$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa File: d336b8a0-5ab3-39bf-9100-3461a0074eab.roa (raw, json) Hash identifier: 72CeIgLiMOsNYJyflHqgtyfa5UASEzzJwWv3NymmCLo= Subject key identifier: 3B:E0:B9:C8:7A:DF:4C:5C:75:19:AD:78:A1:EE:7C:D6:3C:58:D0:F3 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584E8DEFA9E978BAF25F379A8DC0 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 19740 IP address blocks: 172.84.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:a9:e9:78:ba:f2:5f:37:9a:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=6a521ffd-8fa8-471e-b450-ba89659cff50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:07:e4:b1:d8:16:7e:38:81:34:a5:01:8c: 34:71:7a:4b:46:65:d9:9e:bd:43:83:d9:c1:60:70: 49:dc:be:c3:90:e7:fa:9f:3d:61:ae:a5:1e:39:9d: eb:c4:a9:5c:61:3e:d4:4f:5a:cc:2f:7e:3c:37:66: 22:a1:5c:5b:da:64:27:fa:48:50:99:81:45:b4:4f: f3:06:79:79:0e:01:0b:ce:fc:9c:65:24:60:a3:ce: 98:07:31:f8:2e:83:7e:aa:dd:69:fc:26:a1:a6:78: be:62:f2:76:93:2b:b9:71:5a:76:6d:69:f2:16:e3: 88:30:50:ba:a8:47:68:3a:c8:c2:e3:75:25:c9:7f: 35:cd:fe:e3:2a:43:7b:cf:6e:e5:01:13:27:4e:72: 9a:05:ff:d7:fa:00:29:f9:75:d2:8c:a9:3a:09:fe: 2a:14:1e:ff:1a:8d:0c:5f:fc:cb:16:78:55:79:b2: de:c3:2b:00:fa:d4:d0:b0:d8:e3:57:19:98:88:70: ce:a3:7f:12:96:e3:c1:67:f6:f4:e6:7c:4d:8d:f3: 61:72:f7:b9:fb:5b:57:38:26:a7:6f:3a:5e:08:cc: c3:53:0e:b0:d6:49:72:08:72:f4:08:3a:47:3e:e4: 26:eb:d8:e7:ff:2d:0a:6c:80:d3:22:6a:98:95:17: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E0:B9:C8:7A:DF:4C:5C:75:19:AD:78:A1:EE:7C:D6:3C:58:D0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3a:82:cb:76:5d:d1:3a:22:d2:c2:bc:27:3f:62:a6:66:6e: e6:73:dc:3a:67:65:82:b6:f7:57:32:e5:1b:77:42:57:6f:f9: 0f:6c:57:7f:03:b1:14:c2:79:4e:31:e9:f7:0a:62:69:35:84: 09:13:08:77:50:2a:09:8f:2a:af:68:3b:1a:15:89:98:22:05: dd:c4:5b:49:24:50:e8:86:e0:93:b5:b3:61:42:8e:82:b5:9b: 08:46:15:7c:cf:7e:7b:7c:ba:16:47:4e:19:17:3e:fd:07:a2: 05:2c:bc:15:4d:9a:2e:64:6a:77:85:9a:33:a3:3c:6a:a8:11: fc:0c:c5:97:ef:a1:84:60:33:7a:d0:db:db:ec:ad:b5:71:a8: d4:6a:a9:81:28:75:ae:05:ac:8c:50:a1:f1:a1:78:eb:5e:25: 92:74:06:8b:53:95:67:e9:08:58:a0:f0:1f:b2:ca:83:47:11: 4c:a5:d9:30:ba:85:81:4c:5a:91:ad:3b:52:9b:62:b8:24:8e: 46:3e:b8:e9:fa:b3:69:4c:28:2d:cf:6e:d8:fe:7b:57:5f:4a: c2:c1:61:1e:0f:75:ae:42:54:b2:b3:22:fc:88:de:04:39:b7: 6b:e4:8f:62:33:13:7f:58:f9:25:1e:db:a4:96:5e:41:5f:e5: 8c:31:e2:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N76npeLryXzeajcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk NmE1MjFmZmQtOGZhOC00NzFlLWI0NTAtYmE4OTY1OWNmZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+4H5LHYFn44gTSlAYw0cXpLRmXZnr1Dg9nB YHBJ3L7DkOf6nz1hrqUeOZ3rxKlcYT7UT1rML348N2YioVxb2mQn+khQmYFFtE/z Bnl5DgELzvycZSRgo86YBzH4LoN+qt1p/Cahpni+YvJ2kyu5cVp2bWnyFuOIMFC6 qEdoOsjC43UlyX81zf7jKkN7z27lARMnTnKaBf/X+gAp+XXSjKk6Cf4qFB7/Go0M X/zLFnhVebLewysA+tTQsNjjVxmYiHDOo38SluPBZ/b05nxNjfNhcve5+1tXOCan bzpeCMzDUw6w1klyCHL0CDpHPuQm69jn/y0KbIDTImqYlReCMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvguch630xcdRmteKHufNY8WNDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvZDMzNmI4YTAtNWFiMy0z OWJmLTkxMDAtMzQ2MWEwMDc0ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw6gst2XdE6ItLCvCc/YqZmbuZz3DpnZYK291cy5Rt3Qldv+Q9sV38D sRTCeU4x6fcKYmk1hAkTCHdQKgmPKq9oOxoViZgiBd3EW0kkUOiG4JO1s2FCjoK1 mwhGFXzPfnt8uhZHThkXPv0HogUsvBVNmi5kaneFmjOjPGqoEfwMxZfvoYRgM3rQ 29vsrbVxqNRqqYEoda4FrIxQofGheOteJZJ0BotTlWfpCFig8B+yyoNHEUyl2TC6 hYFMWpGtO1KbYrgkjkY+uOn6s2lMKC3Pbtj+e1dfSsLBYR4Pda5CVLKzIvyI3gQ5 t2vkj2IzE39Y+SUe26SWXkFf5Ywx4k0= -----END CERTIFICATE-----Generated at Tue Jul 21 11:36:02 2026 by rpki-client