$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa File: a99aabb6-8e99-34c2-9db7-d6869db9145e.roa (raw, json) Hash identifier: FW/GF+SFsCwkOo/gHSMqumfJL6eFIIGX9IduNTAL6es= Subject key identifier: 3C:4F:86:69:20:1E:4A:A9:14:57:43:00:C2:E9:15:F9:47:9A:94:B3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E9EB0182F2B0D9C451F319000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 0 IP address blocks: 199.1.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:18:2f:2b:0d:9c:45:1f:31:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=e2ba0cc5-15e8-436a-9ec5-6eefb6be5674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:67:34:4b:8f:6e:9f:68:1a:4f:4d:ec:70: 3f:ee:c4:dc:44:f7:75:bc:e2:22:04:7c:e7:2a:34: 31:24:b0:d6:2c:d6:24:1d:27:a7:79:cd:69:e1:9d: 3a:f3:54:6d:ad:08:8c:02:6d:38:9e:52:1d:f7:b3: ab:6c:19:16:d1:62:16:63:b4:9f:b9:d3:aa:0d:4b: f1:6c:c8:31:e0:28:24:f4:30:05:0b:c7:22:93:51: 65:75:d0:78:b2:61:77:a3:48:8e:4f:37:9a:77:3b: 14:bb:39:99:0e:d2:ac:a3:87:31:3d:19:91:91:da: da:42:ae:bd:67:d0:59:c2:7e:5b:73:2d:1a:76:c5: b4:c2:1c:e2:fa:6a:29:c3:83:55:10:08:c3:b7:1b: 30:01:ad:82:fe:00:50:e7:97:83:1a:92:ea:b4:21: ae:60:d6:47:0b:83:af:e5:ba:79:c7:65:6d:a9:48: b4:14:fe:59:07:56:78:8d:75:aa:c9:f0:67:a2:ec: 62:f6:f2:12:23:ec:f8:8b:32:8d:01:aa:55:2b:e2: 53:a4:ee:91:28:28:2d:46:8e:cc:cb:f0:98:a4:c0: 02:af:93:98:ef:3f:7b:cf:49:94:6a:2e:90:70:a5: be:d5:c2:ce:88:18:2d:52:cd:ae:e6:86:ab:8c:d8: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:86:69:20:1E:4A:A9:14:57:43:00:C2:E9:15:F9:47:9A:94:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 199.1.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c4:d6:b2:1f:1f:9d:eb:19:d0:02:30:43:82:31:ce:67:03: 67:fb:40:87:aa:82:a1:fc:cf:40:11:40:a9:d3:70:8f:ad:70: e6:77:12:f2:47:dd:39:cf:48:ac:47:b9:a0:8c:c2:08:39:dd: 76:0f:c5:08:34:37:28:00:31:ec:ff:38:c8:35:45:ff:35:cd: 5a:7d:69:c7:12:19:9c:03:5c:33:86:42:47:49:c1:c2:a4:88: 67:9f:e5:58:0a:db:75:57:02:71:f4:e6:30:44:4b:c0:a9:47: da:97:33:bd:d6:c5:83:2e:85:da:f5:d4:4e:5f:4a:0d:30:f7: 07:81:62:8d:8f:5b:39:11:34:40:94:dc:e5:d6:c3:43:c6:47: ae:a5:31:89:2d:d3:cb:30:27:cd:c6:4e:48:25:24:7f:ca:c5: 9b:ff:b4:d0:a0:d8:bf:a0:d3:ea:1d:ff:cf:83:f3:b5:e7:56: ed:23:e2:a4:49:67:6c:e7:8f:a6:41:8f:52:c6:8b:2b:1e:d0: f4:9d:5e:13:f9:34:80:91:a1:fd:8f:4d:c4:08:27:ec:d8:e8: 1e:50:29:da:0f:05:98:4c:b2:ac:45:18:b1:af:c9:72:22:c2: cf:ce:0d:d3:a2:b5:74:e7:8f:6f:5a:02:12:93:02:e8:99:01: 23:ec:7d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esBgvKw2cRR8xkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZTJiYTBjYzUtMTVlOC00MzZhLTllYzUtNmVlZmI2YmU1Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZNnNEuPbp9oGk9N7HA/7sTcRPd1vOIiBHzn KjQxJLDWLNYkHSenec1p4Z0681RtrQiMAm04nlId97OrbBkW0WIWY7SfudOqDUvx bMgx4Cgk9DAFC8cik1FlddB4smF3o0iOTzeadzsUuzmZDtKso4cxPRmRkdraQq69 Z9BZwn5bcy0adsW0whzi+mopw4NVEAjDtxswAa2C/gBQ55eDGpLqtCGuYNZHC4Ov 5bp5x2VtqUi0FP5ZB1Z4jXWqyfBnouxi9vISI+z4izKNAapVK+JTpO6RKCgtRo7M y/CYpMACr5OY7z97z0mUai6QcKW+1cLOiBgtUs2u5oarjNg9YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxPhmkgHkqpFFdDAMLpFflHmpSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTk5YWFiYjYtOGU5OS0z NGMyLTlkYjctZDY4NjlkYjkxNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxwGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvE1rIfH53rGdACMEOCMc5nA2f7QIeqgqH8z0ARQKnTcI+tcOZ3EvJH 3TnPSKxHuaCMwgg53XYPxQg0NygAMez/OMg1Rf81zVp9accSGZwDXDOGQkdJwcKk iGef5VgK23VXAnH05jBES8CpR9qXM73WxYMuhdr11E5fSg0w9weBYo2PWzkRNECU 3OXWw0PGR66lMYkt08swJ83GTkglJH/KxZv/tNCg2L+g0+od/8+D87XnVu0j4qRJ Z2znj6ZBj1LGiyse0PSdXhP5NICRof2PTcQIJ+zY6B5QKdoPBZhMsqxFGLGvyXIi ws/ODdOitXTnj29aAhKTAuiZASPsfdM= -----END CERTIFICATE-----Generated at Tue Jul 28 18:15:14 2026 by rpki-client