$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa736af0-cf5d-34d0-9fce-920c2621c275.roa File: aa736af0-cf5d-34d0-9fce-920c2621c275.roa (raw, json) Hash identifier: SvCGJmTJl0qppRJxOQiF9zXbHN6YKO/4v3LpZkHu3yI= Subject key identifier: F7:0E:18:1D:EC:EB:9B:0A:A2:E4:D7:3D:D2:A4:E3:DE:EA:F9:B6:D7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E561A13C08EDF203D51A0D380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa736af0-cf5d-34d0-9fce-920c2621c275.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 401783 IP address blocks: 209.166.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:13:c0:8e:df:20:3d:51:a0:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=23d7add0-9204-4c56-9b97-a99fec4ab355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:0c:a2:33:e6:f0:d4:96:16:82:49:78:e3: 81:fb:f8:60:1a:24:df:11:b4:7a:9c:c4:17:7b:96: 6d:7d:e3:68:e7:d7:1a:a0:df:c8:56:ab:0e:77:3b: c4:23:91:3e:2c:09:b9:b5:50:32:1e:4a:4d:7c:eb: 85:c7:02:11:6f:c4:f4:8c:1f:52:ca:d6:de:40:0f: 77:d7:d7:a9:02:89:80:1d:99:24:3a:94:45:12:fe: ce:51:cc:8a:fe:83:7a:e7:83:29:0a:4f:7a:4f:ae: 4c:7e:6b:2c:20:e7:4e:b5:f7:2b:cf:49:c1:ee:61: 16:dd:a3:ca:98:cd:93:d8:79:06:7c:78:4c:b4:16: 35:8c:1f:b3:75:83:49:e4:cf:2b:4a:2a:90:f5:0a: ce:b6:53:81:6c:21:36:de:a2:5d:de:2a:13:57:78: 38:b2:f7:f1:75:6b:d0:fb:51:66:76:50:f7:53:c4: a0:dc:14:1d:c1:e0:19:d7:ec:fd:42:1d:41:2a:5e: 85:d9:ab:f0:06:03:3f:da:72:35:6a:cd:70:a7:8e: 16:69:77:00:42:01:63:f0:67:ff:b3:d9:2c:84:f4: d0:38:ce:f2:5e:e0:b1:cc:04:31:54:dc:a9:bc:89: b2:fb:87:2f:92:3f:00:d8:1e:a5:6f:d6:cc:54:24: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0E:18:1D:EC:EB:9B:0A:A2:E4:D7:3D:D2:A4:E3:DE:EA:F9:B6:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa736af0-cf5d-34d0-9fce-920c2621c275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.166.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:9c:50:ee:c3:98:d8:34:cb:e3:1c:42:2b:09:9d:12:c7:1c: 1e:b8:20:3e:b8:42:49:61:8a:5b:7e:e7:cc:6a:f3:55:e4:8a: 44:3d:63:17:39:2c:4f:e7:fa:a5:a6:33:72:14:59:54:f7:27: 5c:3b:61:b8:6e:ef:2e:6a:d6:cf:cd:4f:35:3f:04:18:c9:53: 67:be:84:24:1e:3a:09:25:97:3a:94:37:e6:7c:71:40:6d:54: 72:fa:92:42:88:6a:4e:ee:9d:ed:c6:83:9a:7d:b8:09:86:3f: 9a:8b:6b:4a:ad:f4:2b:f0:85:3c:a0:61:60:01:51:43:db:60: 48:42:5d:41:a8:19:48:3b:f0:b1:b6:18:00:e0:3b:d6:17:28: 12:60:ec:32:ae:5d:ca:f5:1d:19:ea:77:73:2d:3f:d5:63:bd: f5:79:0c:0b:7f:a2:96:76:70:45:57:4b:ea:e5:12:95:8b:6e: f0:26:d5:4e:f2:d5:71:21:33:df:77:af:0e:af:72:ce:1f:f1: 7e:df:9e:89:de:14:b1:c3:ff:66:8d:84:69:ab:70:0d:77:9e: 24:ac:e6:bb:ce:1d:65:6d:12:71:8e:7f:9e:2d:38:fd:4b:fe: 73:21:c1:a6:55:ff:6c:48:3d:21:ec:c5:99:16:80:a4:03:b1: 6d:7b:48:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGhPAjt8gPVGg04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk MjNkN2FkZDAtOTIwNC00YzU2LTliOTctYTk5ZmVjNGFiMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVoMojPm8NSWFoJJeOOB+/hgGiTfEbR6nMQX e5ZtfeNo59caoN/IVqsOdzvEI5E+LAm5tVAyHkpNfOuFxwIRb8T0jB9SytbeQA93 19epAomAHZkkOpRFEv7OUcyK/oN654MpCk96T65MfmssIOdOtfcrz0nB7mEW3aPK mM2T2HkGfHhMtBY1jB+zdYNJ5M8rSiqQ9QrOtlOBbCE23qJd3ioTV3g4svfxdWvQ +1FmdlD3U8Sg3BQdweAZ1+z9Qh1BKl6F2avwBgM/2nI1as1wp44WaXcAQgFj8Gf/ s9kshPTQOM7yXuCxzAQxVNypvImy+4cvkj8A2B6lb9bMVCQ68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcOGB3s65sKouTXPdKk497q+bbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWE3MzZhZjAtY2Y1ZC0z NGQwLTlmY2UtOTIwYzI2MjFjMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJScUO7DmNg0y+McQisJnRLHHB64ID64Qklhilt+58xq81XkikQ9Yxc5 LE/n+qWmM3IUWVT3J1w7Ybhu7y5q1s/NTzU/BBjJU2e+hCQeOgkllzqUN+Z8cUBt VHL6kkKIak7une3Gg5p9uAmGP5qLa0qt9CvwhTygYWABUUPbYEhCXUGoGUg78LG2 GADgO9YXKBJg7DKuXcr1HRnqd3MtP9VjvfV5DAt/opZ2cEVXS+rlEpWLbvAm1U7y 1XEhM993rw6vcs4f8X7fnoneFLHD/2aNhGmrcA13niSs5rvOHWVtEnGOf54tOP1L /nMhwaZV/2xIPSHsxZkWgKQDsW17SPA= -----END CERTIFICATE-----Generated at Fri Jul 10 13:53:06 2026 by rpki-client