$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/00e029f6-7801-3243-bd6b-483ae23ebee6.roa File: 00e029f6-7801-3243-bd6b-483ae23ebee6.roa (raw, json) Hash identifier: 9jazhos7nhKfbzPqyzDyzETDLKf2HZJkbfeMJB5BmaA= Subject key identifier: 42:85:52:2E:9E:F7:0C:84:7A:23:E7:E7:68:B6:D8:A8:BD:88:F3:C9 Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F4328584EA78F5BC25AB0205D671A5800 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/00e029f6-7801-3243-bd6b-483ae23ebee6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33164 IP address blocks: 208.89.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:5b:c2:5a:b0:20:5d:67:1a:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9921cff0-a2ba-487a-b0e3-a37fe5b4f0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:22:d5:ba:07:94:e0:b7:54:55:97:9e:bc: 82:9e:74:1c:c3:ee:1d:ad:eb:0e:a6:73:f8:bc:47: b6:64:be:7b:82:f2:5b:2c:fa:f9:2a:80:3a:41:62: 27:80:16:e3:21:74:54:7c:53:f1:46:7a:8f:be:c9: fc:1e:7b:15:76:97:2d:66:49:6e:39:11:22:ca:34: 03:46:6a:28:13:c4:2c:9a:0e:6d:df:73:6b:74:3e: 95:3d:14:a3:23:56:40:0f:2e:3d:53:67:21:a9:1d: 65:2c:3e:49:67:ec:f4:5e:96:3c:05:05:0b:97:6e: f2:fb:0f:da:4e:e7:d2:38:fa:8d:6f:ac:1b:6e:3f: ed:50:e0:db:f5:e6:81:b3:09:15:8a:83:6b:8f:36: f4:9b:a4:78:24:72:43:47:3b:0a:4f:01:ea:3e:d3: 15:54:d5:dd:76:4a:6d:d0:34:bc:23:47:3b:40:e5: d2:ec:be:10:d0:4e:de:36:0a:85:e6:36:27:b5:6e: 59:95:b8:2f:a5:7c:e8:de:01:bf:8c:97:ca:84:21: ad:f2:e0:55:0a:9f:e3:e7:b4:07:47:20:f6:fa:0a: 51:2a:f6:d7:06:24:1b:a5:e3:10:08:5b:ca:4b:f0: 97:f7:94:d8:90:7b:f4:b2:31:40:65:c1:31:de:d7: b9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:85:52:2E:9E:F7:0C:84:7A:23:E7:E7:68:B6:D8:A8:BD:88:F3:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/00e029f6-7801-3243-bd6b-483ae23ebee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 208.89.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:48:60:1b:81:50:c0:47:76:0d:c5:4a:e0:64:5e:fd:f4:39: 62:87:fc:a9:33:cc:20:ca:98:a7:bf:bb:12:20:c0:9d:3d:af: 19:a1:d0:b0:0c:3d:67:83:5b:d5:86:f3:c5:8b:7d:86:d1:58: 64:64:93:c1:77:be:e8:1b:14:4f:b7:0a:1f:69:04:c3:7f:80: 30:98:aa:b4:e5:cc:c1:10:4b:fd:66:33:d2:b1:be:c1:0a:05: 47:33:85:4c:8f:48:ea:28:ca:0e:02:3c:d1:7b:36:a3:6f:1e: 33:e2:1a:93:92:2a:db:8a:36:50:d7:d8:8a:74:fb:cc:83:55: 52:02:dd:4e:b4:62:33:dd:39:97:13:4c:60:f3:59:83:59:15: ad:1e:91:ce:ac:01:ca:ef:91:d9:45:e8:4b:10:20:c7:f9:bc: 8e:59:27:71:f2:a8:62:48:64:32:6c:31:21:8d:1a:a7:33:3c: ea:c4:87:e0:16:ba:06:cb:8d:60:19:5b:99:53:22:d8:b4:1e: 45:67:0e:dc:1a:10:e8:3a:0e:02:2e:93:e1:96:0d:41:5c:bd: 2d:5e:11:d3:78:f0:45:6b:63:6d:c9:c6:bd:6a:e1:1c:71:bb: 60:71:54:94:2c:eb:82:1f:2d:6b:08:63:9a:da:75:9b:10:b6: f6:04:71:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj1vCWrAgXWcaWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTkyMWNmZjAtYTJiYS00ODdhLWIwZTMtYTM3ZmU1YjRmMGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW8i1boHlOC3VFWXnryCnnQcw+4dresOpnP4 vEe2ZL57gvJbLPr5KoA6QWIngBbjIXRUfFPxRnqPvsn8HnsVdpctZkluOREiyjQD RmooE8Qsmg5t33NrdD6VPRSjI1ZADy49U2chqR1lLD5JZ+z0XpY8BQULl27y+w/a TufSOPqNb6wbbj/tUODb9eaBswkVioNrjzb0m6R4JHJDRzsKTwHqPtMVVNXddkpt 0DS8I0c7QOXS7L4Q0E7eNgqF5jYntW5ZlbgvpXzo3gG/jJfKhCGt8uBVCp/j57QH RyD2+gpRKvbXBiQbpeMQCFvKS/CX95TYkHv0sjFAZcEx3te5kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKFUi6e9wyEeiPn52i22Ki9iPPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvMDBlMDI5ZjYtNzgwMS0z MjQzLWJkNmItNDgzYWUyM2ViZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FmCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhIYBuBUMBHdg3FSuBkXv30OWKH/KkzzCDKmKe/uxIgwJ09rxmh0LAM PWeDW9WG88WLfYbRWGRkk8F3vugbFE+3Ch9pBMN/gDCYqrTlzMEQS/1mM9KxvsEK BUczhUyPSOooyg4CPNF7NqNvHjPiGpOSKtuKNlDX2Ip0+8yDVVIC3U60YjPdOZcT TGDzWYNZFa0ekc6sAcrvkdlF6EsQIMf5vI5ZJ3HyqGJIZDJsMSGNGqczPOrEh+AW ugbLjWAZW5lTIti0HkVnDtwaEOg6DgIuk+GWDUFcvS1eEdN48EVrY23Jxr1q4Rxx u2BxVJQs64IfLWsIY5radZsQtvYEcVM= -----END CERTIFICATE-----Generated at Wed Jul 29 14:30:46 2026 by rpki-client