$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa File: 350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa (raw, json) Hash identifier: YFe0P63oCdulyf21AGysescAi5BotTIkESFLlrPZwO0= Subject key identifier: 68:7C:05:62:97:FE:1D:A8:5E:B3:F1:2F:DD:E6:2F:32:DF:FA:66:59 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584ED001DA2068FC499CD7FDEB80 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 6639 IP address blocks: 208.157.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:da:20:68:fc:49:9c:d7:fd:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=81d4517f-71cd-4912-9686-17fe82630ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:c3:5f:99:fd:73:eb:58:54:00:8a:f5:47: fd:78:a4:c1:7f:c9:26:80:52:1f:d0:f7:dd:b6:cb: c6:fa:6a:56:e8:ab:03:a4:d1:c3:93:98:ab:76:c7: 42:1a:d6:22:af:b9:21:f6:85:d5:22:26:93:45:ef: fc:61:9f:97:f8:f2:d4:0a:5c:c8:0f:46:bb:da:2f: a7:8e:40:28:c2:2a:04:c3:bf:2e:2a:cd:5b:d8:57: 3d:e0:d0:fe:bd:d1:00:60:ea:5c:c1:68:71:9b:e2: 70:5b:2f:71:29:ed:20:50:7b:f3:be:29:fb:a3:f5: ed:87:5b:93:7b:3c:d3:f4:b8:e6:bf:ec:0c:6c:b4: 02:16:a9:6a:22:75:3c:51:40:d8:53:dd:6b:a1:d2: 58:b0:84:d5:5d:c5:5a:71:02:5d:79:8d:97:ce:ad: cc:c6:c0:58:c3:c8:51:97:e1:39:bc:68:9f:92:b9: 21:b4:39:33:b1:28:fc:82:c7:b1:15:88:10:57:f8: c0:f2:15:f4:f9:2f:81:bd:40:4a:b3:5f:d8:2e:81: fc:ec:2f:60:55:a7:11:05:98:3c:dc:a0:db:86:7c: 26:f9:fe:c9:ba:4a:0a:40:52:d8:b7:d8:a8:2b:eb: 23:e3:ac:6b:be:99:70:77:66:d5:6c:e1:c9:28:dc: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:05:62:97:FE:1D:A8:5E:B3:F1:2F:DD:E6:2F:32:DF:FA:66:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.157.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:75:19:7b:92:f0:14:17:81:93:59:90:7d:82:d6:ba:0a:1d: f1:7a:b5:a8:81:88:cc:04:52:41:27:62:1d:42:fe:07:ed:ce: aa:28:86:1f:39:16:95:89:7b:1a:4a:7e:eb:f2:52:cb:e9:86: 8a:5e:35:00:8b:fc:d4:a7:bc:47:ad:82:52:d9:69:62:20:18: b4:b7:a7:67:34:e0:a9:10:e5:32:4d:96:eb:18:86:a6:c2:f4: 16:93:da:12:42:80:83:93:a5:37:ca:31:3b:45:ba:7e:65:bb: 45:06:de:44:f9:97:4b:ab:a5:1a:4a:31:f7:cb:7c:9c:cb:52: 67:15:82:8c:50:bb:f2:b3:15:79:1e:5f:c6:8b:6e:03:90:a5: 39:9f:75:1c:d5:53:bb:4e:5d:75:8f:64:19:df:0a:ba:1a:8d: 1c:aa:76:b4:7c:43:35:92:23:60:cb:a6:a9:a8:6b:bb:7b:cd: 06:12:51:2e:d0:21:a1:67:ef:4c:30:4e:6d:63:b6:ea:34:bc: 37:36:0d:91:a1:22:44:dc:c9:be:59:c7:ad:5e:32:3c:60:8e: 70:c5:08:5a:be:00:a8:ce:d6:e9:dd:e8:a7:86:2f:fa:e3:9a: f7:17:b9:ac:98:87:55:e4:8c:67:74:c5:a2:c1:12:a3:a0:de: c1:b3:8b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdogaPxJnNf964AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODFkNDUxN2YtNzFjZC00OTEyLTk2ODYtMTdmZTgyNjMwYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI7DX5n9c+tYVACK9Uf9eKTBf8kmgFIf0Pfd tsvG+mpW6KsDpNHDk5irdsdCGtYir7kh9oXVIiaTRe/8YZ+X+PLUClzID0a72i+n jkAowioEw78uKs1b2Fc94ND+vdEAYOpcwWhxm+JwWy9xKe0gUHvzvin7o/Xth1uT ezzT9Ljmv+wMbLQCFqlqInU8UUDYU91rodJYsITVXcVacQJdeY2Xzq3MxsBYw8hR l+E5vGifkrkhtDkzsSj8gsexFYgQV/jA8hX0+S+BvUBKs1/YLoH87C9gVacRBZg8 3KDbhnwm+f7JukoKQFLYt9ioK+sj46xrvplwd2bVbOHJKNyDDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh8BWKX/h2oXrPxL93mLzLf+mZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMzUwYTkxODctMjBlNi0z ODU5LWJiZjAtYzVmM2ZhNWQwYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0J2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR1GXuS8BQXgZNZkH2C1roKHfF6taiBiMwEUkEnYh1C/gftzqoohh85 FpWJexpKfuvyUsvphopeNQCL/NSnvEetglLZaWIgGLS3p2c04KkQ5TJNlusYhqbC 9BaT2hJCgIOTpTfKMTtFun5lu0UG3kT5l0urpRpKMffLfJzLUmcVgoxQu/KzFXke X8aLbgOQpTmfdRzVU7tOXXWPZBnfCroajRyqdrR8QzWSI2DLpqmoa7t7zQYSUS7Q IaFn70wwTm1jtuo0vDc2DZGhIkTcyb5Zx61eMjxgjnDFCFq+AKjO1und6KeGL/rj mvcXuayYh1XkjGd0xaLBEqOg3sGzi6o= -----END CERTIFICATE-----Generated at Thu Aug 13 12:53:53 2026 by rpki-client