$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa File: 8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa (raw, json) Hash identifier: Pnn7f5VVotshyzVYh5djyo3kInuLSHekPW3mHMHBZIE= Subject key identifier: 01:3D:E0:EE:6E:8C:78:6E:22:3B:6D:75:EA:EB:5A:14:C5:48:08:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E78FF866AF44BB8B3AC922100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 36183 IP address blocks: 172.224.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:86:6a:f4:4b:b8:b3:ac:92:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=19a1ad7a-7c3e-46de-810f-e0eccecdfe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:59:27:bb:23:e7:4e:75:99:a1:52:8a:ba: 51:8a:66:c2:10:3b:93:98:32:1d:7b:7a:5d:ea:10: 68:50:f3:3d:f5:e8:30:dd:6b:fe:b0:74:23:0c:e1: a5:96:6c:9c:63:40:3b:f2:16:49:f9:72:2b:9d:b4: f7:c1:15:b6:fc:dd:31:07:69:7c:6d:14:16:9a:0a: 1b:03:61:5a:95:40:cc:92:c7:7b:53:a9:2f:09:a3: 2c:27:09:c4:52:87:d8:70:d5:d5:2b:37:9d:08:7d: 34:0d:98:cc:35:2e:46:dc:cd:5d:68:c8:b4:f3:5a: 1c:4a:8f:0f:25:35:b3:d1:03:ff:13:0b:a9:b5:aa: 83:80:16:73:6b:a0:04:bc:e4:0f:31:7f:d4:2f:6f: 28:e2:d0:b8:c5:aa:b5:f6:74:86:4c:51:53:43:e8: 2c:8e:3d:a5:af:1f:19:5a:96:e1:3f:58:9b:82:f6: 4a:d7:ca:4a:d2:36:11:7e:d5:46:25:85:6d:81:a6: 21:d7:57:e0:e9:f0:9a:ee:c6:70:07:64:79:c2:ae: 9f:a0:bf:f3:7f:6a:9c:4e:2a:c2:93:5f:0d:54:36: ff:0e:4e:ce:7a:97:b7:80:5b:32:eb:b4:f7:45:54: 82:d7:07:a5:49:ba:b9:98:98:15:36:27:82:8e:f6: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3D:E0:EE:6E:8C:78:6E:22:3B:6D:75:EA:EB:5A:14:C5:48:08:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f4:09:8b:cb:47:39:8d:a7:33:d9:b2:0f:84:eb:fe:71:72: 10:ca:51:aa:bb:2e:9e:50:07:d0:18:92:52:4b:27:f7:8d:7d: 7b:18:84:36:06:9d:82:fe:c1:b3:21:fd:6e:24:7f:88:2d:df: e2:31:a2:02:13:73:3f:3e:24:2b:44:94:1d:0c:90:e7:57:2c: 4b:66:01:d5:03:8e:db:2f:08:d7:cc:ab:dc:ec:8a:b8:4a:e1: c4:55:4c:f0:2c:35:c2:7e:ae:cd:76:8d:81:4d:4b:30:73:13: e9:de:77:0c:33:80:30:ba:34:11:ed:15:1e:bf:0f:e6:a2:eb: 06:fb:36:a8:c8:36:54:01:42:87:10:09:83:75:0b:2a:d3:7a: 61:26:73:b4:87:54:ec:d2:8a:9e:bf:55:78:76:1e:6e:9f:d8: e2:96:6a:4c:e3:be:23:d3:c1:bb:8c:12:dd:b6:3c:b9:a3:7c: b8:58:ce:dd:ba:69:9e:ab:cf:47:99:29:64:ab:be:8e:fa:76: 1c:5d:39:aa:3c:9b:41:9f:82:2f:03:9d:03:d0:49:b0:5f:e9: 5d:4f:8d:28:bf:fc:61:cf:ad:9a:5a:20:64:ad:32:65:84:fa: 0b:73:26:c0:ff:8e:74:11:57:f1:c6:68:8b:f6:76:1f:65:b7: 7e:5e:64:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4Zq9Eu4s6ySIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk MTlhMWFkN2EtN2MzZS00NmRlLTgxMGYtZTBlY2NlY2RmZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxxZJ7sj5051maFSirpRimbCEDuTmDIde3pd 6hBoUPM99egw3Wv+sHQjDOGllmycY0A78hZJ+XIrnbT3wRW2/N0xB2l8bRQWmgob A2FalUDMksd7U6kvCaMsJwnEUofYcNXVKzedCH00DZjMNS5G3M1daMi081ocSo8P JTWz0QP/EwuptaqDgBZza6AEvOQPMX/UL28o4tC4xaq19nSGTFFTQ+gsjj2lrx8Z WpbhP1ibgvZK18pK0jYRftVGJYVtgaYh11fg6fCa7sZwB2R5wq6foL/zf2qcTirC k18NVDb/Dk7Oepe3gFsy67T3RVSC1welSbq5mJgVNieCjva5nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE94O5ujHhuIjttderrWhTFSAgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE5NmY4YjYtNWJkNi0z Y2IzLTljOTQtY2NhODdmNDQyNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA30CYvLRzmNpzPZsg+E6/5xchDKUaq7Lp5QB9AYklJLJ/eNfXsYhDYG nYL+wbMh/W4kf4gt3+IxogITcz8+JCtElB0MkOdXLEtmAdUDjtsvCNfMq9zsirhK 4cRVTPAsNcJ+rs12jYFNSzBzE+nedwwzgDC6NBHtFR6/D+ai6wb7NqjINlQBQocQ CYN1CyrTemEmc7SHVOzSip6/VXh2Hm6f2OKWakzjviPTwbuMEt22PLmjfLhYzt26 aZ6rz0eZKWSrvo76dhxdOao8m0Gfgi8DnQPQSbBf6V1PjSi//GHPrZpaIGStMmWE +gtzJsD/jnQRV/HGaIv2dh9lt35eZMU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:44:04 2026 by rpki-client