$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa File: b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa (raw, json) Hash identifier: XihZnUwthBu2808E6LB7sZMoAB1bj7DR+Vp5r2M4xJE= Subject key identifier: 74:9C:27:D5:50:DF:4D:30:3C:22:C8:77:E9:82:02:72:7F:FD:01:06 Certificate issuer: /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Certificate serial: 010D0C9F4328584E5B5892C92E83EA6F27DBECC0 Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa Signing time: Wed 01 Jul 2026 18:05:32 +0000 ROA not before: Wed 01 Jul 2026 18:05:32 +0000 ROA not after: Tue 29 Sep 2026 18:05:32 +0000 asID: 399955 IP address blocks: 206.168.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:58:92:c9:2e:83:ea:6f:27:db:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Validity Not Before: Jul 1 18:05:32 2026 GMT Not After : Sep 29 18:05:32 2026 GMT Subject: CN=3ffb091d-5d3d-4c93-840e-a1f5c2c3d4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:1f:56:d4:3c:17:ff:7d:58:e4:7c:60:59: dc:b3:d7:57:32:c1:b2:a3:e5:4d:ac:9d:2e:94:45: 41:e2:63:34:a1:1a:24:fc:36:80:26:26:7a:c0:41: 42:79:52:89:8c:66:3f:b5:8b:84:d3:13:4b:ba:17: 43:d7:83:db:dd:69:1e:a2:3f:0c:6f:f4:27:59:a3: 74:2f:2e:ae:64:3d:fe:6b:91:4c:b6:2d:16:bc:7e: 4c:97:a7:b1:27:0f:d1:6c:d0:76:d6:74:16:31:71: bf:4e:65:43:7b:be:b3:9f:cd:5b:6e:25:98:44:17: 6a:7f:c3:4c:04:25:40:e0:29:94:3e:27:5a:3f:39: 38:c3:f7:b6:fc:f4:50:c8:cc:59:33:d0:3e:e6:0e: 18:50:a4:2b:cf:74:ab:50:33:5a:91:2b:06:5a:5e: db:d1:64:a6:81:0e:b3:fa:93:af:76:56:6c:3e:24: db:bd:23:58:1f:d0:ee:6c:4b:70:e3:be:a1:1f:19: a9:df:a2:00:63:2c:05:52:ae:4c:78:6e:35:4b:31: 94:a3:df:92:ac:db:56:c3:eb:cc:9d:fe:9b:f5:2d: 3a:d2:9b:0e:10:7b:55:e9:93:95:2a:19:83:43:d0: f4:b1:85:d0:e4:d7:91:9c:50:00:97:2b:b6:ce:1e: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9C:27:D5:50:DF:4D:30:3C:22:C8:77:E9:82:02:72:7F:FD:01:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl X509v3 Authority Key Identifier: keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7b:79:6c:43:a4:2d:dc:25:5a:3c:c9:82:06:b1:4a:30:aa: 1d:e3:e0:9b:66:c1:d8:d9:fa:92:86:7c:da:4e:26:b2:6a:b2: 74:51:75:4d:de:cd:22:8f:95:0b:c4:96:c7:05:54:b4:f1:61: 5a:ef:28:8a:58:51:a3:ef:ef:71:4a:64:49:6e:d2:c8:5b:b9: 39:f3:25:26:d8:84:dc:32:0f:0e:b2:22:f1:0f:31:13:26:fd: f7:02:f8:ed:dc:be:08:96:90:58:bd:bc:f2:ff:8a:28:bf:f8: 63:44:aa:55:59:f6:f1:48:e6:0c:ad:a0:32:e6:f7:12:19:b8: c0:1b:9c:9a:c1:4e:4c:4e:b0:1f:45:06:b0:51:6f:2f:04:a1: 2d:9b:e6:e5:fe:ed:a7:f5:df:a4:9b:81:d4:7d:2d:3e:fe:62: 66:03:9f:37:2d:62:b4:68:a9:00:0e:a6:67:48:4e:3e:c4:77: 9e:d7:c1:de:21:54:e4:7a:23:fb:8a:3b:63:e9:87:0d:f7:e5: 33:81:a8:83:0b:1e:75:69:9b:66:a6:0e:b0:29:2e:12:bf:7b: f7:01:a6:09:bb:09:0a:40:3e:93:cb:4a:e2:4a:c4:7c:61:c8: eb:f4:e1:bb:95:64:49:77:98:48:2b:eb:2b:5d:0a:ca:98:b1: 28:88:11:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5bWJLJLoPqbyfb7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJiMTk5NmUtMzcxZi00MmMwLWI1MTUtZTJmODc2M2Vk N2M1MB4XDTI2MDcwMTE4MDUzMloXDTI2MDkyOTE4MDUzMlowLzEtMCsGA1UEAxMk M2ZmYjA5MWQtNWQzZC00YzkzLTg0MGUtYTFmNWMyYzNkNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSofVtQ8F/99WOR8YFncs9dXMsGyo+VNrJ0u lEVB4mM0oRok/DaAJiZ6wEFCeVKJjGY/tYuE0xNLuhdD14Pb3Wkeoj8Mb/QnWaN0 Ly6uZD3+a5FMti0WvH5Ml6exJw/RbNB21nQWMXG/TmVDe76zn81bbiWYRBdqf8NM BCVA4CmUPidaPzk4w/e2/PRQyMxZM9A+5g4YUKQrz3SrUDNakSsGWl7b0WSmgQ6z +pOvdlZsPiTbvSNYH9DubEtw476hHxmp36IAYywFUq5MeG41SzGUo9+SrNtWw+vM nf6b9S060psOEHtV6ZOVKhmDQ9D0sYXQ5NeRnFAAlyu2zh7ZJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHScJ9VQ300wPCLId+mCAnJ//QEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMmIx OTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4NzYzZWQ3YzUvYjk3MWExYWMtYmQ2Mi0z ZmE1LWE0MWMtNDlhYTNkM2ZkOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjJiMTk5NmUtMzcxZi00MmMwLWI1 MTUtZTJmODc2M2VkN2M1LzIyYjE5OTZlLTM3MWYtNDJjMC1iNTE1LWUyZjg3NjNl ZDdjNS5jcmwwHwYDVR0jBBgwFoAUo348kCeHbN+ipm+1GmaAC06M0a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMmIxOTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4 NzYzZWQ3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx7eWxDpC3cJVo8yYIGsUowqh3j4JtmwdjZ+pKGfNpOJrJqsnRRdU3e zSKPlQvElscFVLTxYVrvKIpYUaPv73FKZElu0shbuTnzJSbYhNwyDw6yIvEPMRMm /fcC+O3cvgiWkFi9vPL/iii/+GNEqlVZ9vFI5gytoDLm9xIZuMAbnJrBTkxOsB9F BrBRby8EoS2b5uX+7af136SbgdR9LT7+YmYDnzctYrRoqQAOpmdITj7Ed57Xwd4h VOR6I/uKO2Pphw335TOBqIMLHnVpm2amDrApLhK/e/cBpgm7CQpAPpPLSuJKxHxh yOv04buVZEl3mEgr6ytdCsqYsSiIEWE= -----END CERTIFICATE-----Generated at Mon Jul 6 22:11:57 2026 by rpki-client