$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99/7c38add2-d8c4-3d68-910c-46ee0f37b3a6.roa File: 7c38add2-d8c4-3d68-910c-46ee0f37b3a6.roa (raw, json) Hash identifier: e0zVmBOeTcwqjdyji2vlJYRAKvNMr7rV8qqQx5h6WN8= Subject key identifier: B3:B2:C0:A1:07:9E:78:AD:1D:0F:F5:8B:D8:5B:C0:D5:C8:E3:4B:20 Certificate issuer: /CN=2b33829a-0b10-4e9d-b950-478d87ae8a99 Certificate serial: 010D0C9F4328584E33C1696220C54CBEE60E8700 Authority key identifier: 82:BE:F1:21:9C:5E:38:3C:2F:24:4E:D0:BC:68:68:BF:A5:49:22:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99/7c38add2-d8c4-3d68-910c-46ee0f37b3a6.roa Signing time: Wed 17 Jun 2026 13:44:26 +0000 ROA not before: Wed 17 Jun 2026 13:44:26 +0000 ROA not after: Tue 15 Sep 2026 13:44:26 +0000 asID: 402639 IP address blocks: 108.171.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99/2b33829a-0b10-4e9d-b950-478d87ae8a99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99/2b33829a-0b10-4e9d-b950-478d87ae8a99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:33:c1:69:62:20:c5:4c:be:e6:0e:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b33829a-0b10-4e9d-b950-478d87ae8a99 Validity Not Before: Jun 17 13:44:26 2026 GMT Not After : Sep 15 13:44:26 2026 GMT Subject: CN=f0ceaeff-7d09-474c-8bf5-0734d22b68aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:e7:cf:98:6e:75:19:c3:c7:2e:ab:c6:da: 9b:56:d0:5f:76:65:88:af:38:26:30:57:cd:f8:68: 10:58:65:64:b5:86:27:a3:8b:8a:c8:da:8a:d8:e5: 62:6d:63:d1:be:f5:06:2b:d3:32:ba:88:f3:79:9e: f7:f6:81:d1:dc:21:0c:0f:e5:61:db:02:62:45:89: 19:0a:76:07:fe:52:c5:d0:16:d2:a7:36:6e:9d:43: 1b:ce:53:53:10:c0:e3:19:ac:b8:a1:7d:db:0a:e7: 01:03:a9:96:be:f8:09:70:93:df:e6:86:86:b6:b6: b6:68:aa:5c:42:19:fe:67:44:35:b6:60:a5:c3:91: 65:db:85:18:fd:5a:c0:8e:b4:6e:3d:0e:38:4e:a4: f5:ba:c4:67:7a:4d:08:25:79:ec:4f:ea:5d:04:3e: 9f:28:61:41:29:56:8d:35:dc:32:53:4d:da:3b:49: d8:28:bb:12:53:b2:4d:69:4e:24:4b:68:aa:f7:a4: 46:54:ac:4f:0a:87:c2:7a:b0:66:d8:49:8e:de:57: ed:3b:0b:bd:6f:85:4e:86:0e:b9:00:32:e0:35:62: 12:f3:cc:f1:d1:c2:6f:c0:68:08:ab:9d:6c:18:d1: e7:2d:e1:0d:70:ce:69:74:a3:03:0c:eb:d3:2d:9a: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B2:C0:A1:07:9E:78:AD:1D:0F:F5:8B:D8:5B:C0:D5:C8:E3:4B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99/7c38add2-d8c4-3d68-910c-46ee0f37b3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99/2b33829a-0b10-4e9d-b950-478d87ae8a99.crl X509v3 Authority Key Identifier: keyid:82:BE:F1:21:9C:5E:38:3C:2F:24:4E:D0:BC:68:68:BF:A5:49:22:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2b33829a-0b10-4e9d-b950-478d87ae8a99.cer sbgp-ipAddrBlock: critical IPv4: 108.171.