$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa File: d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa (raw, json) Hash identifier: huM+3i9LtXzJoNOK/iB78H4CmRYRVLtqUz6W+ya+bR4= Subject key identifier: 33:FA:7D:D0:82:2E:23:56:EE:BA:10:5C:74:5F:D8:F3:77:F9:99:98 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584EC20C5B8D0CD7A168DCEC3080 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 62943 IP address blocks: 209.152.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:5b:8d:0c:d7:a1:68:dc:ec:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=7046b4b7-e096-47ba-9c32-66610eb9c580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:53:10:b2:09:3a:a4:40:af:3b:4c:41:c4: c4:26:4a:82:16:f2:47:05:15:a7:f3:77:fa:22:9d: e8:08:45:40:3a:6a:11:59:a5:2e:6d:18:20:dd:53: ca:e5:ba:45:4b:2a:91:29:c6:e2:32:61:03:6e:a8: ed:34:04:7e:b1:b1:40:6f:6c:f9:1d:08:fa:b0:c6: c6:52:89:5e:df:90:84:d1:11:5b:56:3a:4f:51:f2: ab:05:2a:9e:a8:08:aa:5c:fb:dd:4d:aa:a4:bc:7b: 77:9f:b8:26:cd:46:97:54:fd:65:89:57:ad:2c:56: a5:db:0f:da:01:99:dd:88:66:ec:ea:a1:cf:b8:fa: f2:46:44:11:60:be:50:d2:d8:57:22:87:43:9b:d5: 4a:cf:bc:2c:cf:0c:9d:8d:5d:1a:ca:4e:d9:67:55: 71:99:c2:be:4e:9d:a9:ed:c5:10:89:e1:67:40:5c: 82:97:0c:da:e9:8e:89:0c:bf:15:61:2e:09:d6:7a: d0:72:52:56:d5:6a:9e:04:ff:83:c3:30:5f:1e:eb: 28:cb:52:2b:ab:d8:b8:c4:f3:d9:57:92:4d:cb:1b: f9:6c:80:e7:c6:39:9a:b2:c7:e7:fb:d4:4a:0b:38: 78:9f:df:a1:2a:00:9b:03:b1:6a:1d:b4:56:ff:e7: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FA:7D:D0:82:2E:23:56:EE:BA:10:5C:74:5F:D8:F3:77:F9:99:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e2:a2:be:55:f5:0b:3b:32:ee:3a:44:35:d1:1a:7a:1e:bc: 52:45:3d:e2:f0:fb:8c:d7:83:88:49:f5:38:3f:af:59:a1:0f: 8a:a9:2a:63:7c:b3:dd:db:d5:a6:f0:63:9a:22:94:96:1e:4e: fb:f7:50:e7:90:f2:26:92:39:e7:19:ed:23:54:d9:c2:6d:c8: 01:74:43:be:94:ec:96:1d:60:14:51:4c:12:8d:7a:57:80:89: e0:fd:fd:59:ca:6d:38:ed:fd:66:0c:d8:36:48:1c:77:6c:6c: a6:a7:f8:b3:1f:11:3e:18:48:23:b6:d0:80:3b:35:c6:4f:33: 58:59:12:21:41:b0:e6:e9:6f:b1:32:8d:8f:0e:dc:c4:83:97: a3:06:02:70:a1:75:76:d9:3f:b0:64:81:09:80:20:57:06:c4: 38:8a:7f:5c:6b:92:65:bc:de:70:f0:39:18:3e:ff:53:77:f4: 67:9b:8c:2e:22:c4:24:62:2c:72:f2:10:3b:79:24:dd:b9:72: 82:34:de:53:50:a6:d3:0b:5e:70:e3:b1:38:e3:78:86:7b:70: 59:23:e6:ad:62:42:9b:4a:b4:67:a1:8e:4f:78:b3:5a:ee:f8: 6b:0d:5c:43:03:5c:55:4c:19:bd:b8:73:91:4d:99:6c:ec:70: 3d:a4:62:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDFuNDNehaNzsMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk NzA0NmI0YjctZTA5Ni00N2JhLTljMzItNjY2MTBlYjljNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthtTELIJOqRArztMQcTEJkqCFvJHBRWn83f6 Ip3oCEVAOmoRWaUubRgg3VPK5bpFSyqRKcbiMmEDbqjtNAR+sbFAb2z5HQj6sMbG Uole35CE0RFbVjpPUfKrBSqeqAiqXPvdTaqkvHt3n7gmzUaXVP1liVetLFal2w/a AZndiGbs6qHPuPryRkQRYL5Q0thXIodDm9VKz7wszwydjV0ayk7ZZ1VxmcK+Tp2p 7cUQieFnQFyClwza6Y6JDL8VYS4J1nrQclJW1WqeBP+DwzBfHusoy1Irq9i4xPPZ V5JNyxv5bIDnxjmassfn+9RKCzh4n9+hKgCbA7FqHbRW/+dkMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP6fdCCLiNW7roQXHRf2PN3+ZmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvZDhmNzRlYTQtZDZjNy0z Y2UxLWJkNDEtNGJkNmNlYjg4MWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLior5V9Qs7Mu46RDXRGnoevFJFPeLw+4zXg4hJ9Tg/r1mhD4qpKmN8 s93b1abwY5oilJYeTvv3UOeQ8iaSOecZ7SNU2cJtyAF0Q76U7JYdYBRRTBKNeleA ieD9/VnKbTjt/WYM2DZIHHdsbKan+LMfET4YSCO20IA7NcZPM1hZEiFBsObpb7Ey jY8O3MSDl6MGAnChdXbZP7BkgQmAIFcGxDiKf1xrkmW83nDwORg+/1N39GebjC4i xCRiLHLyEDt5JN25coI03lNQptMLXnDjsTjjeIZ7cFkj5q1iQptKtGehjk94s1ru +GsNXEMDXFVMGb24c5FNmWzscD2kYns= -----END CERTIFICATE-----Generated at Sun Aug 9 19:21:43 2026 by rpki-client