$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa File: 9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa (raw, json) Hash identifier: DoS+evM4BdKuQPjpArSqFJibrmbqLI+2VBNYGeb2nYE= Subject key identifier: E5:7A:9F:1C:A3:24:41:1F:45:3F:52:90:95:B9:EE:18:F8:D8:FB:24 Certificate issuer: /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Certificate serial: 010D0C9F4328584EA79428F92F00B32442035580 Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32815 IP address blocks: 199.247.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:28:f9:2f:00:b3:24:42:03:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bf7b2627-1945-4938-9f3a-ab054a054c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:51:cf:3b:c0:ab:cf:9e:0b:dd:57:4b:59: ad:f7:71:ac:79:94:67:0d:b9:7c:81:c2:a0:cd:20: e1:a3:17:31:5a:50:56:ad:30:8e:3d:36:a8:06:be: 40:68:7d:20:88:c0:d1:18:08:05:24:fa:ee:d9:d2: 7d:1d:0c:91:d4:49:c9:37:9b:b1:e7:e6:2f:fe:d4: 53:04:27:5b:9b:0f:cb:71:6a:04:28:a1:25:dc:f8: a8:e3:21:91:d1:5b:b5:26:c2:5b:f8:37:85:f1:93: 3d:9a:8e:f9:5c:b4:ef:aa:4b:24:c8:bb:4a:e5:10: aa:51:26:13:b9:2e:e7:9a:69:0d:1d:07:13:a5:ef: d4:49:27:eb:48:3f:b4:7e:65:d0:30:8e:23:bf:83: 6d:c4:63:60:70:52:e5:99:f2:8a:0b:0c:88:2e:36: 96:c2:8f:c3:98:d6:87:9b:86:17:9f:d9:2e:32:13: 19:4e:00:58:51:9e:bb:60:ca:0a:7d:18:6e:fb:d6: 8c:26:7c:e8:45:ac:89:ca:69:f6:8f:90:e5:88:b6: 2d:02:05:8b:f2:bf:10:f4:cf:58:df:26:5f:18:48: 69:ce:fc:db:2e:8f:38:ef:c5:27:21:f7:47:d5:69: 04:c7:b8:20:ba:8a:67:a3:9d:a8:ce:02:45:ed:6e: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7A:9F:1C:A3:24:41:1F:45:3F:52:90:95:B9:EE:18:F8:D8:FB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl X509v3 Authority Key Identifier: keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer sbgp-ipAddrBlock: critical IPv4: 199.247.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:29:11:2d:97:81:72:50:7e:1a:ca:56:c0:b6:75:9c:74:a8: f4:0f:c6:22:a9:07:a1:c3:0e:53:e7:7e:bc:fa:c2:18:d2:a0: d0:6e:a4:71:46:75:97:28:56:3f:f9:c8:58:30:34:82:04:8f: 03:1f:b4:e6:95:30:03:c9:d0:5d:99:32:47:7c:38:32:1d:b7: d0:07:5a:ef:89:dc:3e:bf:14:6c:e8:61:88:65:43:e6:2a:52: 5e:ff:c8:65:57:5b:79:18:51:04:4c:ac:d9:d2:3b:0c:34:ce: 0f:30:e5:21:e3:e0:02:1a:9a:2f:a5:da:0a:72:fe:dd:c3:b1: 39:ec:a3:37:26:cd:6e:0b:e9:54:56:cf:33:6a:e7:23:a2:bc: 96:21:6c:5b:2e:92:b2:b9:68:cb:28:03:03:b7:ec:41:63:72: 3f:96:68:39:ea:80:e5:26:6c:2d:ae:1c:58:61:86:c6:b7:0b: a6:d0:22:88:6e:59:92:0f:3a:51:40:af:95:f0:94:44:a0:55: 6c:59:80:b8:c8:c5:13:3d:45:32:80:06:77:a2:a9:36:ee:f7: e2:a4:37:9f:3e:54:4d:2f:82:d2:71:43:b9:37:52:77:d7:bd: fd:84:9f:18:a2:b6:95:2c:94:60:12:e6:51:f7:93:32:59:94: 36:08:49:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlCj5LwCzJEIDVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1 ZTZmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmY3YjI2MjctMTk0NS00OTM4LTlmM2EtYWIwNTRhMDU0YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqilRzzvAq8+eC91XS1mt93GseZRnDbl8gcKg zSDhoxcxWlBWrTCOPTaoBr5AaH0giMDRGAgFJPru2dJ9HQyR1EnJN5ux5+Yv/tRT BCdbmw/LcWoEKKEl3Pio4yGR0Vu1JsJb+DeF8ZM9mo75XLTvqkskyLtK5RCqUSYT uS7nmmkNHQcTpe/USSfrSD+0fmXQMI4jv4NtxGNgcFLlmfKKCwyILjaWwo/DmNaH m4YXn9kuMhMZTgBYUZ67YMoKfRhu+9aMJnzoRayJymn2j5DliLYtAgWL8r8Q9M9Y 3yZfGEhpzvzbLo8478UnIfdH1WkEx7gguopno52ozgJF7W7RWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV6nxyjJEEfRT9SkJW57hj42PskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5 NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvOWE5MjM1YWMtOWFkMS0z YTgzLWI5MzEtZTA4NmE5ODAwYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTk2OTRjMjEtMTc4Yy00ZTdiLTll NzgtMDhiYzk3OGM1ZTZmL2E5Njk0YzIxLTE3OGMtNGU3Yi05ZTc4LTA4YmM5Nzhj NWU2Zi5jcmwwHwYDVR0jBBgwFoAUhDmBT2ek8Gmra1l9o+ocZu5EiB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJj OTc4YzVlNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx/eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEpES2XgXJQfhrKVsC2dZx0qPQPxiKpB6HDDlPnfrz6whjSoNBupHFG dZcoVj/5yFgwNIIEjwMftOaVMAPJ0F2ZMkd8ODIdt9AHWu+J3D6/FGzoYYhlQ+Yq Ul7/yGVXW3kYUQRMrNnSOww0zg8w5SHj4AIami+l2gpy/t3DsTnsozcmzW4L6VRW zzNq5yOivJYhbFsukrK5aMsoAwO37EFjcj+WaDnqgOUmbC2uHFhhhsa3C6bQIohu WZIPOlFAr5XwlESgVWxZgLjIxRM9RTKABneiqTbu9+KkN58+VE0vgtJxQ7k3UnfX vf2EnxiitpUslGAS5lH3kzJZlDYISaI= -----END CERTIFICATE-----Generated at Wed Jul 29 13:11:45 2026 by rpki-client