$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa File: 2a0d65f4-0bf8-3733-8250-200e7634a82c.roa (raw, json) Hash identifier: xm2Asq81/CGjMNUU6X70kccUWLK+G80YxMQgG84jw2E= Subject key identifier: A3:4B:21:04:C4:02:AD:E1:DC:7F:4D:EB:B4:87:61:18:3A:F2:BA:29 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584EA0154F905104B08F800DAC80 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 10430 IP address blocks: 168.99.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:4f:90:51:04:b0:8f:80:0d:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=8efb8233-94fa-4d77-a5c8-562fa237d6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:75:81:36:2d:02:50:da:22:d6:e8:e7:44: 3e:c2:ee:92:dc:37:16:46:45:50:a5:6d:8f:0f:65: 41:1a:05:b6:63:00:a3:22:8f:eb:02:b0:bb:bf:4b: 67:79:82:35:04:0b:19:41:31:fa:dc:2b:2a:a6:7b: ee:5e:08:23:ab:c3:a4:a9:1f:32:be:09:36:99:92: 79:3c:c0:ad:ed:34:4e:56:5c:83:3d:fd:48:be:20: 3c:26:e2:7d:b3:22:f1:51:28:7d:fc:88:88:26:a2: 0a:a6:6a:dd:70:2d:23:a2:cb:1c:8c:d0:36:84:52: a1:3e:5b:04:31:da:f2:57:9e:be:a3:41:ad:fa:81: c3:bf:b2:7b:bb:3f:d9:c6:4b:d2:cf:08:2d:f8:f2: c5:19:8d:ae:8e:8d:75:1f:7c:fd:05:26:fc:2b:85: 37:ba:a6:d5:c9:1a:cb:4f:e0:7c:ff:7c:3c:ab:9e: 44:4e:78:d7:c4:3c:31:56:77:53:84:bc:14:80:32: fc:50:0c:36:e7:75:6a:17:b7:e3:20:81:2b:b1:b7: c2:96:e8:c6:7b:23:1e:4b:d1:8a:6b:24:f8:ac:5f: b9:4d:7a:0f:24:87:bf:91:9b:d1:1a:67:10:d6:13: 46:25:1a:fb:c7:2b:1d:84:8b:aa:8d:f5:95:0d:d2: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4B:21:04:C4:02:AD:E1:DC:7F:4D:EB:B4:87:61:18:3A:F2:BA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/2a0d65f4-0bf8-3733-8250-200e7634a82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 168.99.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:41:e0:42:a3:05:e3:f2:fe:d9:7c:42:3a:9d:54:28:48:fc: d8:c5:e1:f4:b3:7f:8d:51:6e:6a:28:81:01:f1:1a:91:d4:3f: e6:2c:41:d3:a9:3b:b5:d6:1d:3b:3b:42:16:f4:76:b0:99:7e: f2:80:49:88:e6:52:ee:4d:a6:9a:85:c8:f2:ea:22:25:06:f5: 8d:b9:e3:c4:d5:38:55:f9:86:3b:a8:cb:c7:37:9f:57:f5:49: af:0c:1e:cb:0e:8d:b2:ea:ad:76:8e:4b:d9:91:e0:b5:13:f7: d2:42:eb:ff:4a:f9:b5:c6:bc:e9:b6:81:3a:ee:fc:ea:50:0f: ab:17:c8:2a:74:6e:b0:39:79:b0:ae:e4:bd:cd:cf:e3:a9:21: 89:ac:31:e6:69:15:fc:c2:1c:d6:18:6d:62:9f:c3:6a:b0:44: af:4c:a8:8c:82:93:c6:1f:1a:b9:c1:c1:1e:74:e4:98:49:3e: 0b:a8:b2:06:d7:a4:37:38:1e:ec:22:cd:2b:9e:63:13:37:cb: 3a:a4:ef:6a:65:62:5d:e5:72:7c:a7:88:a1:1e:02:98:60:38: b8:62:af:a9:1c:5d:22:ce:25:61:64:00:be:4d:4c:f5:83:93: 04:96:fb:b7:16:6e:22:6f:b3:84:67:68:35:66:0b:c7:1e:7d: 70:6d:6a:5d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6gFU+QUQSwj4ANrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk OGVmYjgyMzMtOTRmYS00ZDc3LWE1YzgtNTYyZmEyMzdkNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPh1gTYtAlDaItbo50Q+wu6S3DcWRkVQpW2P D2VBGgW2YwCjIo/rArC7v0tneYI1BAsZQTH63CsqpnvuXggjq8OkqR8yvgk2mZJ5 PMCt7TROVlyDPf1IviA8JuJ9syLxUSh9/IiIJqIKpmrdcC0josscjNA2hFKhPlsE MdryV56+o0Gt+oHDv7J7uz/ZxkvSzwgt+PLFGY2ujo11H3z9BSb8K4U3uqbVyRrL T+B8/3w8q55ETnjXxDwxVndThLwUgDL8UAw253VqF7fjIIErsbfClujGeyMeS9GK ayT4rF+5TXoPJIe/kZvRGmcQ1hNGJRr7xysdhIuqjfWVDdIyiwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKNLIQTEAq3h3H9N67SHYRg68ropMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvMmEwZDY1ZjQtMGJmOC0z NzMzLTgyNTAtMjAwZTc2MzRhODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqGMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaEHgQqMF4/L+2XxCOp1UKEj82MXh9LN/jVFuaiiBAfEakdQ/5ixB06k7 tdYdOztCFvR2sJl+8oBJiOZS7k2mmoXI8uoiJQb1jbnjxNU4VfmGO6jLxzefV/VJ rwweyw6Nsuqtdo5L2ZHgtRP30kLr/0r5tca86baBOu786lAPqxfIKnRusDl5sK7k vc3P46khiawx5mkV/MIc1hhtYp/DarBEr0yojIKTxh8aucHBHnTkmEk+C6iyBtek Nzge7CLNK55jEzfLOqTvamViXeVyfKeIoR4CmGA4uGKvqRxdIs4lYWQAvk1M9YOT BJb7txZuIm+zhGdoNWYLxx59cG1qXQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:46:11 2026 by rpki-client