$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa File: 3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa (raw, json) Hash identifier: 0KgcwZOxKMHmQh0T9MpfOKFVzU5cPrg+FUj8lzQU3Jg= Subject key identifier: BF:99:10:28:80:10:6B:A4:3C:5B:99:83:5B:96:04:D4:4B:F7:51:09 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584EA79C3F07DE6BE22832455DE0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11404 IP address blocks: 206.192.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:3f:07:de:6b:e2:28:32:45:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=71a52c80-1c61-4348-86b0-85cedc8b2299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:46:19:5c:8b:98:87:25:86:e1:97:3d:63: e5:6d:54:de:29:42:6e:bb:da:f2:16:0e:31:7e:c0: d0:54:b7:44:65:6d:13:5a:17:2e:7d:48:22:46:65: e0:b3:6e:2b:f9:d3:ff:1b:74:66:e6:46:37:cb:6f: 8b:b5:3b:54:20:03:a0:b1:e2:43:46:d6:8d:b4:5e: 3f:95:c8:6b:01:e6:2c:a5:2d:52:69:1d:4b:af:62: 45:e3:33:31:23:80:b9:3a:ea:c6:87:e7:57:d3:24: 35:3f:00:c3:b5:df:f9:76:33:21:01:a4:37:d5:f7: 05:7c:10:73:15:54:d9:78:3b:f0:0a:5d:05:4a:83: 99:3c:1d:71:bd:ee:6a:be:29:da:68:e6:19:66:ff: bf:4e:42:db:82:a0:42:0b:6d:0f:bc:52:f3:d2:de: 6e:e8:7f:75:31:ca:de:b8:79:47:03:17:9d:f6:91: 7e:63:79:ec:3c:f8:bc:d4:a5:95:a6:18:24:74:16: 58:d6:46:b8:8e:07:5a:c3:58:0b:3b:72:21:43:87: 78:90:dd:f8:aa:13:a7:95:18:27:be:da:9a:e1:53: e0:87:54:53:df:5e:07:1e:cb:6c:41:93:79:e7:cd: 69:eb:2d:14:d6:11:8e:17:f0:00:b2:19:02:a8:1d: 6d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:99:10:28:80:10:6B:A4:3C:5B:99:83:5B:96:04:D4:4B:F7:51:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 206.192.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1c:53:28:d3:81:b4:cd:28:f5:7e:2b:62:b8:5a:72:33:05: 3c:30:a6:bf:67:36:8c:80:56:c3:6a:27:04:49:82:8f:f5:f3: cc:65:91:8b:24:d3:b6:de:e0:79:b6:6f:d8:eb:7f:17:0f:aa: 7f:35:28:9d:03:10:86:a1:8b:9c:e6:13:c4:30:9f:23:65:84: 84:88:81:63:f2:19:75:26:64:bd:dc:3b:89:0a:18:0d:7a:2a: ec:8e:ca:83:47:16:77:b9:a3:bd:cf:8a:e5:87:50:6b:6d:f3: 56:45:f2:62:fe:66:68:66:7c:66:f5:c7:07:ee:72:fa:db:68: 0c:26:ed:6a:d0:62:64:cb:83:c9:c5:5e:25:4f:2c:5f:7b:08: 74:41:ac:f2:93:59:5a:4e:55:ad:26:4f:75:7e:43:9e:13:81: 64:34:61:ca:7b:8b:fe:f9:e8:e5:9c:77:3f:00:e6:5d:ff:93: 6f:29:af:ba:f8:a4:1d:d3:e7:21:70:c1:cd:ce:8d:fa:ca:8f: 07:15:99:e5:80:06:83:6a:57:52:b3:b3:aa:6b:bb:86:7d:7a: a8:fc:9c:6d:b5:05:46:61:67:1d:e6:96:84:70:de:f9:e5:71: 99:1d:a2:e7:c3:5d:5f:27:92:97:b7:5d:cb:16:f2:80:19:75: 92:40:35:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnD8H3mviKDJFXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzFhNTJjODAtMWM2MS00MzQ4LTg2YjAtODVjZWRjOGIyMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+lGGVyLmIclhuGXPWPlbVTeKUJuu9ryFg4x fsDQVLdEZW0TWhcufUgiRmXgs24r+dP/G3Rm5kY3y2+LtTtUIAOgseJDRtaNtF4/ lchrAeYspS1SaR1Lr2JF4zMxI4C5OurGh+dX0yQ1PwDDtd/5djMhAaQ31fcFfBBz FVTZeDvwCl0FSoOZPB1xve5qvinaaOYZZv+/TkLbgqBCC20PvFLz0t5u6H91Mcre uHlHAxed9pF+Y3nsPPi81KWVphgkdBZY1ka4jgdaw1gLO3IhQ4d4kN34qhOnlRgn vtqa4VPgh1RT314HHstsQZN5581p6y0U1hGOF/AAshkCqB1tLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+ZECiAEGukPFuZg1uWBNRL91EJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMzg5NmQzYWYtMDI2NC0z NWJhLThkYmYtMDY4ZGRjOGIyZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzsDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUcUyjTgbTNKPV+K2K4WnIzBTwwpr9nNoyAVsNqJwRJgo/188xlkYsk 07be4Hm2b9jrfxcPqn81KJ0DEIahi5zmE8QwnyNlhISIgWPyGXUmZL3cO4kKGA16 KuyOyoNHFne5o73PiuWHUGtt81ZF8mL+ZmhmfGb1xwfucvrbaAwm7WrQYmTLg8nF XiVPLF97CHRBrPKTWVpOVa0mT3V+Q54TgWQ0Ycp7i/756OWcdz8A5l3/k28pr7r4 pB3T5yFwwc3OjfrKjwcVmeWABoNqV1Kzs6pru4Z9eqj8nG21BUZhZx3mloRw3vnl cZkdoufDXV8nkpe3XcsW8oAZdZJANXI= -----END CERTIFICATE-----Generated at Wed Jul 29 05:35:47 2026 by rpki-client