$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa File: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (raw, json) Hash identifier: PeJ3qGO6xBIBXyHvN9DhPsMUgvgntyb39zTH8jk+Chs= Subject key identifier: 72:85:93:8C:A4:75:43:D4:00:38:D0:52:E2:B3:C7:0F:11:36:6F:12 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584EA79A4E01B2FF141B8BFF7800 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 395700 IP address blocks: 198.137.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:4e:01:b2:ff:14:1b:8b:ff:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=78bb2acc-027c-44be-8563-832d962cff26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:9b:9f:d3:97:11:6c:e2:60:8c:ac:73:32: c7:c3:10:c3:88:7b:c1:00:d7:fd:bc:4c:1f:33:f5: 4f:0c:a9:cc:9f:6b:24:64:df:58:7b:8a:b7:95:3c: 91:ec:17:75:37:ea:70:ff:09:1a:14:77:f9:ae:f7: 44:ca:85:86:91:5b:91:59:44:7c:9f:0d:7d:d9:d2: f0:a9:e1:cb:fa:7c:ac:61:03:52:a9:03:e1:e6:81: a7:53:ab:1e:02:95:68:0b:4a:77:f8:ee:9d:e6:a1: 2f:36:98:40:13:48:84:09:3d:cc:77:15:ec:38:b1: e2:10:1d:ea:bc:f5:43:d6:1f:c9:a7:dd:d6:56:94: 81:5a:e3:95:ed:1d:1d:a2:ba:71:35:56:b7:62:ec: 1a:66:89:53:42:da:bb:3e:f5:36:64:9d:02:d9:86: d0:50:6a:f2:8a:37:37:e3:08:ff:33:42:c8:73:ec: 18:df:3a:25:56:da:fc:50:62:c0:21:68:84:df:64: c9:ad:e7:08:a2:d2:48:fb:61:70:1e:2e:03:42:b6: 75:49:3d:5f:ee:3f:37:17:42:bf:80:c8:1d:8e:c6: f2:ec:09:fe:ef:97:4d:2e:75:50:f1:ea:9e:04:70: d1:1d:19:dd:52:9b:ee:29:6d:ec:1a:4f:7d:ad:07: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:93:8C:A4:75:43:D4:00:38:D0:52:E2:B3:C7:0F:11:36:6F:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a2:2b:a0:54:ca:bd:3d:f5:cc:85:10:51:42:83:45:a1:e0: 77:2a:43:e7:34:e8:2e:d9:5f:16:be:67:73:51:94:43:7a:f6: 40:f9:e5:45:18:71:39:99:99:7d:d3:50:e0:d7:27:a8:4c:0b: de:75:2b:49:e6:f9:88:1d:13:2c:85:ba:ab:69:e1:40:0b:58: 83:2b:26:5b:b3:d3:a8:11:cc:16:42:cf:13:22:f6:16:01:53: ae:60:fa:79:df:b1:fa:bc:b7:07:f5:90:a3:90:a7:60:8e:7d: fe:d0:f2:34:e1:87:91:e9:26:ea:f1:b1:e3:85:9f:ad:64:69: 9b:2b:bd:1e:39:cf:5e:46:08:5a:38:fb:0a:a1:27:84:b2:44: dc:2f:d2:e5:2e:7d:b8:37:ee:33:7f:d0:b9:38:d1:69:10:fc: 9c:84:d8:43:d3:7b:e0:cb:46:1f:35:c5:00:de:3e:5e:2f:34: f4:c6:2f:af:1f:1a:b5:0a:0f:95:0b:5f:aa:ee:2e:eb:ef:d6: af:88:fe:0f:c5:14:7d:df:ed:57:9a:49:61:8f:88:33:1e:ad: df:cc:0d:73:c4:61:be:e8:0f:e3:6f:36:d6:c9:f5:fa:67:7a: 6b:6f:59:aa:c4:e4:31:68:5f:40:c6:5f:b9:1e:23:9f:0b:e1: 93:76:ce:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmk4Bsv8UG4v/eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzhiYjJhY2MtMDI3Yy00NGJlLTg1NjMtODMyZDk2MmNmZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodWbn9OXEWziYIysczLHwxDDiHvBANf9vEwf M/VPDKnMn2skZN9Ye4q3lTyR7Bd1N+pw/wkaFHf5rvdEyoWGkVuRWUR8nw192dLw qeHL+nysYQNSqQPh5oGnU6seApVoC0p3+O6d5qEvNphAE0iECT3MdxXsOLHiEB3q vPVD1h/Jp93WVpSBWuOV7R0dorpxNVa3YuwaZolTQtq7PvU2ZJ0C2YbQUGryijc3 4wj/M0LIc+wY3zolVtr8UGLAIWiE32TJrecIotJI+2FwHi4DQrZ1ST1f7j83F0K/ gMgdjsby7An+75dNLnVQ8eqeBHDRHRndUpvuKW3sGk99rQcjywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKFk4ykdUPUADjQUuKzxw8RNm8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYjM5M2QyZTEtZGZjNy0z OTU1LWJhODMtZTZjM2UwYjZiNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKiK6BUyr099cyFEFFCg0Wh4HcqQ+c06C7ZXxa+Z3NRlEN69kD55UUY cTmZmX3TUODXJ6hMC951K0nm+YgdEyyFuqtp4UALWIMrJluz06gRzBZCzxMi9hYB U65g+nnfsfq8twf1kKOQp2COff7Q8jThh5HpJurxseOFn61kaZsrvR45z15GCFo4 +wqhJ4SyRNwv0uUufbg37jN/0Lk40WkQ/JyE2EPTe+DLRh81xQDePl4vNPTGL68f GrUKD5ULX6ruLuvv1q+I/g/FFH3f7VeaSWGPiDMerd/MDXPEYb7oD+NvNtbJ9fpn emtvWarE5DFoX0DGX7keI58L4ZN2zrY= -----END CERTIFICATE-----Generated at Wed Jul 29 09:51:43 2026 by rpki-client