$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa File: b5934f7c-5b65-3efa-991f-cc82903aa949.roa (raw, json) Hash identifier: PDQxM/lgnyx41VW5KdQr4jTapBWVfTvuiIU3yS23OVQ= Subject key identifier: DD:1D:96:89:FC:6F:B7:C0:C1:1C:47:23:23:37:35:C6:52:37:78:53 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584EA5AA76DBB8E2B7FACAB430A0 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 170.200.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:76:db:b8:e2:b7:fa:ca:b4:30:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=5f6c81ab-5b57-4fd8-b519-74616e53c5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:68:80:bc:c6:40:ed:46:8b:90:76:82:4f:4c: e4:a8:2b:c6:b4:07:4a:25:3b:2b:a4:b6:7a:7f:e0: df:b2:81:d6:58:40:16:15:73:46:2b:28:18:c2:51: d8:04:8f:06:b4:12:87:dd:b8:a3:f3:6c:58:a8:33: 7c:86:c1:d4:ff:d6:16:b2:b7:44:e6:a9:47:68:92: 0b:1d:1b:6e:20:c2:d9:12:43:90:32:bf:74:8e:9c: 83:f6:be:a1:0d:b0:20:f7:1e:53:4f:e0:a4:34:78: 15:7c:9e:27:77:a7:85:62:6d:26:6e:a9:96:d9:84: 12:79:cb:f0:f5:04:f9:a7:3e:56:ac:17:43:9d:f1: 71:3f:7c:7e:b0:52:4d:50:d9:53:6d:b0:0a:1e:73: 82:e8:22:8e:ce:7e:be:01:6b:bb:b2:b5:00:61:7b: 33:0a:5c:bc:6a:61:51:e8:8f:72:ca:ea:1e:39:8e: 7c:39:52:c6:7e:c6:8e:6d:8d:44:52:b3:ef:a3:b1: 27:d4:0a:08:32:8a:bd:b8:82:11:db:b3:20:ac:24: 56:0f:07:32:c7:de:be:ca:99:77:88:6a:7d:f1:84: 01:12:db:3c:bf:f6:32:e8:15:4e:fd:cf:b3:49:1b: 9a:5f:e3:c8:90:5c:ff:7f:f7:cd:9d:c9:81:25:8a: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1D:96:89:FC:6F:B7:C0:C1:1C:47:23:23:37:35:C6:52:37:78:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/b5934f7c-5b65-3efa-991f-cc82903aa949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:83:20:a9:ee:ba:15:0d:33:4c:38:c7:73:44:f6:f1:5b:3b: 43:f8:43:b5:0d:b2:01:99:2a:df:ff:90:09:3a:4c:d8:44:75: b3:e7:1a:d7:34:11:46:94:f8:c4:8e:e5:a3:d0:e8:7c:4f:1d: 2a:de:98:91:8d:60:2c:c1:bf:2b:df:19:92:be:49:9b:f7:2e: 22:64:f0:0d:ee:a5:f5:85:33:58:e9:be:26:c1:d5:bd:bc:5e: 98:9c:bb:78:05:33:4f:00:dd:1f:db:8c:e0:0b:fd:de:1d:25: 63:e4:c4:29:f9:7e:70:3c:b6:52:41:8b:b7:57:8e:85:a5:3b: 07:68:d8:d2:b6:b0:a4:52:9f:8d:70:07:59:b1:eb:1a:33:ee: 2b:76:5d:4c:b8:24:5b:06:53:53:a1:bb:c9:c0:33:c1:f0:85: b0:2d:70:1f:8c:8c:fd:6a:d4:57:bd:97:09:6f:e1:95:3b:8d: d1:d7:c4:ec:70:d8:46:11:e4:cb:72:3e:0f:2d:15:e5:03:6e: c7:e5:35:ec:b4:9b:7a:07:8b:d6:f5:fc:2a:be:4d:eb:0a:25: 65:02:2d:a7:cc:0f:a4:93:8d:d6:65:a9:5e:64:cf:f2:d5:b1: 5f:4f:64:48:08:aa:3e:11:c7:ab:73:5b:9b:7b:dd:69:7c:5e: 17:be:ff:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqnbbuOK3+sq0MKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk NWY2YzgxYWItNWI1Ny00ZmQ4LWI1MTktNzQ2MTZlNTNjNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2iAvMZA7UaLkHaCT0zkqCvGtAdKJTsrpLZ6 f+DfsoHWWEAWFXNGKygYwlHYBI8GtBKH3bij82xYqDN8hsHU/9YWsrdE5qlHaJIL HRtuIMLZEkOQMr90jpyD9r6hDbAg9x5TT+CkNHgVfJ4nd6eFYm0mbqmW2YQSecvw 9QT5pz5WrBdDnfFxP3x+sFJNUNlTbbAKHnOC6CKOzn6+AWu7srUAYXszCly8amFR 6I9yyuoeOY58OVLGfsaObY1EUrPvo7En1AoIMoq9uIIR27MgrCRWDwcyx96+ypl3 iGp98YQBEts8v/Yy6BVO/c+zSRuaX+PIkFz/f/fNncmBJYokqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0dlon8b7fAwRxHIyM3NcZSN3hTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvYjU5MzRmN2MtNWI2NS0z ZWZhLTk5MWYtY2M4MjkwM2FhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqsi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKDIKnuuhUNM0w4x3NE9vFbO0P4Q7UNsgGZKt//kAk6TNhEdbPnGtc0 EUaU+MSO5aPQ6HxPHSremJGNYCzBvyvfGZK+SZv3LiJk8A3upfWFM1jpvibB1b28 Xpicu3gFM08A3R/bjOAL/d4dJWPkxCn5fnA8tlJBi7dXjoWlOwdo2NK2sKRSn41w B1mx6xoz7it2XUy4JFsGU1Ohu8nAM8HwhbAtcB+MjP1q1Fe9lwlv4ZU7jdHXxOxw 2EYR5MtyPg8tFeUDbsflNey0m3oHi9b1/Cq+TesKJWUCLafMD6STjdZlqV5kz/LV sV9PZEgIqj4Rx6tzW5t73Wl8Xhe+/zI= -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:18 2026 by rpki-client