$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa File: 1f1498a6-2bec-3976-84a6-72c5baa00e10.roa (raw, json) Hash identifier: yz6BFSMSFAtHO7A/8ugNoUtxlBV8W+n/MIHiV+m211w= Subject key identifier: 0F:34:F9:79:FE:B9:04:98:99:93:6E:39:A8:17:7C:E5:05:6C:46:A8 Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Certificate serial: 010D0C9F4328584E9A7FD7FBAD0FAC2DB1109D00 Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 3855 IP address blocks: 199.96.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d7:fb:ad:0f:ac:2d:b1:10:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=cadd5223-ab00-4640-bb7e-7e61083d67f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:1c:25:00:e4:6f:66:99:1c:f3:a4:2d:02: d5:a8:8c:01:f2:11:4a:29:2f:78:e4:e2:d0:f8:17: 92:55:72:63:7f:02:9f:ed:a1:a8:a4:79:8e:a8:53: d9:06:e8:06:64:93:81:b8:ab:96:72:f3:5f:29:fc: 59:f3:5b:01:89:35:59:10:ec:30:50:34:1b:e7:a4: cc:e8:1d:63:b4:93:6b:ef:b1:1a:9c:21:99:2c:32: c3:29:a6:16:1a:41:52:cb:8c:78:00:e9:9d:0e:29: ac:6a:58:29:34:75:ed:9c:a6:cb:5d:2a:24:13:b1: 89:83:ea:9c:5b:71:97:af:ef:cb:51:97:e2:56:82: 98:8d:e4:a5:af:70:58:4c:e9:98:9b:46:ef:83:ac: c5:90:29:f6:1f:48:a0:e7:f6:d4:b0:7f:33:e0:67: 0a:2d:73:93:78:7d:8f:08:75:ee:84:96:ae:1d:c5: bc:86:61:d1:5f:0c:07:3d:ef:5d:be:5d:23:2d:8a: c1:9d:8b:5b:c8:75:05:26:85:47:d5:aa:da:cd:bf: 7e:54:1d:e9:f3:05:d8:a4:d7:b6:b5:9c:90:fa:b9: c3:bf:23:04:12:4a:1e:8f:19:3f:80:8c:41:fe:bc: a0:d7:e8:9b:4c:5e:63:52:4e:71:ef:1f:21:96:74: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:34:F9:79:FE:B9:04:98:99:93:6E:39:A8:17:7C:E5:05:6C:46:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl X509v3 Authority Key Identifier: keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer sbgp-ipAddrBlock: critical IPv4: 199.96.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:12:4a:b1:fd:55:b1:ae:f6:6f:33:2f:34:5b:eb:aa:8a:ec: b1:9a:f1:79:bb:da:b7:7e:a0:8f:70:98:bc:a2:11:d3:da:c8: 13:0d:f0:61:d6:77:c7:01:80:7d:7b:cc:7f:a1:89:e8:fc:d8: b9:32:40:db:3e:e9:e3:a5:a9:f5:84:cb:94:6c:98:e8:d7:fc: ff:d6:52:30:cf:a4:13:18:ce:53:b9:f4:e6:81:98:9a:78:06: c7:ca:4a:da:ed:b0:f4:ae:4a:90:ea:4a:d9:e5:d0:ff:6d:da: 56:cd:69:79:07:46:bf:bf:71:11:a3:f5:50:e5:49:af:59:69: ff:11:a3:06:e6:de:50:ae:f5:cd:66:c2:02:2e:23:86:32:59: 3f:5f:53:ed:c8:d5:4d:2d:2a:ee:38:20:fb:70:fd:02:47:e3: a0:85:b7:d8:ed:68:08:85:05:6b:04:fa:d9:a6:23:e9:83:6e: 7f:c5:ef:d1:36:39:ce:4c:9f:6f:b6:6e:60:95:c0:2e:c8:c1: a9:75:dd:f3:5b:fe:15:ff:be:6f:16:ac:65:6c:b9:1c:77:3f: 66:9f:23:f5:e8:a0:7c:55:23:c1:c8:64:93:60:94:b4:b5:1e: f1:c9:e0:63:de:dc:22:da:93:7f:93:8d:87:71:cd:30:d7:15: 73:ff:d3:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9f7rQ+sLbEQnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk Mzc4MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk Y2FkZDUyMjMtYWIwMC00NjQwLWJiN2UtN2U2MTA4M2Q2N2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ccJQDkb2aZHPOkLQLVqIwB8hFKKS945OLQ +BeSVXJjfwKf7aGopHmOqFPZBugGZJOBuKuWcvNfKfxZ81sBiTVZEOwwUDQb56TM 6B1jtJNr77EanCGZLDLDKaYWGkFSy4x4AOmdDimsalgpNHXtnKbLXSokE7GJg+qc W3GXr+/LUZfiVoKYjeSlr3BYTOmYm0bvg6zFkCn2H0ig5/bUsH8z4GcKLXOTeH2P CHXuhJauHcW8hmHRXwwHPe9dvl0jLYrBnYtbyHUFJoVH1arazb9+VB3p8wXYpNe2 tZyQ+rnDvyMEEkoejxk/gIxB/ryg1+ibTF5jUk5x7x8hlnQs7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA80+Xn+uQSYmZNuOagXfOUFbEaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1 YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvMWYxNDk4YTYtMmJlYy0z OTc2LTg0YTYtNzJjNWJhYTAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABESSrH9VbGu9m8zLzRb66qK7LGa8Xm72rd+oI9wmLyiEdPayBMN8GHW d8cBgH17zH+hiej82LkyQNs+6eOlqfWEy5RsmOjX/P/WUjDPpBMYzlO59OaBmJp4 BsfKStrtsPSuSpDqStnl0P9t2lbNaXkHRr+/cRGj9VDlSa9Zaf8Rowbm3lCu9c1m wgIuI4YyWT9fU+3I1U0tKu44IPtw/QJH46CFt9jtaAiFBWsE+tmmI+mDbn/F79E2 Oc5Mn2+2bmCVwC7Iwal13fNb/hX/vm8WrGVsuRx3P2afI/XooHxVI8HIZJNglLS1 HvHJ4GPe3CLak3+TjYdxzTDXFXP/0xk= -----END CERTIFICATE-----Generated at Tue Jul 28 19:33:01 2026 by rpki-client