$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/f4626b68-03d9-3fa1-8ce9-c6baed5e1a70.roa File: f4626b68-03d9-3fa1-8ce9-c6baed5e1a70.roa (raw, json) Hash identifier: gZ+g6LsY7gRav6drb3+JzEtA/4bRkJ2MpRbQEFfnfzE= Subject key identifier: 2B:B9:4D:A7:58:66:C6:36:E3:68:86:D4:4E:9B:48:4B:A7:23:5B:5B Certificate issuer: /CN=4454f19d-c14e-499f-8d66-357970248d2c Certificate serial: 010D0C9F4328584EA795CE25CFE575D6DD932F80 Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/f4626b68-03d9-3fa1-8ce9-c6baed5e1a70.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399955 IP address blocks: 199.192.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:ce:25:cf:e5:75:d6:dd:93:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3ceab5a8-fa22-432a-b18e-3f80169260e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:29:5b:70:5d:f9:ec:3a:4c:51:23:7b:b2: 9f:a3:13:fc:42:8a:f7:09:06:de:2b:88:86:64:ba: 7d:d1:08:46:1e:93:f0:60:8a:95:89:19:ea:c0:06: 8e:32:72:62:30:06:e5:93:44:b3:9b:6d:e0:6b:e5: a2:0f:7b:6a:94:0c:c0:a8:64:8b:4c:cd:ae:89:f6: 3a:d5:e5:00:91:d7:ed:23:18:63:f8:27:49:f7:ce: f0:fd:30:d2:99:b4:99:e6:e0:88:d8:b9:67:ea:8e: 18:3b:5f:d9:65:27:ec:60:c0:85:f8:ad:0d:1b:e7: 5e:0e:a8:74:c3:f0:ff:f7:cd:49:a2:fc:96:49:c9: 05:27:b0:e9:5c:9c:7d:e7:4e:2c:58:09:83:2a:3b: c7:63:38:45:d7:8b:e9:62:59:ed:e6:7c:e7:17:03: ee:3d:08:27:50:05:40:cb:b1:e2:6c:cd:5b:83:e0: 91:19:27:47:f8:38:86:ea:af:74:21:92:1b:6f:cf: 5d:35:da:e2:42:62:d8:10:39:28:fc:47:5f:80:11: 71:c0:1b:a3:70:72:14:63:cf:ac:a1:05:29:3c:79: 9e:4c:7d:fb:a5:e3:c7:ea:f7:05:70:38:ba:4f:a7: bc:28:6c:3b:0d:bb:d1:3f:6b:d7:00:67:6a:78:50: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B9:4D:A7:58:66:C6:36:E3:68:86:D4:4E:9B:48:4B:A7:23:5B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/f4626b68-03d9-3fa1-8ce9-c6baed5e1a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl X509v3 Authority Key Identifier: keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer sbgp-ipAddrBlock: critical IPv4: 199.192.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:dc:ce:bd:64:3d:4d:47:b2:5d:0b:4a:b6:e0:02:6e:c7:dc: c1:ae:28:10:bb:3a:16:01:02:b8:5f:7b:09:31:9f:75:d5:b8: 8e:7c:e9:df:a5:4f:4a:71:e2:4b:4e:d5:c0:e9:9f:8a:b5:67: 0e:5f:36:02:bf:b6:5a:b7:40:75:88:d0:f5:10:38:a1:59:1b: d0:13:2a:68:12:27:f3:f2:f5:a9:0a:eb:b3:e2:09:c9:43:c7: a6:83:29:d9:9f:54:46:43:e6:69:30:0a:c3:43:02:9a:c3:23: 1e:24:50:98:79:e9:92:ea:38:e3:8b:ac:9d:34:53:80:a9:ea: de:1b:dc:35:b1:4a:6a:2d:9e:f2:ef:2f:d3:f3:ed:fe:50:c3: 1d:fe:f9:85:f2:fa:17:e5:f0:fd:bb:22:7c:67:db:ae:8a:8d: 74:11:58:01:c5:53:71:30:08:3a:76:02:55:f0:a8:e5:e7:91: 1a:28:04:5e:a0:32:12:d3:ce:a0:2f:85:54:91:63:c7:4b:77: 1e:1d:83:84:88:60:9d:8d:39:8a:88:fc:a4:64:59:f2:17:7d: c6:ef:9d:3a:45:4d:ed:c8:2b:77:f4:47:45:97:f2:bc:02:6c: 7f:21:0f:6e:8f:38:f3:d5:95:63:e4:02:d7:bb:db:52:03:bc: ef:cd:4d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlc4lz+V11t2TL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1NGYxOWQtYzE0ZS00OTlmLThkNjYtMzU3OTcwMjQ4 ZDJjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2NlYWI1YTgtZmEyMi00MzJhLWIxOGUtM2Y4MDE2OTI2MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M0pW3Bd+ew6TFEje7KfoxP8Qor3CQbeK4iG ZLp90QhGHpPwYIqViRnqwAaOMnJiMAblk0Szm23ga+WiD3tqlAzAqGSLTM2uifY6 1eUAkdftIxhj+CdJ987w/TDSmbSZ5uCI2Lln6o4YO1/ZZSfsYMCF+K0NG+deDqh0 w/D/981JovyWSckFJ7DpXJx9504sWAmDKjvHYzhF14vpYlnt5nznFwPuPQgnUAVA y7HibM1bg+CRGSdH+DiG6q90IZIbb89dNdriQmLYEDko/EdfgBFxwBujcHIUY8+s oQUpPHmeTH37pePH6vcFcDi6T6e8KGw7DbvRP2vXAGdqeFDIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCu5TadYZsY242iG1E6bSEunI1tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NDU0 ZjE5ZC1jMTRlLTQ5OWYtOGQ2Ni0zNTc5NzAyNDhkMmMvZjQ2MjZiNjgtMDNkOS0z ZmExLThjZTktYzZiYWVkNWUxYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDQ1NGYxOWQtYzE0ZS00OTlmLThk NjYtMzU3OTcwMjQ4ZDJjLzQ0NTRmMTlkLWMxNGUtNDk5Zi04ZDY2LTM1Nzk3MDI0 OGQyYy5jcmwwHwYDVR0jBBgwFoAUuQxer4UTHxI958/WyvJdVBacbi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NDU0ZjE5ZC1jMTRlLTQ5OWYtOGQ2Ni0zNTc5 NzAyNDhkMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/czr1kPU1Hsl0LSrbgAm7H3MGuKBC7OhYBArhfewkxn3XVuI586d+l T0px4ktO1cDpn4q1Zw5fNgK/tlq3QHWI0PUQOKFZG9ATKmgSJ/Py9akK67PiCclD x6aDKdmfVEZD5mkwCsNDAprDIx4kUJh56ZLqOOOLrJ00U4Cp6t4b3DWxSmotnvLv L9Pz7f5Qwx3++YXy+hfl8P27Inxn266KjXQRWAHFU3EwCDp2AlXwqOXnkRooBF6g MhLTzqAvhVSRY8dLdx4dg4SIYJ2NOYqI/KRkWfIXfcbvnTpFTe3IK3f0R0WX8rwC bH8hD26POPPVlWPkAte721IDvO/NTQ4= -----END CERTIFICATE-----Generated at Wed Jul 29 09:09:40 2026 by rpki-client