$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa File: 59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa (raw, json) Hash identifier: xpSa21WaLSDEC7nEhgVyqv5sdwRfZapXrCwXFDtvb0U= Subject key identifier: DF:F8:A6:2A:9E:53:00:3F:52:3B:1C:E3:3A:62:B3:F2:A6:09:1D:B8 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584EA7912D001C0FC3D83FB159C0 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10794 IP address blocks: 199.43.48.0/23 maxlen: 23 199.43.48.0/24 maxlen: 24 199.43.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:2d:00:1c:0f:c3:d8:3f:b1:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ca15e6d9-06a7-4de7-961d-a6fbdd229411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:9f:06:66:ab:60:49:a7:64:b6:f8:85:eb: 09:77:17:e8:44:c8:c7:40:ab:bf:1b:e2:ce:69:ed: 6a:64:ac:a9:50:33:60:70:75:a9:fc:5c:5c:82:28: d4:12:8f:f6:ce:aa:51:c4:eb:9e:7a:e5:1b:3c:6a: 00:56:bd:7f:40:32:e1:86:9d:f4:7f:ec:6a:12:68: 0b:79:37:06:c8:d0:6c:b8:53:da:92:24:00:82:5c: 5b:77:e5:d2:be:fd:5e:1e:56:bd:e1:d5:c1:30:59: 2c:26:26:b8:97:1a:86:ee:be:05:0c:6e:2b:ee:44: 36:0f:37:65:bb:4e:29:e0:35:e1:16:14:d2:dd:81: 55:17:13:b8:c7:35:3e:02:a6:bf:1c:57:3e:56:fa: d3:75:fb:5f:36:5c:bc:15:fe:8a:11:21:33:d8:df: d8:01:bb:e8:3d:68:a8:bc:b7:66:35:d5:7d:d8:35: 11:10:ea:3e:93:82:d5:f9:4e:98:9b:a8:f8:77:e8: cb:6b:cc:ce:eb:ac:34:62:e6:2e:4d:b1:e4:80:eb: 60:5b:f5:4a:57:3b:45:c6:5b:92:8e:08:39:dd:e6: 39:98:3e:d9:f8:6c:99:e8:2c:bb:ad:d2:84:70:35: e2:fb:b7:8f:4b:94:88:29:2f:3e:9f:a2:4c:cc:8c: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F8:A6:2A:9E:53:00:3F:52:3B:1C:E3:3A:62:B3:F2:A6:09:1D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/59c4a8b9-75fb-36ab-a198-239bb1f7d5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c3:34:07:23:05:4b:8d:5b:f7:76:45:c0:48:fd:93:b5:aa: 23:74:df:eb:cf:64:6e:82:45:f7:e2:c3:2c:10:dd:ff:c6:d8: 6c:27:d1:4a:2b:84:44:e6:51:6d:82:22:30:4d:d9:fd:20:9c: 60:95:f5:21:d5:5d:cd:f7:fd:e1:e5:78:e7:d8:4e:43:f7:65: 37:a1:27:53:cc:71:00:98:ba:d8:57:a8:c0:24:7e:e4:ce:1a: 07:50:4c:7b:d6:d7:f2:e3:e1:46:18:ec:0a:45:ad:42:7a:93: d1:d9:fa:cb:ae:cc:2c:9c:c8:d4:56:72:bf:1c:36:e8:72:3c: 82:6f:ef:95:e8:f2:aa:04:fa:b4:2c:06:78:ef:8e:c7:04:fd: d6:bb:bc:35:2f:ca:de:31:73:48:4c:a6:f0:33:13:d1:b9:e8: 3c:34:49:16:9e:49:bc:6d:e3:c7:96:16:87:36:f7:8d:20:21: 30:4c:8c:5b:e5:f3:f6:5f:09:24:9d:ed:2e:36:05:36:16:57: 85:76:73:17:c9:89:d9:29:f5:00:be:49:c9:14:18:35:f8:8e: 23:1c:8f:6b:41:00:4e:ef:6d:99:21:11:85:c1:71:8e:db:d8: 22:d8:f2:2c:2e:01:b0:0c:9c:5d:fe:f9:3a:a9:6a:0e:e4:2c: f8:7a:ee:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkS0AHA/D2D+xWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2ExNWU2ZDktMDZhNy00ZGU3LTk2MWQtYTZmYmRkMjI5NDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHufBmarYEmnZLb4hesJdxfoRMjHQKu/G+LO ae1qZKypUDNgcHWp/FxcgijUEo/2zqpRxOueeuUbPGoAVr1/QDLhhp30f+xqEmgL eTcGyNBsuFPakiQAglxbd+XSvv1eHla94dXBMFksJia4lxqG7r4FDG4r7kQ2Dzdl u04p4DXhFhTS3YFVFxO4xzU+Aqa/HFc+VvrTdftfNly8Ff6KESEz2N/YAbvoPWio vLdmNdV92DUREOo+k4LV+U6Ym6j4d+jLa8zO66w0YuYuTbHkgOtgW/VKVztFxluS jgg53eY5mD7Z+GyZ6Cy7rdKEcDXi+7ePS5SIKS8+n6JMzIxqRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/4piqeUwA/Ujsc4zpis/KmCR24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvNTljNGE4YjktNzVmYi0z NmFiLWExOTgtMjM5YmIxZjdkNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/DNAcjBUuNW/d2RcBI/ZO1qiN03+vPZG6CRffiwywQ3f/G2Gwn0Uor hETmUW2CIjBN2f0gnGCV9SHVXc33/eHleOfYTkP3ZTehJ1PMcQCYuthXqMAkfuTO GgdQTHvW1/Lj4UYY7ApFrUJ6k9HZ+suuzCycyNRWcr8cNuhyPIJv75Xo8qoE+rQs BnjvjscE/da7vDUvyt4xc0hMpvAzE9G56Dw0SRaeSbxt48eWFoc2940gITBMjFvl 8/ZfCSSd7S42BTYWV4V2cxfJidkp9QC+SckUGDX4jiMcj2tBAE7vbZkhEYXBcY7b 2CLY8iwuAbAMnF3++Tqpag7kLPh67rg= -----END CERTIFICATE-----Generated at Wed Jul 29 07:38:41 2026 by rpki-client