$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa File: dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa (raw, json) Hash identifier: Ifm5U2WfT7dKrx51hfv5n9DsNk5cu7eIYuUvByyzcI0= Subject key identifier: 34:DD:07:AE:38:73:A1:EC:8C:2B:54:1E:52:7C:8E:DA:07:A0:7C:B1 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F4328584E78FF871DDD6EB1739D3E8900 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 214022 IP address blocks: 208.70.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:87:1d:dd:6e:b1:73:9d:3e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=9e234fde-5469-4279-a8f3-c0d5e891222e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ea:96:94:38:3e:47:de:ff:bd:08:19:c0:97: f1:93:cc:7b:ec:68:ac:7c:35:4b:22:ed:e9:21:4a: 4a:38:d2:82:9b:d4:60:2f:99:2f:32:0b:cd:20:59: 81:a3:39:00:6d:bd:b6:e8:40:72:2e:b1:13:ca:b8: f2:1f:06:dc:b4:a6:36:94:b7:42:b4:0c:42:f5:b7: 15:97:57:1a:b0:92:da:c6:10:cc:3e:cf:b5:44:1d: a9:9e:53:58:ac:f1:ad:8c:ed:1b:70:57:18:2b:44: 98:cb:7f:f2:d1:37:dc:75:76:2e:df:f5:7a:7c:80: 8a:e7:10:fe:da:17:5a:ad:25:ee:69:4e:c0:b1:b0: c4:6c:bf:28:2a:f7:4d:1e:2c:76:38:e6:c9:c9:33: fc:a2:b3:3d:4d:96:8b:42:e7:77:c6:df:f1:a8:64: f1:7f:00:94:22:3c:a0:7b:c6:7e:4b:80:c0:1a:8a: a4:8c:32:e1:3c:dc:ef:c9:cb:51:26:de:13:49:dc: 7e:6d:d5:ef:f5:1c:d9:24:8c:43:68:0d:e9:91:35: b7:73:cb:2b:86:32:0a:af:e7:35:59:14:3a:1b:7f: 3d:71:08:29:4b:dd:1a:2e:3e:98:dd:02:6f:26:df: c3:de:07:6a:12:f2:49:b6:cb:bb:d8:2a:fc:9c:8d: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:07:AE:38:73:A1:EC:8C:2B:54:1E:52:7C:8E:DA:07:A0:7C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a9:3b:2c:bb:30:55:fb:d3:b1:74:27:99:5e:91:52:a7:e4: 70:bf:bb:b4:d3:cf:b2:63:52:dc:4a:ce:03:bd:67:38:97:83: c0:52:47:37:c2:5e:7e:36:ca:70:02:1f:8f:f9:95:55:cd:5f: 66:ea:89:0d:8a:62:16:15:08:70:14:f3:9e:99:a5:60:0e:af: 5f:72:e7:98:2a:a5:4e:b6:e0:84:4f:99:98:ec:59:d1:ec:d6: 6e:24:2a:d4:fb:f6:85:af:85:4c:9a:8b:4b:c6:9c:bc:c1:03: 71:a3:1c:d9:d9:75:08:16:f9:1f:ed:15:63:24:69:81:85:ce: 6f:be:e2:b9:a3:fd:3c:13:31:5a:b1:2b:0f:39:91:cc:36:23: 0c:44:a9:9e:a3:02:c3:44:69:0c:44:d0:82:01:52:3c:fa:e6: 0b:a9:e2:7e:26:c5:5c:71:ed:76:3b:6f:40:7d:35:89:e9:da: ad:1c:3c:6d:f0:db:7f:d0:1a:5a:00:bd:12:1b:29:c4:cc:22: 64:04:33:85:a9:1d:a9:5a:a5:ca:a1:b6:d1:89:4b:4c:51:61: 4c:c6:73:8d:c7:68:b3:13:96:14:b2:f2:3b:b4:2a:ff:3c:88: 7b:50:a5:a0:81:0a:14:8a:34:9d:25:c2:ad:75:00:87:fd:f3: 2a:4a:85:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4cd3W6xc50+iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk OWUyMzRmZGUtNTQ2OS00Mjc5LWE4ZjMtYzBkNWU4OTEyMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eqWlDg+R97/vQgZwJfxk8x77GisfDVLIu3p IUpKONKCm9RgL5kvMgvNIFmBozkAbb226EByLrETyrjyHwbctKY2lLdCtAxC9bcV l1casJLaxhDMPs+1RB2pnlNYrPGtjO0bcFcYK0SYy3/y0TfcdXYu3/V6fICK5xD+ 2hdarSXuaU7AsbDEbL8oKvdNHix2OObJyTP8orM9TZaLQud3xt/xqGTxfwCUIjyg e8Z+S4DAGoqkjDLhPNzvyctRJt4TSdx+bdXv9RzZJIxDaA3pkTW3c8srhjIKr+c1 WRQ6G389cQgpS90aLj6Y3QJvJt/D3gdqEvJJtsu72Cr8nI390wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTdB644c6HsjCtUHlJ8jtoHoHyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvZGQ1M2I5ZjgtNjliNy0z NGY4LWI4NmUtYWY2NjBhNTMwZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSpOyy7MFX707F0J5lekVKn5HC/u7TTz7JjUtxKzgO9ZziXg8BSRzfC Xn42ynACH4/5lVXNX2bqiQ2KYhYVCHAU856ZpWAOr19y55gqpU624IRPmZjsWdHs 1m4kKtT79oWvhUyai0vGnLzBA3GjHNnZdQgW+R/tFWMkaYGFzm++4rmj/TwTMVqx Kw85kcw2IwxEqZ6jAsNEaQxE0IIBUjz65gup4n4mxVxx7XY7b0B9NYnp2q0cPG3w 23/QGloAvRIbKcTMImQEM4WpHalapcqhttGJS0xRYUzGc43HaLMTlhSy8ju0Kv88 iHtQpaCBChSKNJ0lwq11AIf98ypKhdM= -----END CERTIFICATE-----Generated at Tue Jul 21 23:12:40 2026 by rpki-client