$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa File: af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa (raw, json) Hash identifier: I+f44funL0QxtYQTmQjfbTUCY8ktsrNzbyu4eClGZ34= Subject key identifier: E2:F1:3F:55:AF:10:99:7E:84:EF:43:E9:2D:63:4E:C2:21:20:A9:58 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA793FD2918C3D2B8FF494900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 192.179.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:fd:29:18:c3:d2:b8:ff:49:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=690bd3cf-670c-4f11-88d2-41a264cb2210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:dc:7d:aa:38:f1:61:e9:ca:f7:4d:29:40: 48:50:ee:c2:b7:31:4e:18:d1:6f:40:15:a7:55:70: 2d:ab:1a:37:87:ff:6a:e9:5f:6b:df:d2:46:33:f9: e9:f8:f6:8b:2c:c3:96:df:ee:28:a0:52:3e:5b:dc: a5:f1:f2:5c:a5:ba:08:30:0a:81:8e:4d:de:51:ce: 34:e3:4b:59:3a:5d:c8:c0:ca:cf:ed:91:b7:4a:11: e4:8b:45:89:74:f8:83:62:92:77:66:55:34:51:3b: 9c:1b:4f:10:b8:1d:be:68:a9:51:c1:5b:62:44:82: d1:9e:fe:60:17:27:f5:6b:5b:4c:b5:52:a0:aa:fd: 06:33:7f:44:54:cc:c0:48:7b:95:f7:f2:28:22:b2: 08:e2:8d:57:dd:d7:31:83:1b:e4:64:c6:61:bf:7e: 4f:a6:dc:4a:0a:4b:18:53:57:0f:cf:29:17:07:e4: 12:c4:67:05:37:84:d1:40:78:20:3e:8d:99:e4:e7: 7f:86:8d:53:13:37:98:3b:aa:3c:61:91:83:a8:a2: 88:2f:7b:61:bf:bb:3e:f4:5a:15:98:3b:32:d5:e0: 81:27:ae:eb:53:21:1d:df:b7:79:c9:a5:a0:f6:f7: c1:e0:69:d2:0a:65:10:a2:c4:f6:4e:4b:93:13:9b: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F1:3F:55:AF:10:99:7E:84:EF:43:E9:2D:63:4E:C2:21:20:A9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.179.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1a:e9:93:52:dc:2e:50:e7:59:9e:fa:de:89:78:94:81:fb: 7f:a7:9e:94:65:1c:3f:14:03:14:91:8f:5a:58:fe:76:67:a7: 6d:39:fc:40:52:d2:8a:91:ee:48:25:b1:55:b0:8e:ad:5d:39: 93:e5:71:1c:e2:9c:f9:33:55:c9:e9:3e:1c:d3:70:6f:4d:09: 01:32:56:ee:f5:4a:9f:f4:af:17:23:e9:6a:f7:e8:91:b8:7a: cd:92:3c:96:09:bb:3e:ed:0d:8a:8d:cc:28:5d:bf:3f:26:94: 43:c5:63:05:4e:39:39:bb:df:4a:bc:83:21:2d:2e:be:03:ec: 00:53:c7:c5:1c:83:ab:c8:39:09:89:58:72:3a:1a:33:3a:42: ab:6f:07:08:29:e8:76:ee:c6:f3:0d:b7:05:a4:38:66:b6:1c: 75:38:28:45:38:24:03:60:d9:b1:70:50:44:da:90:87:d2:b9: d5:5e:66:6b:99:67:0e:ee:1c:cd:d0:69:7b:2a:43:09:c7:ba: fa:19:fa:a7:6a:23:f6:c5:27:0c:c5:8b:d3:8a:f3:dc:73:7d: 3b:5a:56:7e:ab:1e:04:2e:d4:4e:d4:97:2d:89:68:da:0e:d7: bc:ce:0a:99:7e:7e:65:d0:20:5a:2f:17:26:a3:e0:f7:c2:82: aa:7a:a3:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/0pGMPSuP9JSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjkwYmQzY2YtNjcwYy00ZjExLTg4ZDItNDFhMjY0Y2IyMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYTcfao48WHpyvdNKUBIUO7CtzFOGNFvQBWn VXAtqxo3h/9q6V9r39JGM/np+PaLLMOW3+4ooFI+W9yl8fJcpboIMAqBjk3eUc40 40tZOl3IwMrP7ZG3ShHki0WJdPiDYpJ3ZlU0UTucG08QuB2+aKlRwVtiRILRnv5g Fyf1a1tMtVKgqv0GM39EVMzASHuV9/IoIrII4o1X3dcxgxvkZMZhv35PptxKCksY U1cPzykXB+QSxGcFN4TRQHggPo2Z5Od/ho1TEzeYO6o8YZGDqKKIL3thv7s+9FoV mDsy1eCBJ67rUyEd37d5yaWg9vfB4GnSCmUQosT2TkuTE5uCowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLxP1WvEJl+hO9D6S1jTsIhIKlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY2ZWM4NWEtOTFhMi0z YTM0LTk2ZTUtOWU3Y2I3OGE0OWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8a6ZNS3C5Q51me+t6JeJSB+3+nnpRlHD8UAxSRj1pY/nZnp205/EBS 0oqR7kglsVWwjq1dOZPlcRzinPkzVcnpPhzTcG9NCQEyVu71Sp/0rxcj6Wr36JG4 es2SPJYJuz7tDYqNzChdvz8mlEPFYwVOOTm730q8gyEtLr4D7ABTx8Ucg6vIOQmJ WHI6GjM6QqtvBwgp6HbuxvMNtwWkOGa2HHU4KEU4JANg2bFwUETakIfSudVeZmuZ Zw7uHM3QaXsqQwnHuvoZ+qdqI/bFJwzFi9OK89xzfTtaVn6rHgQu1E7Uly2JaNoO 17zOCpl+fmXQIFovFyaj4PfCgqp6oxQ= -----END CERTIFICATE-----Generated at Wed Jul 29 06:05:30 2026 by rpki-client