$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa File: 2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa (raw, json) Hash identifier: NJiO8rglNl2Z4D6T7dsfCdMFFIYwVRr33kjIxKXddK8= Subject key identifier: A5:41:6C:A2:8E:44:FE:48:27:FC:8C:6B:22:8B:AD:51:DA:FB:CB:99 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584EC20C60CA31189610EF59B1E0 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 62943 IP address blocks: 67.221.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:60:ca:31:18:96:10:ef:59:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=5acf5b3b-e3b9-43a4-9d57-e255b8b9b2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:e1:5f:34:ef:83:7a:f5:95:e2:4c:34:fc: 4a:d1:79:96:41:10:2d:0c:e0:42:41:3f:98:40:3f: 0c:5a:10:8c:45:28:fe:08:d1:83:82:53:f3:8b:e4: 0e:b4:52:f8:90:28:42:da:c5:c7:5e:dd:8f:23:78: 65:ee:f3:1d:0a:de:f9:9b:7f:3b:0e:4d:50:88:70: 95:ad:55:db:73:8b:7f:93:43:64:38:6a:7a:b8:75: 30:27:3d:69:bb:09:df:08:0b:5c:c0:03:5f:e5:b1: 91:ff:51:f4:c2:a3:c8:57:6b:7e:b9:fd:22:3a:3a: 72:d1:6d:80:82:a4:7a:0d:24:76:d9:d2:f0:29:7e: 79:51:30:6f:52:43:bd:a2:7b:b5:84:76:06:a9:60: 6e:33:eb:78:db:e5:62:a8:e8:01:3a:8e:de:b8:6f: c7:8e:09:ba:f0:66:f6:65:c5:cc:7a:02:f3:b6:83: 98:00:0e:c8:44:0e:d4:b6:06:ba:42:c1:ef:4c:4a: 95:22:11:37:7b:8d:d3:5c:bd:44:28:a4:96:fa:ad: c2:98:d6:6b:27:11:39:e8:77:a4:b9:f0:1b:d7:b1: 90:4b:3e:75:73:85:4a:78:c3:b0:d0:9d:12:fe:22: dc:29:99:45:b2:49:02:6a:09:c5:ae:a3:8f:46:f3: 70:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:6C:A2:8E:44:FE:48:27:FC:8C:6B:22:8B:AD:51:DA:FB:CB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:52:b8:56:58:4e:1b:26:f2:ad:f0:23:01:aa:ed:1f:49:7a: 5a:91:50:75:af:45:38:0a:86:d8:de:be:6e:2c:ca:e8:1c:bf: 6d:25:64:a9:d0:c3:b5:71:39:84:c7:36:68:b4:35:72:c9:74: 0b:bd:ba:83:4b:42:aa:69:e1:65:a3:d2:b9:57:11:f5:dd:61: 32:aa:0b:28:42:df:f7:0c:f5:57:de:5d:c3:89:fd:e0:15:22: 6b:da:52:cc:a6:cd:32:e1:13:2f:d6:45:0d:78:c7:95:44:da: ac:64:22:72:45:29:9e:9e:d7:d9:b7:bb:8a:f0:1b:58:d2:2a: fd:d0:ed:33:94:9a:e7:e2:31:0b:89:8d:3a:76:94:93:9f:10: 40:de:8c:81:2f:48:24:a3:6d:d5:20:0e:50:3d:0f:f5:b5:fe: 91:05:79:d1:a8:77:ae:9a:71:08:a9:82:2a:87:f3:3f:a2:73: 97:39:ae:88:01:2a:2e:9b:1a:88:65:83:67:63:ae:06:7e:38: 3a:be:2d:b5:52:10:86:27:01:e0:fd:bb:16:d8:6f:eb:e5:34: 85:70:36:20:b6:49:ca:6f:01:5e:81:cf:39:da:ac:34:99:cb: 17:fc:18:5e:88:ef:e6:06:f2:0b:3f:34:37:ad:91:80:fa:f8: 61:66:d4:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGDKMRiWEO9ZseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk NWFjZjViM2ItZTNiOS00M2E0LTlkNTctZTI1NWI4YjliMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0jhXzTvg3r1leJMNPxK0XmWQRAtDOBCQT+Y QD8MWhCMRSj+CNGDglPzi+QOtFL4kChC2sXHXt2PI3hl7vMdCt75m387Dk1QiHCV rVXbc4t/k0NkOGp6uHUwJz1puwnfCAtcwANf5bGR/1H0wqPIV2t+uf0iOjpy0W2A gqR6DSR22dLwKX55UTBvUkO9onu1hHYGqWBuM+t42+ViqOgBOo7euG/Hjgm68Gb2 ZcXMegLztoOYAA7IRA7Utga6QsHvTEqVIhE3e43TXL1EKKSW+q3CmNZrJxE56Hek ufAb17GQSz51c4VKeMOw0J0S/iLcKZlFskkCagnFrqOPRvNwiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVBbKKORP5IJ/yMayKLrVHa+8uZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMmExMDBhZWYtNjllOS0z NzY3LWFiNjYtNzRiMWVlMmU1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ93cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVSuFZYThsm8q3wIwGq7R9JelqRUHWvRTgKhtjevm4syugcv20lZKnQ w7VxOYTHNmi0NXLJdAu9uoNLQqpp4WWj0rlXEfXdYTKqCyhC3/cM9VfeXcOJ/eAV ImvaUsymzTLhEy/WRQ14x5VE2qxkInJFKZ6e19m3u4rwG1jSKv3Q7TOUmufiMQuJ jTp2lJOfEEDejIEvSCSjbdUgDlA9D/W1/pEFedGod66acQipgiqH8z+ic5c5rogB Ki6bGohlg2djrgZ+ODq+LbVSEIYnAeD9uxbYb+vlNIVwNiC2ScpvAV6BzznarDSZ yxf8GF6I7+YG8gs/NDetkYD6+GFm1NU= -----END CERTIFICATE-----Generated at Sun Aug 9 19:23:24 2026 by rpki-client