$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa File: 23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa (raw, json) Hash identifier: 0WIl/pTtml1SYUDWaGURM2yXYA6OLxTFMJb1g7ijG+Y= Subject key identifier: B3:A7:C7:43:AA:33:DF:1B:23:A4:1F:33:CF:A3:46:63:6C:27:0A:58 Certificate issuer: /CN=9de0425b-788e-45de-93cd-d9e343be4db2 Certificate serial: 010D0C9F4328584EA3608E74F2D780617ED93980 Authority key identifier: 8C:98:D6:E3:29:CE:9D:23:87:77:68:9B:84:FD:20:5A:D2:82:B3:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa Signing time: Mon 27 Jul 2026 13:19:49 +0000 ROA not before: Mon 27 Jul 2026 13:19:49 +0000 ROA not after: Sun 25 Oct 2026 13:19:49 +0000 asID: 22278 IP address blocks: 198.96.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a3:60:8e:74:f2:d7:80:61:7e:d9:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de0425b-788e-45de-93cd-d9e343be4db2 Validity Not Before: Jul 27 13:19:49 2026 GMT Not After : Oct 25 13:19:49 2026 GMT Subject: CN=ce0ffb7e-2426-41d7-a4d6-220a96afc072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:c5:47:68:89:96:5b:93:0a:bf:42:d7:88: 06:5a:c1:10:73:1b:2d:1d:fa:fe:4c:1f:ec:21:b9: 44:7d:1a:07:43:f3:7f:0c:cf:27:e1:91:77:ae:66: 49:95:f2:bf:75:9f:d3:f9:52:64:56:ee:d7:57:5b: e4:7a:2e:3b:5c:8e:88:67:2f:7c:f1:f7:a5:c4:69: ce:5e:b2:6d:41:2e:2d:03:a9:fb:64:37:91:86:77: 1c:b1:73:89:70:19:aa:f9:15:4a:9f:da:27:3c:ff: 05:f1:57:1b:57:9c:56:d3:16:64:f1:72:80:25:92: 35:38:5f:38:c8:77:65:d5:a4:c2:bf:2d:e7:e7:65: 96:30:53:20:53:8d:1c:ad:96:8f:0f:12:a2:04:8f: 4b:71:96:d8:68:69:b4:92:e8:e2:d6:ee:00:d1:80: 8f:b3:e9:75:53:7d:ca:d9:32:01:5b:f0:7e:fd:42: 66:d3:ca:db:d9:71:a5:b7:be:f4:dc:1a:d2:52:05: cb:65:5d:62:72:b7:44:74:dd:9b:5c:e2:05:0c:bc: 37:87:3a:02:95:d1:ea:b5:e5:ad:e9:e7:ab:71:55: 99:f1:10:fd:79:51:7c:5b:c6:7d:63:5d:5f:1f:22: 3f:30:16:80:be:bb:05:90:fa:71:1e:d4:09:b8:ca: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A7:C7:43:AA:33:DF:1B:23:A4:1F:33:CF:A3:46:63:6C:27:0A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.crl X509v3 Authority Key Identifier: keyid:8C:98:D6:E3:29:CE:9D:23:87:77:68:9B:84:FD:20:5A:D2:82:B3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer sbgp-ipAddrBlock: critical IPv4: 198.96.