$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa File: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (raw, json) Hash identifier: lWpIe/QF25Uyx7wGyefhV6GP+rDoHskOl8We+B16SJ8= Subject key identifier: 8D:39:74:27:78:6A:FC:09:8D:2C:D5:68:21:93:F9:01:0A:4D:EA:C8 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584EC371CB15A5DA1508A3754F80 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 46687 IP address blocks: 207.68.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:cb:15:a5:da:15:08:a3:75:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=c41d096a-6496-4f44-aa0c-215b1a4438bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:7c:64:92:14:49:49:c1:97:99:90:20:83: f2:a6:5b:74:60:a9:83:17:b9:2b:77:8f:61:89:a8: a8:73:8e:08:ad:74:31:69:56:cb:86:3d:b6:25:42: 78:49:64:58:62:c6:0b:fb:8b:9c:53:c8:6d:93:34: ad:76:07:26:55:13:d6:f9:d1:eb:6c:e7:8a:fa:a7: bb:62:b2:58:7b:a9:e0:7a:2d:29:57:db:b8:55:d9: e9:31:72:28:b9:33:b5:00:9f:dd:03:91:7a:8e:da: 8f:62:4a:d0:96:68:7f:c8:6c:81:c3:07:bf:26:70: 59:29:53:03:91:79:83:7d:00:59:ae:66:52:83:6b: b1:17:ad:85:41:5f:21:6b:e4:8e:50:16:ad:19:f9: 58:5c:60:7b:93:da:4b:2b:33:8b:3a:51:06:b3:1e: 3d:f5:c0:ed:d9:a6:29:5b:b2:a7:60:0b:02:83:bc: 00:b0:b3:aa:54:db:d0:c1:9f:9c:d2:a9:f3:a2:9b: b1:a3:43:2a:e3:19:07:c5:61:b9:f6:79:c7:07:ea: b1:57:ae:f3:16:64:07:6e:fa:cb:3b:c2:a9:5a:e1: 52:72:97:36:ec:fa:71:42:b5:c4:df:0d:51:be:b7: 6d:22:9c:1d:91:a9:b6:d7:59:9e:e6:dd:e2:bc:2c: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:39:74:27:78:6A:FC:09:8D:2C:D5:68:21:93:F9:01:0A:4D:EA:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 207.68.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:93:7a:d8:38:8f:1f:81:12:e8:85:87:d4:a8:2c:52:1b:94: d7:d9:d7:f3:7d:d2:58:d5:cf:b9:4a:36:be:ff:e6:7e:ae:45: f8:8f:8e:98:b1:82:5e:20:9e:c5:39:80:5d:09:36:ab:d6:54: 9c:5f:72:0a:b5:39:4a:43:4d:9d:3e:0a:ac:41:11:29:f1:c8: 6a:8a:2b:95:29:98:d7:0d:ba:b9:fb:b9:f8:32:86:23:76:4b: cd:f7:b3:c1:52:a0:d1:cb:02:c9:f7:3e:c2:87:b0:89:5d:1f: b5:20:3a:83:41:c3:13:66:b5:7f:c9:f9:23:4f:72:da:77:31: 9d:6c:0c:b7:31:2e:3c:2c:0b:e2:ce:37:8c:f9:6b:6a:51:a1: e4:68:7b:18:fc:33:fb:25:d2:e3:61:49:e2:e1:ee:a7:e9:9a: 2f:80:49:f5:ff:eb:65:c6:8d:79:63:90:de:4e:ff:e8:dc:c4: d4:c7:30:49:1b:e6:ec:4b:81:39:88:5b:58:8b:04:cd:00:30: cc:40:08:ed:18:93:47:e1:dc:85:c6:e4:c6:29:20:11:3f:1c: f2:f6:b8:68:86:e9:eb:a4:d6:e3:5a:e5:72:d6:fd:d9:54:9e: 6c:b6:50:f2:f5:ab:70:77:91:16:ce:95:d1:51:df:f6:bd:aa: 8b:78:b1:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccsVpdoVCKN1T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YzQxZDA5NmEtNjQ5Ni00ZjQ0LWFhMGMtMjE1YjFhNDQzOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvR8ZJIUSUnBl5mQIIPyplt0YKmDF7krd49h iaioc44IrXQxaVbLhj22JUJ4SWRYYsYL+4ucU8htkzStdgcmVRPW+dHrbOeK+qe7 YrJYe6ngei0pV9u4VdnpMXIouTO1AJ/dA5F6jtqPYkrQlmh/yGyBwwe/JnBZKVMD kXmDfQBZrmZSg2uxF62FQV8ha+SOUBatGflYXGB7k9pLKzOLOlEGsx499cDt2aYp W7KnYAsCg7wAsLOqVNvQwZ+c0qnzopuxo0Mq4xkHxWG59nnHB+qxV67zFmQHbvrL O8KpWuFScpc27PpxQrXE3w1RvrdtIpwdkam211me5t3ivCxsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI05dCd4avwJjSzVaCGT+QEKTerIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvM2I3MGVmNDktNjFlOC0z YzFkLWEzM2EtNTFkMTk0YWNmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz0TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOTetg4jx+BEuiFh9SoLFIblNfZ1/N90ljVz7lKNr7/5n6uRfiPjpix gl4gnsU5gF0JNqvWVJxfcgq1OUpDTZ0+CqxBESnxyGqKK5UpmNcNurn7ufgyhiN2 S833s8FSoNHLAsn3PsKHsIldH7UgOoNBwxNmtX/J+SNPctp3MZ1sDLcxLjwsC+LO N4z5a2pRoeRoexj8M/sl0uNhSeLh7qfpmi+ASfX/62XGjXljkN5O/+jcxNTHMEkb 5uxLgTmIW1iLBM0AMMxACO0Yk0fh3IXG5MYpIBE/HPL2uGiG6euk1uNa5XLW/dlU nmy2UPL1q3B3kRbOldFR3/a9qot4sQ4= -----END CERTIFICATE-----Generated at Wed Aug 26 18:03:01 2026 by rpki-client