$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa File: 31de5975-70d3-38db-af47-39cb7d439a32.roa (raw, json) Hash identifier: SQVc0pcxq5nHf4Dd78TEKCoYzLJZu6q1YHFShtthqkU= Subject key identifier: AC:7B:9A:46:F6:E6:2E:F7:6D:3C:7C:CC:0E:19:47:65:9D:52:37:70 Certificate issuer: /CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Certificate serial: 010D0C9F4328584EA794E94D7BAE08D31A94A660 Authority key identifier: 14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3450 IP address blocks: 192.249.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:e9:4d:7b:ae:08:d3:1a:94:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12b39cc-0108-4db1-b059-b4833b53c1a3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6ec6127b-d9d6-4961-b608-f98b8a97c568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:ea:79:a7:32:f9:df:d1:c0:a1:a9:25:e7: b2:8e:cd:d2:4e:31:ab:9d:b3:f3:2f:7f:48:bf:71: 27:7d:d3:38:a7:0d:e5:d8:37:b4:9c:06:b7:b5:13: 2a:ce:82:9a:c0:2f:03:97:79:f4:73:8f:6e:0a:86: a5:41:41:f4:d0:e8:62:ff:39:a4:cd:32:2e:e9:4c: 35:10:d7:67:68:b7:c4:1c:42:62:0a:ae:96:f2:d9: 43:a3:57:f6:04:60:df:12:a1:a8:24:b6:5f:4a:a3: 31:14:7a:fe:42:ee:30:93:d3:2a:7e:a9:01:e3:70: 20:f4:8d:0b:7f:59:70:55:b5:ef:72:ed:46:f0:52: 0f:eb:cc:4b:dc:1b:2e:14:9f:19:a1:90:fe:33:c8: 3c:cb:9e:7a:1b:41:21:91:3f:c5:b7:bd:9f:b2:5b: ed:cc:c9:25:71:c0:9a:4f:78:cb:8c:e6:d5:34:22: d4:51:5e:b5:c0:63:df:ca:eb:ce:d8:5a:98:e3:ac: b2:4c:48:e6:0c:a2:f7:32:ed:d6:a7:24:29:50:54: c3:10:b0:08:d0:15:d0:9e:a1:d3:06:d7:93:c9:39: 52:e8:97:96:36:d5:49:39:01:90:e7:56:a0:43:54: 04:01:de:20:88:54:e9:68:06:e1:f5:fa:e6:99:9e: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7B:9A:46:F6:E6:2E:F7:6D:3C:7C:CC:0E:19:47:65:9D:52:37:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl X509v3 Authority Key Identifier: keyid:14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer sbgp-ipAddrBlock: critical IPv4: 192.249.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fc:7f:85:b8:ee:88:71:1f:24:6b:3d:b7:ff:43:ce:46:6d: 90:2d:f0:8f:f4:2c:fc:75:4e:43:2f:9c:cc:43:51:fd:bd:2d: d6:c8:f3:5d:d7:b3:c1:08:00:e6:9f:e1:45:4c:a5:0d:21:73: 5f:67:93:b6:b1:03:b2:0b:ad:2d:7e:09:06:3c:bb:71:7d:8a: c4:81:7d:dc:18:17:29:09:78:64:43:ca:c5:b3:bc:02:6e:fc: 99:cb:29:25:b1:c6:2a:9f:f8:bf:e5:31:97:ca:0b:9f:72:5f: 5a:20:45:d6:62:be:a3:43:5e:e1:d6:c7:82:ba:3f:8c:bf:d4: 24:a4:ef:c5:05:77:0b:7e:f0:4f:db:ca:2e:74:fe:d5:82:28: 92:1c:92:bb:e0:f2:13:b9:49:b1:6d:ab:1b:62:fd:ea:8e:90: a5:44:80:52:b7:a3:0a:be:8d:a7:b7:ac:f3:dc:bd:ad:b6:a9: 00:19:72:d5:81:52:38:23:6a:f6:82:33:73:f4:80:8b:ea:8d: 25:4a:92:81:d7:ca:f6:17:dc:a6:05:27:2e:ad:1f:99:22:ae: b3:3a:f6:9a:44:ff:23:9b:f4:aa:ce:3c:c1:86:f3:96:5b:d8: ff:89:c3:e7:08:25:89:f8:4a:5b:63:df:4e:a9:b4:5a:00:73: 1d:75:08:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlOlNe64I0xqUpmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEyYjM5Y2MtMDEwOC00ZGIxLWIwNTktYjQ4MzNiNTNj MWEzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmVjNjEyN2ItZDlkNi00OTYxLWI2MDgtZjk4YjhhOTdjNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBzqeacy+d/RwKGpJeeyjs3STjGrnbPzL39I v3EnfdM4pw3l2De0nAa3tRMqzoKawC8Dl3n0c49uCoalQUH00Ohi/zmkzTIu6Uw1 ENdnaLfEHEJiCq6W8tlDo1f2BGDfEqGoJLZfSqMxFHr+Qu4wk9MqfqkB43Ag9I0L f1lwVbXvcu1G8FIP68xL3BsuFJ8ZoZD+M8g8y556G0EhkT/Ft72fslvtzMklccCa T3jLjObVNCLUUV61wGPfyuvO2FqY46yyTEjmDKL3Mu3WpyQpUFTDELAI0BXQnqHT BteTyTlS6JeWNtVJOQGQ51agQ1QEAd4giFTpaAbh9frmmZ6yywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKx7mkb25i73bTx8zA4ZR2WdUjdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJi MzljYy0wMTA4LTRkYjEtYjA1OS1iNDgzM2I1M2MxYTMvMzFkZTU5NzUtNzBkMy0z OGRiLWFmNDctMzljYjdkNDM5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjEyYjM5Y2MtMDEwOC00ZGIxLWIw NTktYjQ4MzNiNTNjMWEzL2YxMmIzOWNjLTAxMDgtNGRiMS1iMDU5LWI0ODMzYjUz YzFhMy5jcmwwHwYDVR0jBBgwFoAUFOFhU1y8L4PdCDAgazUSrdrmj9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJiMzljYy0wMTA4LTRkYjEtYjA1OS1iNDgz M2I1M2MxYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH78f4W47ohxHyRrPbf/Q85GbZAt8I/0LPx1TkMvnMxDUf29LdbI813X s8EIAOaf4UVMpQ0hc19nk7axA7ILrS1+CQY8u3F9isSBfdwYFykJeGRDysWzvAJu /JnLKSWxxiqf+L/lMZfKC59yX1ogRdZivqNDXuHWx4K6P4y/1CSk78UFdwt+8E/b yi50/tWCKJIckrvg8hO5SbFtqxti/eqOkKVEgFK3owq+jae3rPPcva22qQAZctWB UjgjavaCM3P0gIvqjSVKkoHXyvYX3KYFJy6tH5kirrM69ppE/yOb9KrOPMGG85Zb 2P+Jw+cIJYn4Sltj306ptFoAcx11CAE= -----END CERTIFICATE-----Generated at Wed Jul 29 04:44:56 2026 by rpki-client