$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf29e5f3-cd82-359b-9117-28edd38cfa67.roa File: cf29e5f3-cd82-359b-9117-28edd38cfa67.roa (raw, json) Hash identifier: UMqDD0CBxId9Zu2NpXn+EmVZN3GPJVpnhIqZzzS6h8A= Subject key identifier: BD:E5:6A:49:57:46:74:80:BB:10:38:32:F2:74:F9:6B:D3:9E:3E:D6 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA2322284D8CAAFC14C3B00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf29e5f3-cd82-359b-9117-28edd38cfa67.roa Signing time: Sun 19 Jul 2026 18:24:18 +0000 ROA not before: Sun 19 Jul 2026 18:24:18 +0000 ROA not after: Sat 17 Oct 2026 18:24:18 +0000 asID: 11404 IP address blocks: 208.53.96.0/19 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:32:22:84:d8:ca:af:c1:4c:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:18 2026 GMT Not After : Oct 17 18:24:18 2026 GMT Subject: CN=a09fb834-4f0f-4fe2-9b3b-4d9c3bce7acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:e8:1d:b3:b1:ef:5d:eb:29:64:6f:f2:f2: e5:d2:97:18:c8:c6:37:30:f9:f0:6a:6c:86:a7:03: 65:f7:11:c9:fc:89:5a:c7:d9:26:4d:de:49:41:28: 42:01:c8:32:15:97:ee:16:03:e5:31:57:84:3a:7b: 94:d5:35:cd:a3:2a:40:63:9f:53:b8:1d:54:26:be: e4:96:8d:d0:27:87:a7:41:d0:c4:35:af:a8:a6:93: 06:42:4b:f5:09:ef:9b:5e:cf:0a:14:26:f6:d1:9e: d5:b0:73:ba:cb:97:e9:ae:f5:8c:76:bc:26:25:8c: c9:6d:08:d5:ad:49:16:12:69:09:ce:a6:3a:af:ab: a4:57:cf:77:ea:b9:05:e8:63:57:bd:a4:44:cf:70: 0e:8d:bc:ae:e3:b1:30:36:7a:b0:c9:9d:c2:f2:02: eb:86:df:46:f7:a8:19:f7:65:81:74:47:af:d9:10: 82:c0:54:a5:a6:ab:bb:57:8e:42:32:a3:bc:40:1b: f9:18:e3:13:50:cd:f3:74:6b:78:81:91:af:6a:36: 9d:69:b6:e1:21:10:5f:f7:22:f1:9f:1a:f3:f3:fc: 50:74:32:4d:c2:c8:bc:9c:56:ba:73:d2:71:1f:69: 9e:8a:d7:da:d6:ed:6b:20:64:88:71:78:ce:db:35: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:6A:49:57:46:74:80:BB:10:38:32:F2:74:F9:6B:D3:9E:3E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf29e5f3-cd82-359b-9117-28edd38cfa67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.53.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fb:f1:31:d8:6a:c1:40:70:7d:1f:eb:e9:7b:2c:0a:3a:a1: f0:5a:1d:fb:2e:1f:44:07:9f:8f:66:d7:22:f8:42:00:65:d7: 40:67:0f:c1:95:5d:61:08:b3:60:9d:06:aa:69:dc:b5:3f:fb: 46:00:07:5f:fc:58:1d:31:36:17:0d:d6:61:b5:0b:67:76:28: b6:2a:66:6f:9c:71:a8:33:6c:de:fb:bf:05:46:3f:2a:cc:b0: 0e:9f:0a:14:58:ca:f4:83:3c:04:bd:2d:17:3a:2b:63:d5:bb: 00:8e:cf:12:d7:40:dc:49:c3:66:37:0a:9d:6d:76:78:58:e5: 36:7e:8b:eb:c4:95:7c:36:69:89:26:8c:9c:74:3d:13:88:f0: 43:31:76:c9:30:e5:36:58:0e:e3:9d:df:4a:2e:f4:0c:8c:35: 0e:a0:2a:38:5e:6c:74:37:f5:98:ee:bd:a7:c3:20:31:22:dc: 24:c6:9f:d9:1e:88:fa:f5:70:89:29:d5:01:b6:0f:cc:32:03: 57:a8:f6:3b:c9:95:35:b7:48:81:67:aa:54:fc:ac:47:c5:40: a8:b6:aa:8a:1c:16:0f:26:f8:6e:ae:04:9d:8c:0d:43:7e:05: a1:13:f3:0e:66:c5:cc:5a:ac:eb:6c:32:84:ea:41:24:48:ce: cf:e1:ad:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojIihNjKr8FMOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxOFoXDTI2MTAxNzE4MjQxOFowLzEtMCsGA1UEAxMk YTA5ZmI4MzQtNGYwZi00ZmUyLTliM2ItNGQ5YzNiY2U3YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKLoHbOx713rKWRv8vLl0pcYyMY3MPnwamyG pwNl9xHJ/Ilax9kmTd5JQShCAcgyFZfuFgPlMVeEOnuU1TXNoypAY59TuB1UJr7k lo3QJ4enQdDENa+oppMGQkv1Ce+bXs8KFCb20Z7VsHO6y5fprvWMdrwmJYzJbQjV rUkWEmkJzqY6r6ukV8936rkF6GNXvaREz3AOjbyu47EwNnqwyZ3C8gLrht9G96gZ 92WBdEev2RCCwFSlpqu7V45CMqO8QBv5GOMTUM3zdGt4gZGvajadabbhIRBf9yLx nxrz8/xQdDJNwsi8nFa6c9JxH2meitfa1u1rIGSIcXjO2zUN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3laklXRnSAuxA4MvJ0+WvTnj7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2YyOWU1ZjMtY2Q4Mi0z NTliLTkxMTctMjhlZGQzOGNmYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr78THYasFAcH0f6+l7LAo6ofBaHfsuH0QHn49m1yL4QgBl10BnD8GV XWEIs2CdBqpp3LU/+0YAB1/8WB0xNhcN1mG1C2d2KLYqZm+ccagzbN77vwVGPyrM sA6fChRYyvSDPAS9LRc6K2PVuwCOzxLXQNxJw2Y3Cp1tdnhY5TZ+i+vElXw2aYkm jJx0PROI8EMxdskw5TZYDuOd30ou9AyMNQ6gKjhebHQ39ZjuvafDIDEi3CTGn9ke iPr1cIkp1QG2D8wyA1eo9jvJlTW3SIFnqlT8rEfFQKi2qoocFg8m+G6uBJ2MDUN+ BaET8w5mxcxarOtsMoTqQSRIzs/hrb8= -----END CERTIFICATE-----Generated at Tue Jul 21 22:36:50 2026 by rpki-client