$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa File: 588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa (raw, json) Hash identifier: gVN1+yY5fWkzIEonsDvvd8HU+iql0ZrzpmiFOa3JKxM= Subject key identifier: E3:69:41:C9:01:87:74:7F:FD:6E:55:67:23:CB:6A:38:66:B4:DF:9E Certificate issuer: /CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Certificate serial: 010D0C9F4328584EA78FBA0C7AD24627CA885200 Authority key identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13725 IP address blocks: 209.205.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:ba:0c:7a:d2:46:27:ca:88:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7fa015b1-3c1c-4b99-a722-f44dda1b258a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:92:ae:61:87:d4:e9:fa:f9:81:9a:d6:e4: bc:2c:68:2d:b1:36:10:04:94:19:c0:e3:6d:ef:bc: 79:08:87:c0:15:c3:42:8d:55:21:72:07:44:79:ad: ba:cf:c5:e9:dc:f1:99:f9:b8:8a:ea:ca:3b:fa:89: 48:e2:aa:d6:ff:50:50:be:9a:05:d7:49:1a:9e:53: a0:ca:99:6a:2c:a3:6a:7b:9b:31:75:eb:55:3a:5e: 86:c9:d2:b8:07:d5:ed:39:f5:7d:37:7d:ba:db:87: 8b:fb:88:08:ca:f5:6c:75:41:47:55:09:76:bb:42: a0:85:3c:40:31:a2:16:07:a3:39:08:04:ca:a0:46: 5d:9e:10:c2:cf:91:46:ba:b6:81:89:47:2a:ca:82: db:b9:c6:16:ac:55:4c:84:fc:88:13:f3:43:8c:78: 73:9a:9b:d2:42:e2:a3:8a:35:dc:56:96:0f:36:7e: bc:dd:5b:b5:82:5c:c6:a7:5e:a0:fd:45:5e:9e:cd: d5:9f:72:0e:44:a3:e9:fd:bd:69:6d:2b:46:63:fe: 35:30:be:94:47:96:38:b9:b9:3d:87:2a:38:21:a1: 43:12:1b:d9:1e:6b:41:58:0e:a4:f2:c8:a9:1a:e3: 73:7e:77:0d:97:22:ea:8a:9d:a2:d0:f3:22:6e:1f: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:69:41:C9:01:87:74:7F:FD:6E:55:67:23:CB:6A:38:66:B4:DF:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl X509v3 Authority Key Identifier: keyid:16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer sbgp-ipAddrBlock: critical IPv4: 209.205.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2b:69:ae:5f:92:99:e0:bc:e1:45:bd:ad:08:a4:a1:3b:77: 84:34:4d:d4:5f:15:6a:38:98:fa:c8:b5:48:b3:3c:05:1e:e1: 5c:34:b3:7a:65:48:c7:dd:b0:62:f8:2e:c6:bf:9c:31:f8:26: 6a:f7:a7:83:df:6c:c0:f0:77:f6:43:c0:09:12:62:e7:25:5e: bf:ce:f9:bb:6b:12:9f:f3:cb:bf:51:12:f3:4b:e9:4b:10:73: e1:ba:1b:da:e2:8e:59:9b:09:08:50:e0:a1:46:ef:fd:22:b6: 92:9f:90:f5:ef:ac:59:ff:ee:fa:c9:eb:32:b4:38:10:0b:1e: fe:99:24:34:c4:62:65:57:f5:75:6c:01:79:fd:16:9c:6e:db: f6:57:1f:91:d0:a9:e3:e7:3a:e7:f6:b5:39:90:62:ad:d8:ce: 5f:af:e2:3d:0f:c7:a3:c6:7b:59:a4:0e:0a:2d:ac:2c:66:c7: fb:c9:1c:d6:3d:f2:2d:8e:b1:b9:ee:5b:53:12:43:bc:23:1b: 0a:02:1f:f0:d9:54:db:1b:36:52:96:2b:8c:fd:9e:c1:21:50: a9:66:2f:08:49:85:da:9d:02:c9:11:c0:2e:19:41:8c:64:48: 6d:ac:72:a0:d1:d3:48:b5:36:b4:89:a6:55:01:c8:07:02:f1: 1c:65:29:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj7oMetJGJ8qIUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlkZjc3YTktNDg3MC00OTVmLWJiZGEtODlmOGUwYWUz MWQyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2ZhMDE1YjEtM2MxYy00Yjk5LWE3MjItZjQ0ZGRhMWIyNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7aSrmGH1On6+YGa1uS8LGgtsTYQBJQZwONt 77x5CIfAFcNCjVUhcgdEea26z8Xp3PGZ+biK6so7+olI4qrW/1BQvpoF10kanlOg yplqLKNqe5sxdetVOl6GydK4B9XtOfV9N32624eL+4gIyvVsdUFHVQl2u0KghTxA MaIWB6M5CATKoEZdnhDCz5FGuraBiUcqyoLbucYWrFVMhPyIE/NDjHhzmpvSQuKj ijXcVpYPNn683Vu1glzGp16g/UVens3Vn3IORKPp/b1pbStGY/41ML6UR5Y4ubk9 hyo4IaFDEhvZHmtBWA6k8sipGuNzfncNlyLqip2i0PMibh9rCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONpQckBh3R//W5VZyPLajhmtN+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OWRm NzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4ZTBhZTMxZDIvNTg4MDA1ZmYtN2ZmMy0z MmUyLTkwNjUtOGExNmMxNWM2YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTlkZjc3YTktNDg3MC00OTVmLWJi ZGEtODlmOGUwYWUzMWQyLzk5ZGY3N2E5LTQ4NzAtNDk1Zi1iYmRhLTg5ZjhlMGFl MzFkMi5jcmwwHwYDVR0jBBgwFoAUFo7+SAwbWBtQwWq+4d3Ws53rl30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OWRmNzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4 ZTBhZTMxZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0c3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQraa5fkpngvOFFva0IpKE7d4Q0TdRfFWo4mPrItUizPAUe4Vw0s3pl SMfdsGL4Lsa/nDH4Jmr3p4PfbMDwd/ZDwAkSYuclXr/O+btrEp/zy79REvNL6UsQ c+G6G9rijlmbCQhQ4KFG7/0itpKfkPXvrFn/7vrJ6zK0OBALHv6ZJDTEYmVX9XVs AXn9Fpxu2/ZXH5HQqePnOuf2tTmQYq3Yzl+v4j0Px6PGe1mkDgotrCxmx/vJHNY9 8i2OsbnuW1MSQ7wjGwoCH/DZVNsbNlKWK4z9nsEhUKlmLwhJhdqdAskRwC4ZQYxk SG2scqDR00i1NrSJplUByAcC8RxlKVw= -----END CERTIFICATE-----Generated at Wed Jul 29 08:47:36 2026 by rpki-client