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2c:ef:02:25:43:23:2e:00:20:71:09:0b:e6:17:98:a8:6a: d8:ae:a5:51:3a:52:3e:dc:7f:85:e2:48:e8:9b:d5:13:1d:5f: c1:d1:9b:6a:41:ca:9a:9c:27:22:55:18:cc:a4:2c:69:33:1f: 17:47:f5:82:36:65:54:8b:19:42:86:44:b8:3d:d8:a4:7a:aa: 8f:51:d2:e3:7d:6f:dd:37:14:79:46:4c:d8:4b:87:e3:e1:23: a4:bc:f9:9e:9e:20:eb:94:7f:31:ae:7d:e4:2f:53:a4:9a:57: de:51:a5:ac:f1:f4:38:db:6a:45:87:b1:f3:20:15:81:8a:63: 19:1c:67:6d:0e:f6:b2:93:fc:3c:0a:4a:69:30:ce:8a:1f:aa: 2c:93:af:75:e7:19:0b:cc:52:31:80:02:a5:28:59:cb:59:d8: 19:e0:67:32:3d:63:98:a0:80:ef:13:8f:5a:e0:bd:af:9b:13: 39:21:c9:2b:d7:33:eb:c3:40:8d:4b:8b:14:0a:e9:72:c0:f2: 03:30:b3:dd:7f:08:c8:d5:91:e2:9c:c4:44:e6:36:74:ca:de: d4:5b:ea:98:87:a4:b6:7b:02:17:7b:0c:4d:9f:f3:65:dc:e1: be:4a:59:25:bb:65:8f:53:bd:bb:68:7f:11:69:88:ef:82:45: 9a:5e:a4:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4zwWliIMVMvuYOhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzMzgyOWEtMGIxMC00ZTlkLWI5NTAtNDc4ZDg3YWU4 YTk5MB4XDTI2MDYxNzEzNDQyNloXDTI2MDkxNTEzNDQyNlowLzEtMCsGA1UEAxMk ZjBjZWFlZmYtN2QwOS00NzRjLThiZjUtMDczNGQyMmI2OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsvnz5hudRnDxy6rxtqbVtBfdmWIrzgmMFfN +GgQWGVktYYno4uKyNqK2OVibWPRvvUGK9MyuojzeZ739oHR3CEMD+Vh2wJiRYkZ CnYH/lLF0BbSpzZunUMbzlNTEMDjGay4oX3bCucBA6mWvvgJcJPf5oaGtra2aKpc Qhn+Z0Q1tmClw5Fl24UY/VrAjrRuPQ44TqT1usRnek0IJXnsT+pdBD6fKGFBKVaN NdwyU03aO0nYKLsSU7JNaU4kS2iq96RGVKxPCofCerBm2EmO3lftOwu9b4VOhg65 ADLgNWIS88zx0cJvwGgIq51sGNHnLeENcM5pdKMDDOvTLZpr3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOywKEHnnitHQ/1i9hbwNXI40sgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYjMz ODI5YS0wYjEwLTRlOWQtYjk1MC00NzhkODdhZThhOTkvN2MzOGFkZDItZDhjNC0z ZDY4LTkxMGMtNDZlZTBmMzdiM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmIzMzgyOWEtMGIxMC00ZTlkLWI5 NTAtNDc4ZDg3YWU4YTk5LzJiMzM4MjlhLTBiMTAtNGU5ZC1iOTUwLTQ3OGQ4N2Fl OGE5OS5jcmwwHwYDVR0jBBgwFoAUgr7xIZxeODwvJE7QvGhov6VJIiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYjMzODI5YS0wYjEwLTRlOWQtYjk1MC00Nzhk ODdhZThhOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHss7wIlQyMuACBxCQvmF5ioatiupVE6Uj7cf4XiSOib1RMdX8HRm2pB ypqcJyJVGMykLGkzHxdH9YI2ZVSLGUKGRLg92KR6qo9R0uN9b903FHlGTNhLh+Ph I6S8+Z6eIOuUfzGufeQvU6SaV95Rpazx9DjbakWHsfMgFYGKYxkcZ20O9rKT/DwK SmkwzoofqiyTr3XnGQvMUjGAAqUoWctZ2BngZzI9Y5iggO8Tj1rgva+bEzkhySvX M+vDQI1LixQK6XLA8gMws91/CMjVkeKcxETmNnTK3tRb6piHpLZ7Ahd7DE2f82Xc 4b5KWSW7ZY9TvbtofxFpiO+CRZpepMY= -----END CERTIFICATE-----Generated at Mon Jul 6 22:07:04 2026 by rpki-client