$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/9f8c8b39-bedc-337b-a368-65b1cbd2cf3e.roa File: 9f8c8b39-bedc-337b-a368-65b1cbd2cf3e.roa (raw, json) Hash identifier: 8hApPHazYjKQzq5MDhkCZbLr7j7edrXi4TjlKaWKZLY= Subject key identifier: 72:96:71:20:0F:41:01:FC:3E:F4:CF:62:C9:ED:4F:5D:C6:A4:40:55 Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c Certificate serial: 010D0C9F4328584E5FDF7771D78CEB2CC0F8A940 Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/9f8c8b39-bedc-337b-a368-65b1cbd2cf3e.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 215172 IP address blocks: 208.68.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:77:71:d7:8c:eb:2c:c0:f8:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=41b5cad9-e242-4abb-8bf3-f6667a07664d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b5:e4:d7:cf:8d:c9:1a:14:22:0e:81:88:d2: 1e:b8:f3:4e:fe:ed:7b:5c:db:9b:fb:dd:88:d2:17: 33:62:52:fa:b8:a4:05:b9:04:1a:9e:fa:df:18:c4: 69:e5:87:e3:e3:87:30:e6:26:ce:4e:42:4e:c8:d8: 64:0e:79:69:18:07:5c:4e:71:fd:7f:12:b1:75:e3: 9f:c4:cb:55:c9:3f:72:23:86:ae:d1:1d:dd:95:ac: dc:85:68:11:32:79:cd:05:97:a3:48:de:11:8e:ed: 3d:8b:d5:a2:47:ac:99:70:26:23:dc:e1:cd:41:4a: c3:0f:ba:ce:88:34:5e:46:d6:3a:51:e2:da:49:1b: da:fd:e5:8b:12:08:58:f2:b3:1c:f3:9e:b0:0b:b6: b8:5d:cf:92:74:d5:cd:09:d5:b4:a2:99:1c:9e:f5: da:46:b0:93:db:fd:32:00:95:82:a4:f7:35:58:fd: 7c:de:22:89:0d:e4:de:d8:16:3c:cc:a6:24:76:c2: 47:a4:17:80:3f:74:dd:e2:50:9c:ef:2d:bc:22:5a: 5f:af:c6:dd:25:8a:89:68:26:13:2b:28:11:ce:55: 1e:1c:11:18:b5:29:e6:19:a8:93:9c:c5:bd:f9:a3: ac:02:df:fb:2e:f2:df:e4:5c:8d:8f:ce:a1:1c:e7: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:71:20:0F:41:01:FC:3E:F4:CF:62:C9:ED:4F:5D:C6:A4:40:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/9f8c8b39-bedc-337b-a368-65b1cbd2cf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl X509v3 Authority Key Identifier: keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer sbgp-ipAddrBlock: critical IPv4: 208.68.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6a:53:87:3c:b9:6d:58:a8:a9:d4:78:1d:24:d4:a6:e2:d0: 80:be:61:72:15:13:59:1e:e4:42:df:c5:91:46:4c:c6:31:e5: 0e:5b:57:a7:e7:e7:f6:8e:e8:0c:e9:ff:cf:7d:81:87:ad:c7: 3c:1b:f5:99:15:16:b7:ef:28:f5:cb:ab:12:b5:18:5a:d6:47: 0a:8b:17:52:6d:97:3e:bc:b6:3f:d0:a2:6e:5d:67:45:9f:23: 0d:56:6b:72:1f:93:b4:b2:f5:37:ba:57:c1:c0:be:22:2e:84: 7c:07:2a:ac:39:22:b8:af:5d:db:ec:0b:d5:a1:5d:35:bf:bd: c8:81:23:d6:40:03:69:ee:01:da:4d:d5:39:99:23:fe:16:ae: ea:53:d1:18:fe:43:61:4a:fa:f3:97:dd:ff:de:74:01:d2:22: 83:ff:e9:39:88:f6:0b:e0:87:a3:e9:70:12:77:20:34:76:f2: 5b:7c:7a:d8:56:8f:89:8e:ff:f6:3a:71:6d:5b:b3:88:6e:0b: 8f:9b:27:c7:60:8c:47:c4:92:b1:4d:30:7c:95:9f:aa:6b:2b: 54:71:06:c3:37:96:fe:db:9b:ed:8b:d1:83:cc:28:ce:f8:51: d2:3d:6e:42:0f:66:27:dd:eb:46:c8:72:ce:44:2c:27:00:a5: f3:7f:6f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f33dx14zrLMD4qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew NjZjMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NDFiNWNhZDktZTI0Mi00YWJiLThiZjMtZjY2NjdhMDc2NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrXk18+NyRoUIg6BiNIeuPNO/u17XNub+92I 0hczYlL6uKQFuQQanvrfGMRp5Yfj44cw5ibOTkJOyNhkDnlpGAdcTnH9fxKxdeOf xMtVyT9yI4au0R3dlazchWgRMnnNBZejSN4Rju09i9WiR6yZcCYj3OHNQUrDD7rO iDReRtY6UeLaSRva/eWLEghY8rMc856wC7a4Xc+SdNXNCdW0opkcnvXaRrCT2/0y AJWCpPc1WP183iKJDeTe2BY8zKYkdsJHpBeAP3Td4lCc7y28Ilpfr8bdJYqJaCYT KygRzlUeHBEYtSnmGaiTnMW9+aOsAt/7LvLf5FyNj86hHOejUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKWcSAPQQH8PvTPYsntT13GpEBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0 NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvOWY4YzhiMzktYmVkYy0z MzdiLWEzNjgtNjViMWNiZDJjZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1 ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1 ZmU3YTA2NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ES2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClqU4c8uW1YqKnUeB0k1Kbi0IC+YXIVE1ke5ELfxZFGTMYx5Q5bV6fn 5/aO6Azp/899gYetxzwb9ZkVFrfvKPXLqxK1GFrWRwqLF1Jtlz68tj/Qom5dZ0Wf Iw1Wa3Ifk7Sy9Te6V8HAviIuhHwHKqw5IrivXdvsC9WhXTW/vciBI9ZAA2nuAdpN 1TmZI/4WrupT0Rj+Q2FK+vOX3f/edAHSIoP/6TmI9gvgh6PpcBJ3IDR28lt8ethW j4mO//Y6cW1bs4huC4+bJ8dgjEfEkrFNMHyVn6prK1RxBsM3lv7bm+2L0YPMKM74 UdI9bkIPZifd60bIcs5ELCcApfN/b8o= -----END CERTIFICATE-----Generated at Fri Jul 17 07:30:55 2026 by rpki-client