$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217d92c0-f655-3956-ac22-fcce039aaac0.roa File: 217d92c0-f655-3956-ac22-fcce039aaac0.roa (raw, json) Hash identifier: PKGzVkFQmcO3qiP9wC0qIoBbLPgylRDGi7qIxIdHxcU= Subject key identifier: 24:9A:02:18:27:56:62:C1:D2:3A:32:84:B2:8E:6C:EC:02:0E:BD:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E5A4A14C0788A1D229A660EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217d92c0-f655-3956-ac22-fcce039aaac0.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 16625 IP address blocks: 184.24.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:14:c0:78:8a:1d:22:9a:66:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=1096de8e-1629-40e9-84a4-cf7d49fd3451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:f4:09:8f:65:9e:45:30:5c:4d:f5:84:93: e3:77:cf:5a:50:51:cf:13:30:29:89:0d:2d:99:78: 13:40:20:54:86:c7:f0:1a:04:4b:93:ef:e9:42:ff: b8:9e:e6:ad:d4:f9:fd:5b:4f:d8:86:15:69:b7:94: 7e:65:e3:1f:9b:00:4a:01:b9:50:49:61:9e:df:09: cf:38:22:52:de:67:b0:87:74:f8:0d:89:0c:e8:ce: ae:66:17:fa:e0:67:5f:44:0e:6b:fb:4b:86:d4:8b: c0:d8:95:8f:28:a6:ce:61:48:fe:e3:0e:f1:45:a8: d0:be:43:7f:dc:dd:e3:18:ec:da:e7:9a:03:2c:00: f6:20:02:38:f7:0a:90:00:36:31:43:53:5f:7d:d1: 90:8f:75:3e:61:b8:73:8f:60:7a:cd:a4:c5:7b:23: da:8c:4d:a4:ae:d9:17:ee:35:8c:ff:e1:da:88:69: e6:11:d8:e3:4b:55:be:65:da:71:19:d7:c3:a5:b3: 3f:33:51:f8:b3:47:a7:3f:ed:42:ae:12:0d:58:69: 34:13:72:70:f2:93:e1:37:56:53:2a:b6:bf:71:c0: ed:1b:80:7a:87:bc:11:25:71:97:76:3f:c2:28:fd: 50:4c:45:ac:a9:61:75:56:89:6e:61:e6:46:2c:c7: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9A:02:18:27:56:62:C1:D2:3A:32:84:B2:8E:6C:EC:02:0E:BD:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217d92c0-f655-3956-ac22-fcce039aaac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.24.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e6:e0:6c:36:af:78:76:7e:b3:04:84:d6:40:cd:a3:03:ce: 8d:12:27:23:37:34:c8:ab:74:57:67:cb:0c:7e:66:c8:7d:78: 6e:3e:15:26:c5:d7:d4:45:34:bb:af:df:a7:a5:61:6f:9a:3e: 59:77:33:85:1d:da:cc:6f:a6:13:17:b5:4d:b3:c2:c6:71:99: 45:51:50:4b:0e:ff:da:7e:5e:87:4a:bb:3f:fe:98:e5:44:75: 60:07:e2:46:f8:bd:c2:cd:23:74:91:86:9b:d2:9b:c9:0f:39: 5f:b5:f7:4a:84:02:de:5e:a2:55:be:8a:f4:29:81:ee:b1:93: fb:d3:dc:76:ec:08:c9:fe:9d:ae:c1:51:7a:58:85:99:98:ef: 32:7c:9a:60:83:ce:c1:9a:5f:4f:02:66:23:a8:e0:5d:98:08: cb:4a:aa:77:d9:8c:0a:cd:fe:8e:09:be:40:95:6f:68:50:f9: 1f:49:30:32:dd:38:f0:4a:8b:74:50:0e:1a:9a:58:e2:89:b2: a8:f7:fd:41:5e:eb:9d:7f:3c:e1:5a:0f:52:f3:06:40:ff:f5: 0e:21:cf:0f:60:b6:b0:20:db:71:42:ed:43:c8:01:3a:8e:f1: 4c:84:b1:18:21:14:4e:1c:81:3c:58:96:33:08:10:cb:e1:f0: c0:7b:45:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aShTAeIodIppmDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk MTA5NmRlOGUtMTYyOS00MGU5LTg0YTQtY2Y3ZDQ5ZmQzNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmD0CY9lnkUwXE31hJPjd89aUFHPEzApiQ0t mXgTQCBUhsfwGgRLk+/pQv+4nuat1Pn9W0/YhhVpt5R+ZeMfmwBKAblQSWGe3wnP OCJS3mewh3T4DYkM6M6uZhf64GdfRA5r+0uG1IvA2JWPKKbOYUj+4w7xRajQvkN/ 3N3jGOza55oDLAD2IAI49wqQADYxQ1NffdGQj3U+Ybhzj2B6zaTFeyPajE2krtkX 7jWM/+HaiGnmEdjjS1W+ZdpxGdfDpbM/M1H4s0enP+1CrhINWGk0E3Jw8pPhN1ZT Kra/ccDtG4B6h7wRJXGXdj/CKP1QTEWsqWF1VoluYeZGLMfkcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSaAhgnVmLB0joyhLKObOwCDr2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE3ZDkyYzAtZjY1NS0z OTU2LWFjMjItZmNjZTAzOWFhYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7m4Gw2r3h2frMEhNZAzaMDzo0SJyM3NMirdFdnywx+Zsh9eG4+FSbF 19RFNLuv36elYW+aPll3M4Ud2sxvphMXtU2zwsZxmUVRUEsO/9p+XodKuz/+mOVE dWAH4kb4vcLNI3SRhpvSm8kPOV+190qEAt5eolW+ivQpge6xk/vT3HbsCMn+na7B UXpYhZmY7zJ8mmCDzsGaX08CZiOo4F2YCMtKqnfZjArN/o4JvkCVb2hQ+R9JMDLd OPBKi3RQDhqaWOKJsqj3/UFe651/POFaD1LzBkD/9Q4hzw9gtrAg23FC7UPIATqO 8UyEsRghFE4cgTxYljMIEMvh8MB7RSw= -----END CERTIFICATE-----Generated at Tue Jul 21 20:51:08 2026 by rpki-client