$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa File: c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa (raw, json) Hash identifier: C6WTQr+idjr4GvFrH1KRw2Z9KwxyJyWfkRzPM+sRKY8= Subject key identifier: 73:CD:85:51:2E:80:91:43:6F:F6:4C:48:E7:B7:51:FD:93:A4:CF:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6C6F7280D0F043B1B1D08B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 63949 IP address blocks: 172.235.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:72:80:d0:f0:43:b1:b1:d0:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=75e72e52-6a1b-4a4d-8fb5-6c5c60d3066f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:c1:40:66:bc:60:e9:40:67:bf:14:5f:17: ca:bd:dd:85:fe:6f:7f:71:32:79:2d:ea:fb:83:3e: cb:a2:3b:5a:07:c1:e9:13:8a:6b:d3:42:4b:36:c5: b3:1b:0b:ce:40:28:6a:72:9c:03:80:2c:1c:74:8c: 81:5d:59:2d:ff:50:1a:85:4e:88:a5:f0:d2:4b:fa: 50:f3:09:28:a5:5e:7e:83:35:36:6b:29:f0:89:14: e5:e4:f8:a3:a8:33:b4:27:00:20:e1:b8:36:7e:63: dc:6e:d2:aa:1c:66:de:db:58:3d:10:73:d4:93:7c: f4:34:97:df:1b:2a:ad:d2:ba:7a:3e:3f:1b:fc:1c: 40:e8:fc:a3:87:14:98:26:56:d1:97:3c:6e:a4:7c: 0b:47:5f:88:ae:c8:62:c3:c0:0c:28:76:25:31:de: 24:30:e1:71:94:83:39:5d:27:16:eb:21:c0:aa:89: f5:40:ce:20:50:e5:15:ea:75:e1:a4:4a:b9:80:60: 63:ce:89:e3:bf:2e:4b:cd:ce:81:23:00:2a:9e:72: a2:3c:d0:1d:ab:57:69:eb:e0:3e:21:5a:f4:ff:20: e9:64:9f:88:60:2e:52:3e:f0:d0:60:12:68:1a:dc: e1:c3:10:a2:31:8b:df:c5:b2:0e:bc:1b:c0:24:18: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CD:85:51:2E:80:91:43:6F:F6:4C:48:E7:B7:51:FD:93:A4:CF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f3:fe:a4:a3:fc:ae:06:cb:84:2a:9a:02:e1:58:f3:a1:8a: e4:22:6f:de:cc:7d:79:b9:43:0e:13:9e:bf:24:b4:8d:c8:c3: 2f:1d:09:73:1c:99:28:50:fc:da:dd:e3:77:be:7e:7a:77:8d: 46:d0:db:40:4c:78:67:91:bd:05:36:4e:a5:c3:3f:a0:ea:bd: b2:54:d3:7a:73:89:6f:47:80:f5:13:a7:f1:b4:4f:86:48:2c: 6c:6d:03:04:56:2e:fb:ef:4e:42:0c:d6:2e:73:11:d2:21:e3: 74:74:75:eb:5f:8c:2c:7a:83:3c:b1:f9:55:b2:7b:e5:03:f8: be:eb:aa:bc:9f:9a:08:19:66:1f:10:dc:2f:80:41:00:f6:d4: c9:6c:c3:88:94:f6:7e:48:74:b2:06:95:66:fb:51:74:97:4c: e8:f1:68:fa:ab:31:38:fb:1c:ef:24:81:de:8e:e6:1d:ef:c3: e2:90:fc:47:26:1a:52:76:44:a7:92:38:b1:de:69:6c:62:db: 4d:34:00:7e:64:b4:86:c4:10:8e:6c:bd:3b:8c:71:72:25:42: 9c:7a:4f:c5:95:8a:2e:3a:dc:0b:f5:0f:68:10:d6:e4:28:e0: 40:63:61:4f:59:1a:d2:4c:9c:55:d3:bf:95:e3:ce:62:4f:bd: ed:0b:f0:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb3KA0PBDsbHQi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk NzVlNzJlNTItNmExYi00YTRkLThmYjUtNmM1YzYwZDMwNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3PBQGa8YOlAZ78UXxfKvd2F/m9/cTJ5Ler7 gz7LojtaB8HpE4pr00JLNsWzGwvOQChqcpwDgCwcdIyBXVkt/1AahU6IpfDSS/pQ 8wkopV5+gzU2aynwiRTl5PijqDO0JwAg4bg2fmPcbtKqHGbe21g9EHPUk3z0NJff Gyqt0rp6Pj8b/BxA6PyjhxSYJlbRlzxupHwLR1+Irshiw8AMKHYlMd4kMOFxlIM5 XScW6yHAqon1QM4gUOUV6nXhpEq5gGBjzonjvy5Lzc6BIwAqnnKiPNAdq1dp6+A+ IVr0/yDpZJ+IYC5SPvDQYBJoGtzhwxCiMYvfxbIOvBvAJBijmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPNhVEugJFDb/ZMSOe3Uf2TpM+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMzM2FiYzMtN2ZmMi0z YWZiLTgwZmYtNmY1ZjlmMjU3NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjz/qSj/K4Gy4QqmgLhWPOhiuQib97MfXm5Qw4Tnr8ktI3Iwy8dCXMc mShQ/Nrd43e+fnp3jUbQ20BMeGeRvQU2TqXDP6DqvbJU03pziW9HgPUTp/G0T4ZI LGxtAwRWLvvvTkIM1i5zEdIh43R0detfjCx6gzyx+VWye+UD+L7rqryfmggZZh8Q 3C+AQQD21Mlsw4iU9n5IdLIGlWb7UXSXTOjxaPqrMTj7HO8kgd6O5h3vw+KQ/Ecm GlJ2RKeSOLHeaWxi2000AH5ktIbEEI5svTuMcXIlQpx6T8WVii463Av1D2gQ1uQo 4EBjYU9ZGtJMnFXTv5XjzmJPve0L8Ds= -----END CERTIFICATE-----Generated at Tue Jul 21 22:20:44 2026 by rpki-client