$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a211ebdd-f67a-3a6c-a0c4-ba86a9b877f9.roa File: a211ebdd-f67a-3a6c-a0c4-ba86a9b877f9.roa (raw, json) Hash identifier: Jrwwp1EkZl95wYB2QOgpUx03ybsXSYzYmPCe/d9pY78= Subject key identifier: 37:19:A0:BD:FB:63:05:CA:2E:5F:E7:35:59:EE:6E:72:8B:87:3B:83 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA2320B2FF985242648B740 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a211ebdd-f67a-3a6c-a0c4-ba86a9b877f9.roa Signing time: Sun 19 Jul 2026 18:24:18 +0000 ROA not before: Sun 19 Jul 2026 18:24:18 +0000 ROA not after: Sat 17 Oct 2026 18:24:18 +0000 asID: 11404 IP address blocks: 208.52.0.0/17 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:32:0b:2f:f9:85:24:26:48:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:18 2026 GMT Not After : Oct 17 18:24:18 2026 GMT Subject: CN=392b4f50-dd30-46d0-998b-7095b0930755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:87:c6:82:57:da:b7:2f:18:65:63:d4:2c: fb:e1:8a:fc:20:28:5e:ee:ec:e3:94:25:07:f2:22: 1f:27:98:e4:94:ff:0b:e1:8a:fc:ca:55:82:14:bb: 68:f1:61:28:6d:97:ee:3d:58:58:1b:d0:46:77:e5: 3f:1f:88:5e:f9:45:3f:68:fa:1d:c0:82:0b:6c:a2: f1:52:78:34:a0:1e:ed:9f:70:e4:6b:c0:ea:8a:ac: 6a:98:be:09:8a:82:96:63:1d:ca:5f:9b:c3:20:76: 70:c3:ec:e3:b0:38:36:35:38:22:a0:03:eb:d1:84: 29:1f:cd:cb:fe:08:24:10:f5:f8:db:0c:d8:34:f8: 27:5c:58:a5:e7:a6:ca:e3:33:3e:56:0a:da:2a:ea: 5b:f5:48:5f:78:a3:1e:bc:35:be:10:b0:7d:f3:8c: 4a:8f:6b:fc:18:e2:c0:74:70:61:e7:88:b2:69:73: 20:21:18:af:27:98:a5:1e:b1:72:bb:07:ef:65:33: 42:44:07:a9:c7:ee:92:a2:58:ae:27:cf:12:fc:19: 02:f8:40:b2:29:64:7c:16:b3:0d:f9:c0:9e:9a:e0: 13:6a:5e:df:85:79:8a:0c:47:9e:83:f5:c6:f4:f7: 8d:f2:f3:e8:e7:d6:c9:11:89:96:9b:c7:d0:24:16: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:19:A0:BD:FB:63:05:CA:2E:5F:E7:35:59:EE:6E:72:8B:87:3B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a211ebdd-f67a-3a6c-a0c4-ba86a9b877f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:18:9e:cb:fd:d1:84:5b:da:ae:f1:fe:35:21:f4:43:4f:0a: d6:18:e5:a6:a2:ad:e8:05:21:0f:b1:7d:77:be:60:36:f8:95: 6a:4c:0f:e0:5b:fc:d3:33:fa:30:b1:37:0a:51:cd:83:94:69: 78:50:25:1c:a2:5a:ef:2e:38:64:b4:da:7c:c1:fa:2b:28:77: d4:84:4b:bb:5c:07:3c:0e:2b:f0:84:53:d4:3f:36:48:f3:79: b5:e3:2b:76:9d:ed:23:a4:ce:90:80:9d:bb:c4:bf:43:a8:50: 81:56:8a:4d:ef:6a:7f:51:13:e6:ea:89:08:90:fb:2f:2a:70: 43:54:20:ac:cf:39:23:4d:61:d8:75:9e:a4:ff:87:33:b6:8d: 72:d9:91:dc:60:32:68:98:04:b3:7a:c0:6a:b6:8a:4c:61:2e: 83:8a:8e:e0:6f:be:82:4f:30:1b:14:2f:8f:96:09:e2:32:46: 32:a0:89:82:b1:71:1c:70:a9:84:3e:5a:fc:d7:29:d0:db:dd: d6:15:15:a2:f6:95:10:88:07:35:38:92:df:29:e8:47:20:27: 6c:ba:57:cc:ab:e1:2c:58:9b:4d:e7:df:5d:c5:e3:5b:8e:8b: d3:32:65:77:08:65:ea:d3:7f:bb:9c:11:51:cf:b8:df:4b:99: b6:74:29:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojILL/mFJCZIt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxOFoXDTI2MTAxNzE4MjQxOFowLzEtMCsGA1UEAxMk MzkyYjRmNTAtZGQzMC00NmQwLTk5OGItNzA5NWIwOTMwNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDWHxoJX2rcvGGVj1Cz74Yr8IChe7uzjlCUH 8iIfJ5jklP8L4Yr8ylWCFLto8WEobZfuPVhYG9BGd+U/H4he+UU/aPodwIILbKLx Ung0oB7tn3Dka8DqiqxqmL4JioKWYx3KX5vDIHZww+zjsDg2NTgioAPr0YQpH83L /ggkEPX42wzYNPgnXFil56bK4zM+VgraKupb9UhfeKMevDW+ELB984xKj2v8GOLA dHBh54iyaXMgIRivJ5ilHrFyuwfvZTNCRAepx+6SoliuJ88S/BkC+ECyKWR8FrMN +cCemuATal7fhXmKDEeeg/XG9PeN8vPo59bJEYmWm8fQJBZfGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcZoL37YwXKLl/nNVnubnKLhzuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYTIxMWViZGQtZjY3YS0z YTZjLWEwYzQtYmE4NmE5Yjg3N2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4Ynsv90YRb2q7x/jUh9ENPCtYY5aairegFIQ+xfXe+YDb4lWpMD+Bb /NMz+jCxNwpRzYOUaXhQJRyiWu8uOGS02nzB+isod9SES7tcBzwOK/CEU9Q/Nkjz ebXjK3ad7SOkzpCAnbvEv0OoUIFWik3van9RE+bqiQiQ+y8qcENUIKzPOSNNYdh1 nqT/hzO2jXLZkdxgMmiYBLN6wGq2ikxhLoOKjuBvvoJPMBsUL4+WCeIyRjKgiYKx cRxwqYQ+WvzXKdDb3dYVFaL2lRCIBzU4kt8p6EcgJ2y6V8yr4SxYm03n313F41uO i9MyZXcIZerTf7ucEVHPuN9LmbZ0KQE= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:23 2026 by rpki-client