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:22:0d:eb:87:30:be:e8:e5:02:7a:26:cd:c4:dd:44:c8:25: 6e:59:9f:a4:34:2d:c1:d2:70:71:8f:c1:eb:f1:d0:e0:4a:5b: fc:cd:c7:ec:b7:82:9b:e9:83:08:a5:81:63:a5:39:8c:79:6e: 80:dd:f3:7d:d6:be:68:e4:72:10:d8:23:05:fc:aa:cf:47:22: df:ad:25:f3:b5:a4:f7:81:f9:1e:ad:a0:82:be:68:67:23:37: 81:2d:48:46:98:21:ad:c6:16:79:7e:b9:61:db:19:75:a8:bd: 0b:d3:cf:35:53:cc:bd:69:6d:ca:af:e7:99:a1:ac:f6:e4:6e: 83:e2:14:cb:9e:cd:19:9c:13:ef:a4:c4:3e:82:14:d1:fd:ab: 13:c8:76:a4:9b:60:a3:cf:e2:fb:56:4e:61:d5:59:3d:7e:02: ff:b5:ac:04:64:87:fb:e6:66:5a:0c:47:a6:91:14:ce:d9:e4: fc:6d:de:f4:de:39:a1:91:11:4a:12:82:96:f2:d8:6b:49:f6: 3a:0b:f4:26:7a:2c:c2:01:4d:5d:90:bd:67:fb:9a:bf:aa:93: 50:34:a6:7b:75:96:fc:6b:15:77:47:a7:46:f3:2d:91:d3:ad: 3d:84:65:99:16:c0:4e:6f:e5:6b:4e:80:2b:c6:67:5e:37:d3: e7:9f:fc:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6jYI508teAYX7ZOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlMDQyNWItNzg4ZS00NWRlLTkzY2QtZDllMzQzYmU0 ZGIyMB4XDTI2MDcyNzEzMTk0OVoXDTI2MTAyNTEzMTk0OVowLzEtMCsGA1UEAxMk Y2UwZmZiN2UtMjQyNi00MWQ3LWE0ZDYtMjIwYTk2YWZjMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrbFR2iJlluTCr9C14gGWsEQcxstHfr+TB/s IblEfRoHQ/N/DM8n4ZF3rmZJlfK/dZ/T+VJkVu7XV1vkei47XI6IZy988felxGnO XrJtQS4tA6n7ZDeRhnccsXOJcBmq+RVKn9onPP8F8VcbV5xW0xZk8XKAJZI1OF84 yHdl1aTCvy3n52WWMFMgU40crZaPDxKiBI9LcZbYaGm0kuji1u4A0YCPs+l1U33K 2TIBW/B+/UJm08rb2XGlt7703BrSUgXLZV1icrdEdN2bXOIFDLw3hzoCldHqteWt 6eercVWZ8RD9eVF8W8Z9Y11fHyI/MBaAvrsFkPpxHtQJuMqx6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOnx0OqM98bI6QfM8+jRmNsJwpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85ZGUw NDI1Yi03ODhlLTQ1ZGUtOTNjZC1kOWUzNDNiZTRkYjIvMjNmYWZiZGItMWJmMS0z YzIxLWI3MjEtMWE5ZWZjNTM5ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWRlMDQyNWItNzg4ZS00NWRlLTkz Y2QtZDllMzQzYmU0ZGIyLzlkZTA0MjViLTc4OGUtNDVkZS05M2NkLWQ5ZTM0M2Jl NGRiMi5jcmwwHwYDVR0jBBgwFoAUjJjW4ynOnSOHd2ibhP0gWtKCs9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85ZGUwNDI1Yi03ODhlLTQ1ZGUtOTNjZC1kOWUz NDNiZTRkYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmBvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQiDeuHML7o5QJ6Js3E3UTIJW5Zn6Q0LcHScHGPwevx0OBKW/zNx+y3 gpvpgwilgWOlOYx5boDd833WvmjkchDYIwX8qs9HIt+tJfO1pPeB+R6toIK+aGcj N4EtSEaYIa3GFnl+uWHbGXWovQvTzzVTzL1pbcqv55mhrPbkboPiFMuezRmcE++k xD6CFNH9qxPIdqSbYKPP4vtWTmHVWT1+Av+1rARkh/vmZloMR6aRFM7Z5Pxt3vTe OaGREUoSgpby2GtJ9joL9CZ6LMIBTV2QvWf7mr+qk1A0pnt1lvxrFXdHp0bzLZHT rT2EZZkWwE5v5WtOgCvGZ1430+ef/KU= -----END CERTIFICATE-----Generated at Tue Jul 28 16:41:39 2026 by rpki-client