$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa File: f97a8904-a92b-3e71-9209-0e718ad0a126.roa (raw, json) Hash identifier: /XLdjvqYT1TYIrY7LCm4Oer+xggSar8LTLKoInbW0EI= Subject key identifier: 9A:F7:5A:94:EB:9A:85:C0:64:40:69:97:00:BD:6C:03:33:A8:F0:10 Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F4328584EA78F75A0A67094B5AFB2D700 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10753 IP address blocks: 192.228.18.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:75:a0:a6:70:94:b5:af:b2:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dcd3b355-2b8c-4d96-b508-865d2d04c10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:2d:c9:d9:fc:f0:9d:73:75:78:47:10:16: da:62:de:f0:d8:5c:b8:12:d6:2b:9a:cd:0b:ab:ca: 1d:2c:d1:98:64:0f:45:6a:24:41:ab:da:b6:22:f0: 14:3f:fb:05:2a:73:d0:e2:92:e9:72:77:f2:3a:0f: dd:9c:91:7c:73:2f:17:c1:0d:3b:15:98:17:22:5a: 63:d3:a5:7e:22:68:e1:23:4d:36:da:f1:c9:d9:88: 2f:aa:95:d0:b1:d8:af:94:a2:9f:ca:d8:64:6c:99: b7:10:08:54:fa:40:28:71:b3:b8:2f:97:9e:f7:ea: 3e:58:8b:91:8b:4e:cf:9c:5b:20:82:78:a2:02:c6: 85:2f:e6:7e:02:82:66:63:9f:b3:24:7e:c4:88:fd: d7:8e:0b:22:15:a3:9c:8d:bf:41:79:dc:38:11:1f: 4b:91:1a:01:28:e0:45:e5:aa:c7:f9:da:9e:8c:6c: ce:ba:4a:f4:f6:c0:88:88:4b:d1:29:27:6a:5f:0d: 96:65:d0:81:5b:b7:7c:f1:ac:4f:bd:67:99:9c:07: de:78:b2:30:36:b8:aa:28:09:e7:b5:32:8a:a4:de: a3:3f:0f:19:c5:2e:a5:94:55:e8:6a:5c:4d:a9:d3: 3e:1d:5a:b5:04:2d:f9:40:7c:9e:2f:aa:b7:05:10: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:5A:94:EB:9A:85:C0:64:40:69:97:00:BD:6C:03:33:A8:F0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/f97a8904-a92b-3e71-9209-0e718ad0a126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4d:92:b2:45:e7:37:89:83:48:ee:e1:c7:78:9c:bf:f6:0f: 57:68:c8:3f:f0:d2:cd:82:c2:a0:d2:6a:3f:cc:0e:a1:07:7e: 41:2c:f4:11:4c:08:58:05:0a:82:61:cf:58:c4:dc:1d:55:d6: f9:99:24:1a:3a:87:de:76:fd:2e:bd:ec:bb:96:e8:80:e8:62: 25:fa:ed:8a:8d:14:86:40:a0:d7:af:44:45:31:b2:69:2e:5d: a9:03:1d:20:c9:6b:22:4a:08:e2:9f:9b:7c:43:82:b9:8e:43: 8a:cf:82:29:26:dc:4f:6e:ac:7d:8b:ef:60:49:b6:72:69:c0: 62:88:74:25:60:92:a6:bd:14:f3:09:9c:ae:db:3c:78:92:d3: 42:c4:d7:97:aa:75:cd:10:df:3e:aa:7f:80:29:ba:8a:a9:2b: 25:f9:dd:75:9a:ae:b6:e8:4b:46:fa:30:4a:83:73:a5:d1:ec: 93:cc:ef:d1:c0:32:1a:52:24:85:20:0e:ad:3b:86:5c:e6:7e: 3d:1a:aa:11:6f:f1:79:1b:39:07:98:56:04:a5:b1:39:64:13: 72:1e:9a:3c:a6:b1:ea:09:06:f7:5a:80:77:39:d3:74:23:6e: 3c:d9:40:6e:36:ab:43:5d:ff:55:8a:03:36:e2:76:60:f4:f8: c0:63:c0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3WgpnCUta+y1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGNkM2IzNTUtMmI4Yy00ZDk2LWI1MDgtODY1ZDJkMDRjMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Qtydn88J1zdXhHEBbaYt7w2Fy4EtYrms0L q8odLNGYZA9FaiRBq9q2IvAUP/sFKnPQ4pLpcnfyOg/dnJF8cy8XwQ07FZgXIlpj 06V+ImjhI0022vHJ2YgvqpXQsdivlKKfythkbJm3EAhU+kAocbO4L5ee9+o+WIuR i07PnFsggniiAsaFL+Z+AoJmY5+zJH7EiP3XjgsiFaOcjb9Bedw4ER9LkRoBKOBF 5arH+dqejGzOukr09sCIiEvRKSdqXw2WZdCBW7d88axPvWeZnAfeeLIwNriqKAnn tTKKpN6jPw8ZxS6llFXoalxNqdM+HVq1BC35QHyeL6q3BRAnfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr3WpTrmoXAZEBplwC9bAMzqPAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvZjk3YTg5MDQtYTkyYi0z ZTcxLTkyMDktMGU3MThhZDBhMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9NkrJF5zeJg0ju4cd4nL/2D1doyD/w0s2CwqDSaj/MDqEHfkEs9BFM CFgFCoJhz1jE3B1V1vmZJBo6h952/S697LuW6IDoYiX67YqNFIZAoNevREUxsmku XakDHSDJayJKCOKfm3xDgrmOQ4rPgikm3E9urH2L72BJtnJpwGKIdCVgkqa9FPMJ nK7bPHiS00LE15eqdc0Q3z6qf4ApuoqpKyX53XWarrboS0b6MEqDc6XR7JPM79HA MhpSJIUgDq07hlzmfj0aqhFv8XkbOQeYVgSlsTlkE3IemjymseoJBvdagHc503Qj bjzZQG42q0Nd/1WKAzbidmD0+MBjwP0= -----END CERTIFICATE-----Generated at Thu Jul 30 06:52:46 2026 by rpki-client