$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa File: b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa (raw, json) Hash identifier: fEcpT7xTnRO98q05SE2E1MaQkwG0v1NJUSNECuaiREE= Subject key identifier: EB:3C:36:2F:3E:21:15:B3:69:E8:29:1A:73:7B:64:BB:E3:1C:70:73 Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584EA7882AF6BB15FF0664C6B4C0 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32931 IP address blocks: 199.91.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:2a:f6:bb:15:ff:06:64:c6:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e22b8202-e5fd-42a5-a860-7d227da12803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9d:35:f5:d7:0b:7f:1b:51:69:99:de:98:da: fd:e2:0c:47:b2:18:b3:c2:1f:39:53:38:4d:0a:0c: 69:87:87:9c:bb:ac:dc:60:92:61:79:d2:71:07:e5: 15:be:3b:c6:3b:1f:19:f8:48:0b:34:b9:81:5b:e9: 4b:32:c7:f9:11:7c:31:1b:4c:32:67:13:40:2b:ba: 7d:17:9d:88:2d:ff:a9:f6:05:55:b0:98:cd:58:59: 3b:80:9c:8a:bc:b8:75:2a:ad:e1:66:81:c1:48:1b: c5:5b:89:0d:45:91:d4:1d:37:70:d4:fd:ca:58:4c: b4:d0:f2:5d:41:22:fa:cb:73:b3:ac:1a:44:50:0f: 68:f9:7e:07:55:3b:da:4d:86:7e:30:8f:e0:55:d8: 39:ee:c2:8a:c6:da:70:8b:c0:06:73:81:66:f4:b8: 19:99:d2:15:d5:3c:dc:2a:a8:32:03:59:e5:ff:7e: 92:0c:43:1e:d0:cf:80:84:9c:80:a1:ce:9f:68:99: 78:24:25:3b:8b:74:44:67:cd:59:91:d6:69:4f:f3: 29:ab:c7:10:1f:1f:49:f1:ab:c0:79:47:cd:32:5a: 55:21:43:bc:9e:03:8c:42:cc:b6:13:00:3d:93:e4: bf:ac:9f:f4:8f:13:ee:d6:6c:c9:6e:a9:79:15:36: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3C:36:2F:3E:21:15:B3:69:E8:29:1A:73:7B:64:BB:E3:1C:70:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/b6a6a961-f4e2-3515-a3e3-44a9b8433460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 199.91.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ae:5b:3c:7b:d9:80:4c:2e:e6:20:2e:df:8c:20:b0:ef:b4: 27:bf:91:0e:5e:24:e2:42:22:b1:9e:6e:03:37:42:ea:0e:b0: 94:13:95:75:f9:78:29:41:b7:54:ef:56:01:1c:2e:4d:4f:06: 2a:da:ab:8a:e7:a1:b1:5d:33:cf:0d:03:de:e0:90:72:53:5d: 63:a5:2a:11:49:d4:9a:90:16:3b:38:7f:5e:f6:17:5c:bc:a8: aa:76:31:86:81:5c:d7:7e:52:90:39:32:93:4e:36:78:a7:ed: 62:d7:f8:36:3b:38:61:de:95:92:bd:e3:20:e4:ee:bb:a1:67: aa:c6:06:b6:f9:f7:be:62:f9:3d:1c:b4:5e:8e:3c:09:ff:e6: 26:81:14:25:5a:17:ce:34:d7:a1:24:98:3a:35:7f:64:1d:1b: 88:bc:d0:b5:e2:64:07:b5:0b:68:2a:91:ea:21:93:c7:6f:e5: 90:ce:ac:23:41:59:e9:a1:a4:98:c6:42:5a:e3:fd:e1:9c:73: 0d:c7:5d:aa:29:48:5b:23:f9:91:e9:27:79:f6:81:98:64:e0: 05:11:cc:1f:37:1c:fa:0a:8a:b5:03:85:a1:06:9e:fd:6e:a5: 08:26:41:03:ba:0c:99:db:8b:6c:31:e4:e0:5f:60:23:0d:d9: 02:98:92:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCr2uxX/BmTGtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTIyYjgyMDItZTVmZC00MmE1LWE4NjAtN2QyMjdkYTEyODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp019dcLfxtRaZnemNr94gxHshizwh85UzhN Cgxph4ecu6zcYJJhedJxB+UVvjvGOx8Z+EgLNLmBW+lLMsf5EXwxG0wyZxNAK7p9 F52ILf+p9gVVsJjNWFk7gJyKvLh1Kq3hZoHBSBvFW4kNRZHUHTdw1P3KWEy00PJd QSL6y3OzrBpEUA9o+X4HVTvaTYZ+MI/gVdg57sKKxtpwi8AGc4Fm9LgZmdIV1Tzc KqgyA1nl/36SDEMe0M+AhJyAoc6faJl4JCU7i3REZ81ZkdZpT/Mpq8cQHx9J8avA eUfNMlpVIUO8ngOMQsy2EwA9k+S/rJ/0jxPu1mzJbql5FTaMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs8Ni8+IRWzaegpGnN7ZLvjHHBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvYjZhNmE5NjEtZjRlMi0z NTE1LWEzZTMtNDRhOWI4NDMzNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1toMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJauWzx72YBMLuYgLt+MILDvtCe/kQ5eJOJCIrGebgM3QuoOsJQTlXX5 eClBt1TvVgEcLk1PBiraq4rnobFdM88NA97gkHJTXWOlKhFJ1JqQFjs4f172F1y8 qKp2MYaBXNd+UpA5MpNONnin7WLX+DY7OGHelZK94yDk7ruhZ6rGBrb5975i+T0c tF6OPAn/5iaBFCVaF84016EkmDo1f2QdG4i80LXiZAe1C2gqkeohk8dv5ZDOrCNB WemhpJjGQlrj/eGccw3HXaopSFsj+ZHpJ3n2gZhk4AURzB83HPoKirUDhaEGnv1u pQgmQQO6DJnbi2wx5OBfYCMN2QKYkig= -----END CERTIFICATE-----Generated at Wed Jul 29 12:30:25 2026 by rpki-client