$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e12ed91d-35cb-3699-9ab6-1ebc85962407.roa File: e12ed91d-35cb-3699-9ab6-1ebc85962407.roa (raw, json) Hash identifier: fnkXCmg2kjzlJk1g+zR1ujEWQXtUCg+2qdmbiBTfLAc= Subject key identifier: 0C:31:11:0D:64:95:10:43:71:54:AA:8C:87:B1:08:5B:16:31:45:FE Certificate issuer: /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Certificate serial: 010D0C9F4328584EA79C475C846E6C0E8E3EEC80 Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e12ed91d-35cb-3699-9ab6-1ebc85962407.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401427 IP address blocks: 216.152.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:47:5c:84:6e:6c:0e:8e:3e:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=972d32a5-b488-4dfb-a48e-de3089273c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:90:7a:0a:15:96:3d:91:7a:2a:ec:79:ca: b7:99:53:4d:5b:70:7a:20:56:94:17:c4:42:09:0a: bb:35:fd:fa:d0:76:e5:5c:dc:4a:3f:1a:a1:2d:16: 04:9b:b2:37:04:34:ed:09:2c:2a:ba:b6:6b:5e:a6: 27:46:4b:14:73:f4:e7:15:64:0a:27:29:4e:55:27: bd:46:ac:e9:34:41:b5:40:8f:80:a8:4d:8e:89:3a: b8:c6:07:31:4a:e9:df:7e:a7:0b:49:fc:c1:cf:ec: e7:30:26:44:1c:4c:0d:ed:d2:22:03:e3:7f:df:29: 76:e9:ca:89:b4:d3:4c:3e:b1:92:1d:7d:60:91:ba: 74:f6:20:7a:2e:0b:c6:5d:35:13:df:e8:b5:57:d2: 1b:99:72:79:14:f2:91:68:b0:8e:7a:f2:31:a3:5f: 59:8e:c6:c5:12:8c:f1:95:a7:ef:93:3e:52:0d:5e: 66:fa:a7:63:b2:5f:53:c6:b0:bf:88:3d:2c:64:39: 84:dc:82:89:74:ff:8f:cb:bb:6b:e3:e5:cd:3d:25: b1:95:d3:cf:dd:f3:19:ec:24:0e:2e:a2:bb:2d:58: ea:06:0a:f5:24:ff:22:be:75:d9:0f:7c:2d:14:ef: 73:45:8b:d4:2f:9c:bf:c3:7d:7b:e8:c3:b7:fe:89: d4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:11:0D:64:95:10:43:71:54:AA:8C:87:B1:08:5B:16:31:45:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e12ed91d-35cb-3699-9ab6-1ebc85962407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl X509v3 Authority Key Identifier: keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer sbgp-ipAddrBlock: critical IPv4: 216.152.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0d:6b:8b:58:b3:e3:ed:f0:f1:1e:6b:28:e0:d6:a7:e1:27: 57:79:bc:bf:2a:e9:7a:eb:ce:9a:44:71:8f:f5:f3:0b:c6:39: 1e:c5:8e:fc:95:76:08:b6:43:05:39:36:73:8b:72:bb:b8:ba: 9c:af:9a:d6:33:24:c4:1e:7f:6c:25:96:ae:19:17:7e:bf:2d: cf:d8:fc:c8:f8:24:3f:f4:5d:b6:4e:9b:63:ca:13:39:a6:4a: bd:72:bd:5e:a2:b0:f3:f3:ec:86:25:3c:f4:73:b5:e8:58:af: e4:b2:0f:9f:ef:ca:88:6d:b4:24:3c:e4:75:c1:8c:0f:ee:3c: 2c:c0:17:c1:81:bc:ef:71:ef:63:af:ff:3e:7e:87:69:34:b3: af:39:c4:8c:11:64:11:6e:6c:bd:5f:c0:03:66:07:9c:57:b6: c3:2d:f5:14:62:bc:66:b3:39:d4:b9:db:02:d4:91:39:7a:96: 1c:72:43:1f:81:05:ba:3b:c6:5e:22:9a:76:a0:6f:1c:ae:3c: 36:88:fe:26:44:af:2d:62:09:4a:cd:8e:a9:a2:6a:06:cf:30: 79:13:53:0c:99:05:b1:b0:10:fd:6f:ec:be:4f:ee:ee:14:76: 54:34:ec:28:b4:6d:36:8d:91:de:c4:e0:2f:5b:86:35:25:10: be:27:b0:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnEdchG5sDo4+7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1 YTNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTcyZDMyYTUtYjQ4OC00ZGZiLWE0OGUtZGUzMDg5MjczYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8mQegoVlj2Reirsecq3mVNNW3B6IFaUF8RC CQq7Nf360HblXNxKPxqhLRYEm7I3BDTtCSwqurZrXqYnRksUc/TnFWQKJylOVSe9 RqzpNEG1QI+AqE2OiTq4xgcxSunffqcLSfzBz+znMCZEHEwN7dIiA+N/3yl26cqJ tNNMPrGSHX1gkbp09iB6LgvGXTUT3+i1V9IbmXJ5FPKRaLCOevIxo19ZjsbFEozx lafvkz5SDV5m+qdjsl9TxrC/iD0sZDmE3IKJdP+Py7tr4+XNPSWxldPP3fMZ7CQO LqK7LVjqBgr1JP8ivnXZD3wtFO9zRYvUL5y/w3176MO3/onUGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwxEQ1klRBDcVSqjIexCFsWMUX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1 ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvZTEyZWQ5MWQtMzVjYi0z Njk5LTlhYjYtMWViYzg1OTYyNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsNa4tYs+Pt8PEeayjg1qfhJ1d5vL8q6XrrzppEcY/18wvGOR7FjvyV dgi2QwU5NnOLcru4upyvmtYzJMQef2wllq4ZF36/Lc/Y/Mj4JD/0XbZOm2PKEzmm Sr1yvV6isPPz7IYlPPRztehYr+SyD5/vyohttCQ85HXBjA/uPCzAF8GBvO9x72Ov /z5+h2k0s685xIwRZBFubL1fwANmB5xXtsMt9RRivGazOdS52wLUkTl6lhxyQx+B Bbo7xl4imnagbxyuPDaI/iZEry1iCUrNjqmiagbPMHkTUwyZBbGwEP1v7L5P7u4U dlQ07Ci0bTaNkd7E4C9bhjUlEL4nsNM= -----END CERTIFICATE-----Generated at Wed Jul 29 08:59:49 2026 by rpki-client