$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4220e269-3153-3639-9a41-b923f0a8c2bb.roa File: 4220e269-3153-3639-9a41-b923f0a8c2bb.roa (raw, json) Hash identifier: H4Hof3GkKBxrvHmIf8suwLzKJsKUDFMGtF5DQgy3oGI= Subject key identifier: 74:86:36:39:76:0E:49:97:6B:6E:E1:45:8F:55:E7:D6:D0:F1:B9:35 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA231DC9672E044D92BD680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4220e269-3153-3639-9a41-b923f0a8c2bb.roa Signing time: Sun 19 Jul 2026 18:24:18 +0000 ROA not before: Sun 19 Jul 2026 18:24:18 +0000 ROA not after: Sat 17 Oct 2026 18:24:18 +0000 asID: 11404 IP address blocks: 204.195.0.0/17 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:31:dc:96:72:e0:44:d9:2b:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:18 2026 GMT Not After : Oct 17 18:24:18 2026 GMT Subject: CN=2f4bad00-173f-41c2-b4b2-07922ecec10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:24:ef:a9:2d:e9:38:e0:2e:a2:b9:90:8d: 3b:d9:f1:d5:1c:97:7e:fe:2f:3b:c7:71:79:67:fb: d2:84:28:d6:91:ba:eb:86:2b:08:c7:1d:ff:f7:64: 7b:92:17:38:05:68:e7:61:5c:c7:bb:3a:09:19:ea: 7c:38:55:6f:c9:ce:73:8e:f5:47:d4:ba:67:68:f5: b3:7a:24:e6:5a:99:e4:6c:73:bd:e8:2a:88:07:98: 7a:a4:b1:b6:2a:14:16:23:1d:89:ac:2c:0c:60:b0: 2c:33:47:3b:f6:be:d8:3f:66:1b:65:c0:9c:ac:cf: 27:37:18:4c:42:03:41:40:f9:56:9e:b8:c8:3b:b9: 6b:1f:82:32:76:4b:09:eb:81:7c:7e:36:dc:37:5d: 9b:6e:90:0d:2f:9d:f9:c7:8a:4f:81:9b:9f:11:52: e4:0d:9c:65:a5:a9:65:89:dc:1b:6b:3a:b9:e9:63: 6e:cc:63:81:ec:3a:c3:ec:a4:1a:ad:1c:4a:16:5e: 12:16:b6:03:68:06:72:bd:6a:de:44:b1:59:f0:f1: 63:f7:cf:26:8b:59:6b:80:55:8f:b1:77:78:17:93: 94:18:d9:73:82:69:c1:da:0a:d8:53:7d:5f:e6:4d: 13:6b:5c:ac:8b:c7:fa:7f:ff:39:3b:1d:d4:2b:6c: 79:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:86:36:39:76:0E:49:97:6B:6E:E1:45:8F:55:E7:D6:D0:F1:B9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4220e269-3153-3639-9a41-b923f0a8c2bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5a:cb:6b:40:fc:5c:9f:b4:30:97:68:d8:b0:2e:53:81:f5: e1:62:19:be:6e:cc:76:20:5a:58:dd:5b:e4:5a:36:71:3f:07: 69:f9:2a:14:41:79:b3:18:19:85:60:f6:4e:83:66:fc:5f:25: b3:5d:8d:f6:33:6a:57:bf:7a:8b:9e:34:f9:27:94:da:93:c4: a5:b1:85:3d:ed:18:c1:c8:67:fa:7b:6b:1f:07:2f:c1:b5:f6: 2f:eb:2e:4f:a2:b7:4c:d3:7b:a1:be:8b:72:17:3c:aa:68:c6: 12:0f:0f:12:17:b8:26:fd:ec:dd:76:c7:02:1a:6f:38:36:42: ca:54:4b:0f:81:11:a9:3d:2d:df:24:94:65:1c:8d:09:53:d7: c5:a1:22:d3:ff:ac:6a:f7:1a:46:9b:b4:11:06:87:28:33:ec: 2a:ad:d6:e4:04:10:ee:d2:da:7a:19:dc:e9:38:16:89:b8:2a: 54:76:36:4d:bc:38:a6:bd:7a:00:67:d9:f2:7d:97:f9:b0:a3: 06:df:cc:eb:61:e3:e6:56:10:ae:88:77:59:d9:1d:2f:68:4c: 1f:c6:4c:92:3c:37:31:46:22:d1:dc:c9:0e:01:f8:b7:80:03: 04:26:44:29:88:64:20:2c:af:6a:c3:32:c8:59:af:be:6e:9b: d5:70:87:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojHclnLgRNkr1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxOFoXDTI2MTAxNzE4MjQxOFowLzEtMCsGA1UEAxMk MmY0YmFkMDAtMTczZi00MWMyLWI0YjItMDc5MjJlY2VjMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoogk76kt6TjgLqK5kI072fHVHJd+/i87x3F5 Z/vShCjWkbrrhisIxx3/92R7khc4BWjnYVzHuzoJGep8OFVvyc5zjvVH1LpnaPWz eiTmWpnkbHO96CqIB5h6pLG2KhQWIx2JrCwMYLAsM0c79r7YP2YbZcCcrM8nNxhM QgNBQPlWnrjIO7lrH4IydksJ64F8fjbcN12bbpANL535x4pPgZufEVLkDZxlpall idwbazq56WNuzGOB7DrD7KQarRxKFl4SFrYDaAZyvWreRLFZ8PFj988mi1lrgFWP sXd4F5OUGNlzgmnB2grYU31f5k0Ta1ysi8f6f/85Ox3UK2x5awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSGNjl2DkmXa27hRY9V59bQ8bk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDIyMGUyNjktMzE1My0z NjM5LTlhNDEtYjkyM2YwYThjMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzMMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpay2tA/FyftDCXaNiwLlOB9eFiGb5uzHYgWljdW+RaNnE/B2n5KhRB ebMYGYVg9k6DZvxfJbNdjfYzale/eoueNPknlNqTxKWxhT3tGMHIZ/p7ax8HL8G1 9i/rLk+it0zTe6G+i3IXPKpoxhIPDxIXuCb97N12xwIabzg2QspUSw+BEak9Ld8k lGUcjQlT18WhItP/rGr3GkabtBEGhygz7Cqt1uQEEO7S2noZ3Ok4Fom4KlR2Nk28 OKa9egBn2fJ9l/mwowbfzOth4+ZWEK6Id1nZHS9oTB/GTJI8NzFGItHcyQ4B+LeA AwQmRCmIZCAsr2rDMshZr75um9Vwh2Q= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:25 2026 by rpki-client