$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ca51871b-ee5d-3d35-a9d5-c84e47ddcd0b.roa File: ca51871b-ee5d-3d35-a9d5-c84e47ddcd0b.roa (raw, json) Hash identifier: hDkB8RJ0+Ko2rB3htLQ6RuJ92WrUJzbwxcleyR04JoM= Subject key identifier: D5:79:3F:0B:94:5E:7E:28:20:C0:64:76:74:0D:48:8E:99:17:7A:D8 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF3CBC1D66814F783BD49CC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ca51871b-ee5d-3d35-a9d5-c84e47ddcd0b.roa Signing time: Thu 06 Aug 2026 12:50:17 +0000 ROA not before: Thu 06 Aug 2026 12:50:17 +0000 ROA not after: Wed 04 Nov 2026 13:50:17 +0000 asID: 396362 IP address blocks: 173.208.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:3c:bc:1d:66:81:4f:78:3b:d4:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 12:50:17 2026 GMT Not After : Nov 4 13:50:17 2026 GMT Subject: CN=5fea1951-ad82-4ee2-8bb1-4c7320798fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fb:05:3f:3a:c3:d9:8f:90:19:3d:49:84:6e: 3a:c2:92:0a:68:5f:45:d0:d8:b8:e9:7b:a8:2e:4e: 0b:cb:0e:08:6b:53:f6:51:0a:ad:30:d4:bf:78:a9: 51:29:bd:a2:a5:48:dc:a1:01:53:f4:e7:80:56:3f: f8:39:20:a2:4c:41:63:3a:26:a9:88:d4:39:48:3d: 85:2b:ef:af:5b:3b:f5:07:2f:a9:01:76:66:6e:30: 4d:f0:59:44:d3:4c:58:a0:ea:2c:db:7f:0f:e5:a0: c2:e6:46:1d:f0:01:4b:72:f9:74:78:e2:61:20:68: 2c:8d:ea:40:d7:b0:a6:37:58:fe:a7:fd:ea:ec:e4: 55:83:fc:2d:4a:c2:87:47:b8:e3:a5:3a:45:bd:72: 82:20:99:d2:e1:7f:1b:f4:f6:d3:24:d7:05:de:7c: 8f:6f:13:e7:9f:71:22:79:8c:d2:53:fe:6a:a3:28: 8d:08:41:cc:36:c6:6a:dd:b5:77:a9:96:e0:26:aa: 40:42:7d:1a:3a:91:84:d1:d0:f9:fc:c2:d9:ed:50: de:5f:1b:a2:5b:f3:27:c0:c9:8e:62:dd:6b:59:c8: c7:0a:82:5d:8b:e4:47:b2:56:f7:ef:c5:09:83:db: 22:3c:b1:d8:ad:a2:68:88:cf:b1:c9:fa:c7:b5:f7: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:79:3F:0B:94:5E:7E:28:20:C0:64:76:74:0D:48:8E:99:17:7A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ca51871b-ee5d-3d35-a9d5-c84e47ddcd0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.208.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f4:4e:23:48:24:5b:f0:48:61:34:a2:02:72:63:16:a8:c0: a0:17:1e:3f:17:70:f5:df:50:0c:7c:7a:14:7a:56:3a:4d:9d: 2a:55:0c:cf:24:37:e9:72:c8:24:5a:4b:46:e4:5d:57:b7:17: bc:fb:89:a4:ce:58:25:af:ad:ed:4d:fd:cd:85:3b:da:b1:f1: 4c:27:70:a6:e3:58:f0:c7:47:02:bf:97:9e:65:53:63:ef:d7: a9:e8:4d:42:1c:18:ee:68:50:09:11:39:1a:c0:ba:5e:99:54: ea:76:33:48:9e:b0:a2:87:3c:9a:2b:36:61:67:fe:bb:b0:ff: 29:6c:2c:29:b3:ec:a9:05:9b:5a:02:33:dd:03:f7:9b:cb:c2: 78:50:f7:88:85:d7:fd:dd:00:60:1e:e7:c3:79:05:8b:78:db: 08:ff:61:8d:ac:c6:ff:e3:e3:46:57:ab:d2:6f:24:90:1a:99: f0:bf:14:50:49:ae:0a:d2:de:d3:c0:c1:60:1a:2e:2b:1a:79: 1e:19:40:d4:4c:f9:73:f1:97:c2:7b:88:fb:24:85:6e:06:50: 8e:de:7c:c7:e0:0f:4d:e7:82:a6:01:95:80:8f:47:53:93:1f: ab:67:a2:81:b5:75:1c:50:41:83:65:56:c7:91:eb:e6:ed:3c: 11:60:a8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/PLwdZoFPeDvUnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjEyNTAxN1oXDTI2MTEwNDEzNTAxN1owLzEtMCsGA1UEAxMk NWZlYTE5NTEtYWQ4Mi00ZWUyLThiYjEtNGM3MzIwNzk4ZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvsFPzrD2Y+QGT1JhG46wpIKaF9F0Ni46Xuo Lk4Lyw4Ia1P2UQqtMNS/eKlRKb2ipUjcoQFT9OeAVj/4OSCiTEFjOiapiNQ5SD2F K++vWzv1By+pAXZmbjBN8FlE00xYoOos238P5aDC5kYd8AFLcvl0eOJhIGgsjepA 17CmN1j+p/3q7ORVg/wtSsKHR7jjpTpFvXKCIJnS4X8b9PbTJNcF3nyPbxPnn3Ei eYzSU/5qoyiNCEHMNsZq3bV3qZbgJqpAQn0aOpGE0dD5/MLZ7VDeXxuiW/MnwMmO Yt1rWcjHCoJdi+RHslb378UJg9siPLHYraJoiM+xyfrHtffshwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV5PwuUXn4oIMBkdnQNSI6ZF3rYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2E1MTg3MWItZWU1ZC0z ZDM1LWE5ZDUtYzg0ZTQ3ZGRjZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB30TiNIJFvwSGE0ogJyYxaowKAXHj8XcPXfUAx8ehR6VjpNnSpVDM8k N+lyyCRaS0bkXVe3F7z7iaTOWCWvre1N/c2FO9qx8UwncKbjWPDHRwK/l55lU2Pv 16noTUIcGO5oUAkRORrAul6ZVOp2M0iesKKHPJorNmFn/ruw/ylsLCmz7KkFm1oC M90D95vLwnhQ94iF1/3dAGAe58N5BYt42wj/YY2sxv/j40ZXq9JvJJAamfC/FFBJ rgrS3tPAwWAaLisaeR4ZQNRM+XPxl8J7iPskhW4GUI7efMfgD03ngqYBlYCPR1OT H6tnooG1dRxQQYNlVseR6+btPBFgqJA= -----END CERTIFICATE-----Generated at Fri Aug 14 14:14:09 2026 by rpki-client