$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa File: 95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa (raw, json) Hash identifier: 86Q0+tkvQfAYDdc4rIOafvK8ZAFO8hl+y7NO/6HZREU= Subject key identifier: FD:7B:D8:52:AE:36:67:C4:8E:91:DB:46:8F:E7:51:FB:7F:7C:D1:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E736A17C9BE04158A28334300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 213120 IP address blocks: 209.200.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:17:c9:be:04:15:8a:28:33:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=c57fb94e-90c3-42a5-9823-30690cc06518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:a8:85:ea:e3:e2:54:84:c5:97:c3:50:99: 14:8c:be:18:3f:d3:3f:18:41:02:86:69:d0:c5:ab: 74:24:71:10:f6:29:a4:5b:20:9f:f9:a8:11:4c:a4: 64:15:17:0c:04:86:16:27:fa:8f:24:18:0f:7f:de: 40:76:45:b7:2f:64:9e:22:dc:3d:0c:fb:51:9d:48: 8f:45:45:e7:f2:ba:fa:0c:73:ea:32:d0:5c:cc:99: d7:5a:9e:e2:85:28:20:2c:df:83:7e:93:25:3b:ec: 15:c3:f1:83:a9:e3:22:7b:15:b4:47:42:63:c6:3f: 44:50:db:9f:73:f4:f0:f3:b8:8b:ed:fc:f1:d6:50: e7:8c:41:45:dd:af:e1:4f:b6:5d:1a:45:ae:c2:1d: 46:75:61:ab:59:5f:5c:1d:28:19:18:08:7d:4a:00: 45:6b:0f:19:b7:3b:1f:06:58:94:10:2b:62:58:57: 83:96:69:ef:3b:3a:0e:95:91:b6:e8:33:5d:3d:ee: dc:d3:35:8a:de:f9:dd:7c:8d:c8:1e:b5:92:27:ec: 62:64:a9:2f:7b:90:30:fa:a4:c6:83:f1:28:59:a0: e0:e2:16:2e:d5:2e:c0:38:04:9c:82:00:08:fc:7c: f1:eb:ce:6e:88:3e:27:cf:aa:5d:63:34:76:e5:25: 9d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7B:D8:52:AE:36:67:C4:8E:91:DB:46:8F:E7:51:FB:7F:7C:D1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95a963e1-f78b-3fe8-a95e-54e73c92b85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a2:9d:42:13:79:67:88:81:54:83:24:3c:06:c5:b6:ee:bb: bb:02:8d:28:a0:5f:54:b7:2e:47:36:b7:ca:cf:43:b5:a0:5f: 2c:80:64:1d:88:b5:f6:0e:e5:98:c9:db:60:f3:80:38:26:26: 0d:12:bb:c3:11:47:ca:63:1f:53:7d:5d:f1:8c:d6:16:27:bb: cf:d4:23:45:9f:f1:b0:b8:18:53:15:db:06:9e:c7:92:78:92: a5:97:7f:9a:bf:a7:fd:0e:81:88:42:a2:80:f9:bf:9d:5f:05: 0c:13:3a:48:06:1c:c3:01:92:7c:11:42:cb:b5:53:37:9b:e7: 69:f6:68:c3:5c:8a:61:1b:58:6e:9a:0f:85:74:84:ba:6b:7d: 94:84:68:f5:68:a1:57:20:7f:ce:47:fd:3d:78:66:a4:ff:b8: 16:5c:3f:c0:95:96:21:da:5b:df:63:e2:03:05:82:81:9c:5c: 1b:19:bb:a4:ed:df:49:49:26:da:f3:72:23:57:1a:bc:49:5d: b5:80:1f:1e:df:8d:a1:31:84:8a:a5:c3:2e:69:fd:43:6d:81: 29:d0:02:4d:a9:a0:24:36:4d:48:9f:c1:05:4e:29:13:4f:8f: 26:42:2a:36:b3:49:e8:95:0e:08:39:f8:50:b1:9a:c9:9e:85: 4a:96:3d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zahfJvgQViigzQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk YzU3ZmI5NGUtOTBjMy00MmE1LTk4MjMtMzA2OTBjYzA2NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYuoherj4lSExZfDUJkUjL4YP9M/GEEChmnQ xat0JHEQ9imkWyCf+agRTKRkFRcMBIYWJ/qPJBgPf95AdkW3L2SeItw9DPtRnUiP RUXn8rr6DHPqMtBczJnXWp7ihSggLN+DfpMlO+wVw/GDqeMiexW0R0Jjxj9EUNuf c/Tw87iL7fzx1lDnjEFF3a/hT7ZdGkWuwh1GdWGrWV9cHSgZGAh9SgBFaw8Ztzsf BliUECtiWFeDlmnvOzoOlZG26DNdPe7c0zWK3vndfI3IHrWSJ+xiZKkve5Aw+qTG g/EoWaDg4hYu1S7AOAScggAI/Hzx685uiD4nz6pdYzR25SWdbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP172FKuNmfEjpHbRo/nUft/fNHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTVhOTYzZTEtZjc4Yi0z ZmU4LWE5NWUtNTRlNzNjOTJiODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2inUITeWeIgVSDJDwGxbbuu7sCjSigX1S3Lkc2t8rPQ7WgXyyAZB2I tfYO5ZjJ22DzgDgmJg0Su8MRR8pjH1N9XfGM1hYnu8/UI0Wf8bC4GFMV2waex5J4 kqWXf5q/p/0OgYhCooD5v51fBQwTOkgGHMMBknwRQsu1Uzeb52n2aMNcimEbWG6a D4V0hLprfZSEaPVooVcgf85H/T14ZqT/uBZcP8CVliHaW99j4gMFgoGcXBsZu6Tt 30lJJtrzciNXGrxJXbWAHx7fjaExhIqlwy5p/UNtgSnQAk2poCQ2TUifwQVOKRNP jyZCKjazSeiVDgg5+FCxmsmehUqWPQo= -----END CERTIFICATE-----Generated at Tue Jul 21 21:46:02 2026 by rpki-client