$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa File: b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa (raw, json) Hash identifier: 1vo83D/a9w6jJ+37kfZulHzGUmbjMAjedDEiuMJkjYs= Subject key identifier: 93:C6:F8:DB:8C:6D:4D:85:79:A8:D8:A0:81:A3:F7:5F:EB:65:E1:0C Certificate issuer: /CN=4786912c-91d1-4981-a8a8-ab21be09e84b Certificate serial: 010D0C9F4328584EA7928447917BCE9CBF2A1F80 Authority key identifier: 01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400530 IP address blocks: 198.190.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:84:47:91:7b:ce:9c:bf:2a:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4786912c-91d1-4981-a8a8-ab21be09e84b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=afb2b0e3-b6e0-4023-a2fc-8b42a0535d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8b:bf:fd:43:56:d5:89:26:5d:2d:d6:cf:ef: 43:c7:e0:77:a5:22:95:45:13:29:a7:d8:99:5b:96: 76:19:c5:99:7c:1c:8b:3a:3f:fb:f5:90:a5:e5:87: 54:e4:21:19:01:3e:96:79:41:65:db:89:8b:5a:40: 56:a8:40:63:ef:3c:21:f1:24:bb:f5:3a:13:c9:25: f3:37:bc:4c:0d:fa:06:51:9b:27:9b:ab:5c:80:dd: 26:99:5b:59:22:72:e7:a7:58:9f:1f:15:7a:f8:7f: 14:2f:1b:cc:a9:2a:d3:67:cb:e0:b2:3a:15:bd:0f: 1b:ce:a9:4f:df:7c:e7:ad:3f:dc:00:5b:02:4b:0e: 07:78:75:81:ce:12:6a:ec:79:e1:81:dd:9e:27:b8: 01:3e:be:5f:9b:85:60:fe:1e:a8:7d:8f:ba:01:ff: 0b:92:09:d4:5b:91:81:89:ba:05:c4:9a:4d:0b:ab: e1:c0:c1:31:12:62:bf:2f:a5:13:40:20:c8:c3:0c: 0b:16:12:c5:da:c4:14:80:e8:67:f3:7b:31:3d:66: 21:6c:51:bf:c8:aa:cf:1d:dc:e7:92:02:a4:89:00: e3:c0:69:2d:be:b1:ee:9c:8f:18:42:e5:1f:ac:7a: d1:ef:f9:80:0c:61:de:37:ab:32:19:4c:98:ac:e2: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:F8:DB:8C:6D:4D:85:79:A8:D8:A0:81:A3:F7:5F:EB:65:E1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl X509v3 Authority Key Identifier: keyid:01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer sbgp-ipAddrBlock: critical IPv4: 198.190.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:04:f8:34:f9:4f:e9:ef:b4:31:7e:3d:72:c9:fa:63:29:d6: b8:c5:4a:5b:09:2e:47:b8:f5:c2:36:f9:fc:f3:a6:49:a1:1a: 70:17:71:4c:71:0a:2d:4e:3b:7d:50:0b:27:45:4b:88:0a:cd: da:f8:ba:d6:a2:82:79:6e:43:ba:2d:79:46:33:a4:40:20:d6: 78:79:ce:31:1a:42:cb:f5:ca:42:9d:d8:ea:97:fd:1a:60:ed: 44:54:3f:1e:51:c8:8d:3d:4f:6b:db:04:be:1b:3b:fd:78:d6: 6a:6f:d4:49:e6:9c:88:8c:63:a9:19:0b:aa:9c:da:43:05:d0: 7a:80:77:4e:5f:8c:58:40:e2:6e:a7:43:fe:af:69:c2:34:54: 7f:c5:35:b7:f5:35:4b:26:f2:3f:75:0f:6a:2a:36:a6:16:32: f4:c0:24:4b:dd:66:df:25:50:d9:8d:fc:47:20:dc:78:73:a2: bb:83:ad:e6:23:57:ae:31:d8:f1:4d:5b:6e:6a:d7:35:74:e7: 78:a9:a3:be:60:dd:99:a6:ae:51:96:ff:52:c4:b6:05:ac:2b: 50:52:ac:a1:0b:8a:32:c6:1f:27:c4:f3:1f:c8:ea:8f:60:ce: 3f:e6:c4:6a:08:28:e8:91:e6:bc:c0:6a:00:56:da:ea:44:08: 35:f5:4f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkoRHkXvOnL8qH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4NjkxMmMtOTFkMS00OTgxLWE4YTgtYWIyMWJlMDll ODRiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWZiMmIwZTMtYjZlMC00MDIzLWEyZmMtOGI0MmEwNTM1ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIu//UNW1YkmXS3Wz+9Dx+B3pSKVRRMpp9iZ W5Z2GcWZfByLOj/79ZCl5YdU5CEZAT6WeUFl24mLWkBWqEBj7zwh8SS79ToTySXz N7xMDfoGUZsnm6tcgN0mmVtZInLnp1ifHxV6+H8ULxvMqSrTZ8vgsjoVvQ8bzqlP 33znrT/cAFsCSw4HeHWBzhJq7Hnhgd2eJ7gBPr5fm4Vg/h6ofY+6Af8LkgnUW5GB iboFxJpNC6vhwMExEmK/L6UTQCDIwwwLFhLF2sQUgOhn83sxPWYhbFG/yKrPHdzn kgKkiQDjwGktvrHunI8YQuUfrHrR7/mADGHeN6syGUyYrOLmTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPG+NuMbU2FeajYoIGj91/rZeEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Nzg2 OTEyYy05MWQxLTQ5ODEtYThhOC1hYjIxYmUwOWU4NGIvYjk0ZThkMTEtMmNjYy0z MWM5LTlkYjctOTA2MjgxN2U2ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDc4NjkxMmMtOTFkMS00OTgxLWE4 YTgtYWIyMWJlMDllODRiLzQ3ODY5MTJjLTkxZDEtNDk4MS1hOGE4LWFiMjFiZTA5 ZTg0Yi5jcmwwHwYDVR0jBBgwFoAUAYl3YbBfRS8pMm2dnwNYysztZrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80Nzg2OTEyYy05MWQxLTQ5ODEtYThhOC1hYjIx YmUwOWU4NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr7FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8E+DT5T+nvtDF+PXLJ+mMp1rjFSlsJLke49cI2+fzzpkmhGnAXcUxx Ci1OO31QCydFS4gKzdr4utaignluQ7oteUYzpEAg1nh5zjEaQsv1ykKd2OqX/Rpg 7URUPx5RyI09T2vbBL4bO/141mpv1EnmnIiMY6kZC6qc2kMF0HqAd05fjFhA4m6n Q/6vacI0VH/FNbf1NUsm8j91D2oqNqYWMvTAJEvdZt8lUNmN/Ecg3HhzoruDreYj V64x2PFNW25q1zV053ipo75g3ZmmrlGW/1LEtgWsK1BSrKELijLGHyfE8x/I6o9g zj/mxGoIKOiR5rzAagBW2upECDX1T2o= -----END CERTIFICATE-----Generated at Wed Jul 29 14:19:30 2026 by rpki-client