$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa File: ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa (raw, json) Hash identifier: T3N2egW2A57hRHMKkjw9bX/WeyD3UPBXBoQiCWA/oHs= Subject key identifier: 0F:AC:07:4F:00:57:E0:1D:CB:A2:C5:37:26:57:92:E9:2D:85:EF:7A Certificate issuer: /CN=209791d7-ad3b-4334-ba56-5771f29ad3af Certificate serial: 010D0C9F4328584E9EAFE7500429B3F558113080 Authority key identifier: 26:DC:9B:90:CC:D5:D2:B1:CD:1D:D8:2B:8F:E7:69:1F:A5:01:26:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 6143 IP address blocks: 192.225.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:e7:50:04:29:b3:f5:58:11:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209791d7-ad3b-4334-ba56-5771f29ad3af Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=e7973b96-dcae-4253-a6cc-418a39e6ad5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:21:0e:3e:d6:52:cf:3b:be:f6:bf:4f:a1: 11:c2:a6:61:13:09:7e:85:ca:fd:2a:bb:5e:4f:95: 06:49:46:49:33:4e:89:8e:46:55:99:12:4e:94:e4: f5:4a:2e:c6:ae:20:0e:4f:53:a8:9b:d8:7e:a9:06: b3:81:6e:6d:d4:45:8c:18:d0:fe:3e:bb:a8:60:3a: 44:75:b8:d6:aa:f8:21:cb:df:db:66:40:a7:5b:0c: 5b:a3:16:aa:87:fc:19:49:53:7c:66:cd:77:1c:eb: fc:e2:67:bc:1b:1a:aa:d8:05:a1:8d:cd:a0:e8:dd: a6:d5:73:5b:d0:12:c5:18:91:3e:d0:2c:7f:88:41: 36:87:d5:ec:6a:dd:2c:fb:70:84:5e:63:09:00:ba: 5d:f0:fe:20:90:2f:d2:a1:83:59:ea:d6:f5:e1:46: 38:77:48:45:0e:2f:42:44:0a:65:b1:ac:fe:e6:05: 33:91:8a:84:82:b9:28:ec:59:66:58:e0:d3:40:62: eb:7b:a5:5a:ad:47:e9:ca:fd:91:79:bc:10:21:a3: 09:35:6d:52:41:b9:c4:39:ae:b9:a8:26:1a:43:c1: 38:c5:cd:46:78:2f:d7:20:b5:2b:56:1f:63:d2:0d: 9a:f0:15:a2:f7:21:0f:13:e6:ac:d5:16:14:77:76: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AC:07:4F:00:57:E0:1D:CB:A2:C5:37:26:57:92:E9:2D:85:EF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/ee86fdcc-6a2d-3567-9754-142c8e9ae08b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af/209791d7-ad3b-4334-ba56-5771f29ad3af.crl X509v3 Authority Key Identifier: keyid:26:DC:9B:90:CC:D5:D2:B1:CD:1D:D8:2B:8F:E7:69:1F:A5:01:26:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/209791d7-ad3b-4334-ba56-5771f29ad3af.cer sbgp-ipAddrBlock: critical IPv4: 192.225.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:79:97:ba:4b:11:42:b9:0c:f9:da:51:2c:53:71:05:8e:0c: ff:40:11:19:29:2f:09:40:d6:76:5e:be:dd:6a:42:e5:35:6a: 25:34:1e:d2:4b:86:30:40:64:12:42:ce:74:22:62:e0:b5:b6: 4f:1f:82:b0:7e:8b:e1:17:65:dc:d6:73:b5:45:50:95:d0:c5: 56:13:5b:ce:e5:e0:3a:66:34:49:5b:28:a8:d5:7b:11:44:ce: 9a:b2:0d:e4:19:38:d1:15:0d:13:30:69:8b:17:6c:10:10:08: bb:76:a0:b0:44:43:05:dd:20:98:dc:06:23:5b:8c:7c:42:91: 71:d4:b6:67:e7:fe:38:31:73:12:15:af:bc:b3:7f:66:ed:21: 04:95:f7:b7:e0:8b:fc:77:4d:4a:30:8c:c2:11:0c:8d:f2:6c: ad:55:c4:41:1d:a7:13:e2:b0:aa:c2:29:94:c9:0a:cf:d6:f2: 22:0c:98:f4:b2:aa:25:46:5e:41:98:ad:25:d6:7e:49:57:02: dd:52:5b:85:a5:4a:68:56:f8:f3:f6:d1:77:17:70:0f:7e:68: 1f:e4:77:c0:d0:41:ad:99:e6:32:68:c0:25:ef:6a:3a:09:2e: 40:6e:55:46:5e:ff:34:5d:02:ac:d7:ed:11:54:f0:d1:dc:18: cc:eb:a5:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+dQBCmz9VgRMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5NzkxZDctYWQzYi00MzM0LWJhNTYtNTc3MWYyOWFk M2FmMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZTc5NzNiOTYtZGNhZS00MjUzLWE2Y2MtNDE4YTM5ZTZhZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ghDj7WUs87vva/T6ERwqZhEwl+hcr9Krte T5UGSUZJM06JjkZVmRJOlOT1Si7GriAOT1Oom9h+qQazgW5t1EWMGND+PruoYDpE dbjWqvghy9/bZkCnWwxboxaqh/wZSVN8Zs13HOv84me8Gxqq2AWhjc2g6N2m1XNb 0BLFGJE+0Cx/iEE2h9Xsat0s+3CEXmMJALpd8P4gkC/SoYNZ6tb14UY4d0hFDi9C RAplsaz+5gUzkYqEgrko7FlmWODTQGLre6VarUfpyv2RebwQIaMJNW1SQbnEOa65 qCYaQ8E4xc1GeC/XILUrVh9j0g2a8BWi9yEPE+as1RYUd3YGOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+sB08AV+Ady6LFNyZXkukthe96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMDk3 OTFkNy1hZDNiLTQzMzQtYmE1Ni01NzcxZjI5YWQzYWYvZWU4NmZkY2MtNmEyZC0z NTY3LTk3NTQtMTQyYzhlOWFlMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjA5NzkxZDctYWQzYi00MzM0LWJh NTYtNTc3MWYyOWFkM2FmLzIwOTc5MWQ3LWFkM2ItNDMzNC1iYTU2LTU3NzFmMjlh ZDNhZi5jcmwwHwYDVR0jBBgwFoAUJtybkMzV0rHNHdgrj+dpH6UBJpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMDk3OTFkNy1hZDNiLTQzMzQtYmE1Ni01Nzcx ZjI5YWQzYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp5l7pLEUK5DPnaUSxTcQWODP9AERkpLwlA1nZevt1qQuU1aiU0HtJL hjBAZBJCznQiYuC1tk8fgrB+i+EXZdzWc7VFUJXQxVYTW87l4DpmNElbKKjVexFE zpqyDeQZONEVDRMwaYsXbBAQCLt2oLBEQwXdIJjcBiNbjHxCkXHUtmfn/jgxcxIV r7yzf2btIQSV97fgi/x3TUowjMIRDI3ybK1VxEEdpxPisKrCKZTJCs/W8iIMmPSy qiVGXkGYrSXWfklXAt1SW4WlSmhW+PP20XcXcA9+aB/kd8DQQa2Z5jJowCXvajoJ LkBuVUZe/zRdAqzX7RFU8NHcGMzrpSo= -----END CERTIFICATE-----Generated at Tue Jul 28 23:07:58 2026 by rpki-client