$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa File: a4d572d7-4e1a-3495-99a5-851c0396c090.roa (raw, json) Hash identifier: Qf2iznW2FblQihB/U04M/qBpgllQuPm9vcisc9Cqq7k= Subject key identifier: B5:6D:5C:A5:B0:88:AA:3A:F0:5D:22:A0:74:31:40:BF:B3:92:B7:A3 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584EA2DFBD7D90BA9A0C71054000 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:bd:7d:90:ba:9a:0c:71:05:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=1e8d7a0b-fbff-4cbe-8e4f-98cafedb2af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:fa:a9:30:db:10:f2:a6:8a:5f:3c:ed:f5: e0:8b:00:e9:c3:2f:09:53:b6:5b:54:6e:a1:66:78: bd:7d:8f:49:bd:72:b7:ba:e2:b2:53:b4:41:35:8d: 0a:52:db:d7:46:80:f2:2c:0d:d2:cf:32:ac:ef:a4: dd:45:c1:d1:61:4e:35:dd:e4:d5:f6:75:8a:12:41: 63:92:c4:2d:23:b1:cb:f1:34:e4:24:35:9a:8a:b2: 76:6b:0d:b2:5c:55:e8:55:e1:0e:51:6b:28:af:9e: 6f:c0:8f:da:fe:68:ce:8b:c3:84:8d:9e:33:19:78: 58:94:a7:b4:df:0d:9c:99:dc:38:86:5e:a8:f4:95: 77:6f:38:19:8b:02:1a:4e:96:5f:30:8c:18:42:3e: 3a:40:77:1e:10:22:1c:a4:be:ad:36:4e:69:41:b1: e5:2e:1a:6a:4d:79:21:22:77:b2:01:9e:3f:6d:a7: 4c:47:c2:7b:4e:87:10:5a:a7:68:6d:19:b8:4d:53: d7:e6:90:9e:80:c3:13:e7:74:97:7a:98:09:67:c6: 33:2f:f5:f9:37:5e:66:7e:73:30:33:62:bf:f5:4e: 4d:ac:c5:cb:19:01:18:65:5b:f3:93:fe:ad:93:92: 42:ce:8f:b7:e7:89:b0:5e:d7:7d:f3:8d:7a:2c:86: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:5C:A5:B0:88:AA:3A:F0:5D:22:A0:74:31:40:BF:B3:92:B7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a4d572d7-4e1a-3495-99a5-851c0396c090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d6:76:17:c4:0f:22:58:19:ec:e6:e6:90:8e:d1:1c:45:9d: af:95:66:8d:3d:37:21:9c:81:7c:33:4e:c7:04:ff:92:21:58: fd:a2:01:05:c5:1c:22:fb:6b:c4:8f:62:d5:cd:a0:d7:82:c6: e2:93:cc:d5:af:cb:1c:4a:de:12:36:10:3d:60:02:4c:54:5d: 47:6e:a5:c8:cf:d5:0b:af:c3:03:6a:be:2a:2a:55:03:10:65: 9e:61:7d:53:a5:77:33:7c:eb:fa:b1:89:ca:31:fb:73:50:ad: af:f6:79:89:cb:3f:e2:e3:f7:aa:f4:1a:ab:c3:68:42:e9:03: d0:80:e4:cb:bb:a6:a9:ed:fb:01:b6:d0:3e:8f:9b:0e:d1:dd: 96:74:52:cf:de:68:f1:63:02:f0:26:3f:48:b1:d7:64:b1:6e: c4:e0:c8:db:4e:6e:a8:7a:49:44:39:f8:1d:2b:f7:8a:31:3d: d1:86:8d:df:a0:8c:82:0d:4c:71:38:0d:83:7d:f4:f1:2d:44: 2b:e2:20:ce:6e:a3:a9:f2:0b:a9:b6:b5:eb:ee:f7:8c:ee:a0: f4:ed:5e:e0:1f:8f:fc:c3:87:93:68:ed:80:8d:2d:d4:df:83: aa:fb:01:f6:79:b6:34:3f:cf:95:48:6b:03:e5:03:7f:b9:c3: be:30:14:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i3719kLqaDHEFQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk MWU4ZDdhMGItZmJmZi00Y2JlLThlNGYtOThjYWZlZGIyYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIP6qTDbEPKmil887fXgiwDpwy8JU7ZbVG6h Zni9fY9JvXK3uuKyU7RBNY0KUtvXRoDyLA3SzzKs76TdRcHRYU413eTV9nWKEkFj ksQtI7HL8TTkJDWairJ2aw2yXFXoVeEOUWsor55vwI/a/mjOi8OEjZ4zGXhYlKe0 3w2cmdw4hl6o9JV3bzgZiwIaTpZfMIwYQj46QHceECIcpL6tNk5pQbHlLhpqTXkh IneyAZ4/badMR8J7TocQWqdobRm4TVPX5pCegMMT53SXepgJZ8YzL/X5N15mfnMw M2K/9U5NrMXLGQEYZVvzk/6tk5JCzo+354mwXtd98416LIYNfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVtXKWwiKo68F0ioHQxQL+zkrejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTRkNTcyZDctNGUxYS0z NDk1LTk5YTUtODUxYzAzOTZjMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7WdhfEDyJYGezm5pCO0RxFna+VZo09NyGcgXwzTscE/5IhWP2iAQXF HCL7a8SPYtXNoNeCxuKTzNWvyxxK3hI2ED1gAkxUXUdupcjP1QuvwwNqvioqVQMQ ZZ5hfVOldzN86/qxicox+3NQra/2eYnLP+Lj96r0GqvDaELpA9CA5Mu7pqnt+wG2 0D6Pmw7R3ZZ0Us/eaPFjAvAmP0ix12SxbsTgyNtObqh6SUQ5+B0r94oxPdGGjd+g jIINTHE4DYN99PEtRCviIM5uo6nyC6m2tevu94zuoPTtXuAfj/zDh5No7YCNLdTf g6r7AfZ5tjQ/z5VIawPlA3+5w74wFF8= -----END CERTIFICATE-----Generated at Tue Jul 28 21:45:02 2026 by rpki-client