49:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/23d2d37b-9ca2-36be-a3ea-462e448e0309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f7:1d:8a:22:36:2d:a3:1b:d2:f9:29:78:9b:17:f8:90:bc: 04:95:d7:fa:d9:58:00:fb:ac:e7:a1:57:e5:56:91:b5:6c:d1: 61:a2:cb:13:1d:bc:d6:8b:f4:e8:5c:6a:2c:4e:f8:6c:11:23: ca:68:0d:01:3f:e9:47:1a:ff:b9:d2:99:e0:67:3e:b7:d0:85: 59:f3:70:e9:f9:e5:3d:a1:2e:eb:ce:ae:ce:74:4f:ed:a9:01: 1b:bf:42:39:65:64:68:97:9b:8f:7f:78:00:78:c4:3d:d7:6d: cc:11:e6:0f:88:8e:f4:22:49:ba:fb:d9:a0:13:52:c3:f7:8a: ad:c7:c5:9d:3a:2a:64:aa:bd:0e:4b:d7:bb:a2:45:79:bd:42: 52:3c:59:2d:22:03:a2:03:60:a9:9a:c4:38:09:6e:57:56:e3: da:cd:94:a9:7b:2b:07:81:5d:65:bc:75:a8:e0:9b:8f:25:b7: a9:7e:d2:17:1b:71:1e:18:ca:b7:5a:86:ed:79:ce:93:b2:28: 73:82:8e:74:65:37:d0:dc:11:47:09:36:64:f2:85:ef:7f:c1: 3f:82:58:bc:e3:fb:be:a3:fd:75:c7:aa:75:99:d9:8b:47:cd: 40:29:49:49:7d:a6:88:e8:ed:f5:21:56:63:cb:f0:dc:be:b5: b0:f9:6c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7PqF4CrYOm8UvFSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MDgxMjEwMDAwNVoXDTI2MTExMDExMDAwNVowLzEtMCsGA1UEAxMk MjMwNTcyMmQtMGI3Mi00ZWJhLTlkNjctMmQ4N2M2MjIyZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjOKBpy5krEyy6czY+bMc/6GZmhbEsRD1dNP sW5Kv8xsfKDIYvNyoPLpeKgEOJchlJABylEgV/pIhf2f6ymo2B+O65zZqtmz38tQ WNI05cZv/GQof8FYMZLIp2D044R80r7lWO5qAkS2NQHdkGYhBz+bwbKMbc1VpAEE FunUvujsGnCT4JpKPW0w3TVeu9vlazsghls81JLkeM6RSNdux+/YoeR9d0Hscpho i2GG/IJmixpzeSfYawzWtbr5TTNhhqBTgNbJ+QNTLo6/Rgg22EP/wVqNSYGpDWQX mdwzZIjw8vvyMY1/4Pier3ZJr4eaMCFEP/pC5GJ6peo81dgwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZFcsNtSop11jG939TnY7CW4kllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMjNkMmQzN2ItOWNhMi0z NmJlLWEzZWEtNDYyZTQ0OGUwMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Dg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX3HYoiNi2jG9L5KXibF/iQvASV1/rZWAD7rOehV+VWkbVs0WGiyxMd vNaL9OhcaixO+GwRI8poDQE/6Uca/7nSmeBnPrfQhVnzcOn55T2hLuvOrs50T+2p ARu/QjllZGiXm49/eAB4xD3XbcwR5g+IjvQiSbr72aATUsP3iq3HxZ06KmSqvQ5L 17uiRXm9QlI8WS0iA6IDYKmaxDgJbldW49rNlKl7KweBXWW8dajgm48lt6l+0hcb cR4Yyrdahu15zpOyKHOCjnRlN9DcEUcJNmTyhe9/wT+CWLzj+76j/XXHqnWZ2YtH zUApSUl9pojo7fUhVmPL8Ny+tbD5bEY= -----END CERTIFICATE-----Generated at Sat Sep 5 03:23:23 2026 by rpki-client