$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa File: 039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa (raw, json) Hash identifier: rm3yvuuNZQPaLoxSaMGnp2ms2SQ7ZFKgWtR9EKCyYS4= Subject key identifier: B1:71:22:68:AE:66:44:66:4F:F9:99:25:5B:18:53:42:D3:20:62:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64F9565A98F3A157404B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 209.17.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f9:56:5a:98:f3:a1:57:40:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=bf02ee61-3c49-4a5d-9f94-8cabf517a934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:04:b0:fb:39:ef:3e:3e:80:d5:3f:39:54: 91:13:97:af:7a:c1:a0:93:f8:d5:dc:a4:f9:29:7b: e3:52:26:d1:8a:8a:40:c2:be:76:72:8e:a1:8c:f6: 9f:99:9f:2c:59:fd:f7:ce:45:47:83:f8:e2:71:46: 5e:48:3f:ef:f1:45:98:fb:8e:37:b8:b6:8f:16:82: 7f:2e:25:fd:91:7b:51:dc:0e:02:23:f3:73:17:ec: ef:55:0a:00:45:3f:d8:aa:42:ab:34:33:35:6c:02: c6:20:5a:15:7b:56:18:f4:a6:1c:90:64:e3:d7:0c: 8f:0a:d6:d5:d3:74:c0:34:07:2e:77:3c:2a:63:aa: 3c:16:d7:03:41:11:6b:fb:41:65:7d:5a:80:44:b1: 8e:b2:f9:81:2b:ca:15:1a:ab:7a:59:ad:cd:a0:44: bd:ec:1a:36:17:ff:f4:de:85:8f:6b:a5:af:94:26: e4:97:1b:d7:87:32:c9:9d:bb:80:f7:b2:a9:78:69: 65:e0:df:17:79:f8:79:c9:db:fe:75:33:f0:c0:fc: 22:37:ae:a6:d4:c1:70:36:66:78:a1:59:6d:19:a5: 05:38:83:1d:07:de:bf:a1:11:f6:99:d3:67:7d:e8: bb:a9:26:ab:f0:27:a1:43:c7:40:6f:be:35:7d:d6: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:71:22:68:AE:66:44:66:4F:F9:99:25:5B:18:53:42:D3:20:62:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/039887d3-7636-3f02-9ce7-7e6cfd10d1f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:46:ed:9b:45:cc:b9:e1:61:23:ee:6b:39:91:b6:3e:4d:69: 77:af:b6:90:78:68:16:70:9c:9a:94:29:76:91:0e:6f:79:0b: 4f:b8:9c:36:b7:2c:8f:93:30:82:bd:35:14:f0:82:3a:0f:a2: c8:a5:5b:d0:25:07:24:4e:2d:94:2c:ad:33:ab:34:ed:8a:c5: eb:37:39:ca:a9:65:f9:8a:37:d0:00:0b:86:cd:35:30:38:b5: 37:23:d7:0f:49:fa:d5:3d:16:23:db:75:30:0e:3d:63:39:bc: 9f:67:a5:e4:06:8b:b3:27:62:10:47:c5:9d:67:05:e5:cc:1a: 2c:d2:7e:22:cc:89:a1:66:8e:4f:77:fb:4e:04:4f:4b:13:5d: bf:b1:d4:d7:e8:56:42:2a:25:59:22:bf:77:69:aa:54:82:86: 68:9d:58:9e:23:91:9f:7d:8e:0a:24:f2:a0:c5:b1:17:69:92: 4c:ed:a4:4d:c6:9d:8b:ca:73:32:92:cd:87:33:26:90:af:cf: a8:07:44:73:6c:19:0b:8d:b2:e0:36:76:47:d9:f2:c2:5a:28: 58:4c:cb:d6:5b:55:a7:f5:4a:33:b1:85:b2:0f:16:95:57:a6: 1b:d6:ab:3f:5d:48:c3:38:c4:2b:5a:3b:db:2e:29:c4:0a:62: dc:1b:34:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPlWWpjzoVdASwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk YmYwMmVlNjEtM2M0OS00YTVkLTlmOTQtOGNhYmY1MTdhOTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+cEsPs57z4+gNU/OVSRE5evesGgk/jV3KT5 KXvjUibRiopAwr52co6hjPafmZ8sWf33zkVHg/jicUZeSD/v8UWY+443uLaPFoJ/ LiX9kXtR3A4CI/NzF+zvVQoART/YqkKrNDM1bALGIFoVe1YY9KYckGTj1wyPCtbV 03TANAcudzwqY6o8FtcDQRFr+0FlfVqARLGOsvmBK8oVGqt6Wa3NoES97Bo2F//0 3oWPa6WvlCbklxvXhzLJnbuA97KpeGll4N8Xefh5ydv+dTPwwPwiN66m1MFwNmZ4 oVltGaUFOIMdB96/oRH2mdNnfei7qSar8CehQ8dAb741fdZ4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFxImiuZkRmT/mZJVsYU0LTIGKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDM5ODg3ZDMtNzYzNi0z ZjAyLTljZTctN2U2Y2ZkMTBkMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAING7ZtFzLnhYSPuazmRtj5NaXevtpB4aBZwnJqUKXaRDm95C0+4nDa3 LI+TMIK9NRTwgjoPosilW9AlByROLZQsrTOrNO2Kxes3OcqpZfmKN9AAC4bNNTA4 tTcj1w9J+tU9FiPbdTAOPWM5vJ9npeQGi7MnYhBHxZ1nBeXMGizSfiLMiaFmjk93 +04ET0sTXb+x1NfoVkIqJVkiv3dpqlSChmidWJ4jkZ99jgok8qDFsRdpkkztpE3G nYvKczKSzYczJpCvz6gHRHNsGQuNsuA2dkfZ8sJaKFhMy9ZbVaf1SjOxhbIPFpVX phvWqz9dSMM4xCtaO9suKcQKYtwbNNg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:05 2026 by rpki-client