$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa File: 3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa (raw, json) Hash identifier: IM+2nLMzzZDSYXwZVU8sn6e0RgahVN5XSd/0G6QyHMk= Subject key identifier: 64:B4:EC:56:13:D1:43:35:F4:D3:E3:10:69:D8:C2:1E:EC:48:10:C3 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584E4129DCB182CFC45BDFAB7A90 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 611 IP address blocks: 198.164.129.0/24 maxlen: 24 198.164.130.0/24 maxlen: 24 198.164.131.0/24 maxlen: 24 198.164.132.0/23 maxlen: 24 198.164.136.0/22 maxlen: 24 198.164.144.0/22 maxlen: 24 198.164.156.0/24 maxlen: 24 198.164.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:dc:b1:82:cf:c4:5b:df:ab:7a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=82674fb6-a8c9-4bb5-a97e-b2a4fc00203f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9b:64:6c:6c:f2:73:09:e1:b7:4e:d3:82:4f: c0:8c:be:32:2f:c6:cd:7c:a7:ac:eb:b0:00:a5:ba: 0c:ba:18:d6:83:a5:e8:d5:39:8a:a7:0f:fc:f9:e7: 35:7e:88:64:d2:22:c9:87:c7:17:2b:9d:3c:cf:34: e8:d7:06:e9:67:a4:fd:1f:40:58:e2:a6:c4:fc:76: 27:94:9d:22:d9:c6:36:bd:db:fb:37:5c:76:f4:8c: 6f:e4:56:16:45:09:7b:85:ca:35:22:ba:11:87:1b: 40:e2:a6:6d:b3:e7:89:3f:90:70:4d:47:34:c5:0b: 8c:96:22:df:7e:38:93:b1:fa:6f:5b:97:19:b3:7c: 13:8f:f2:6c:80:a0:d3:b9:ef:b7:ac:c5:bb:93:1a: 23:08:aa:90:98:2f:d8:8f:b6:62:5a:e1:e8:16:54: bd:ab:c8:62:34:42:a7:53:45:8b:24:13:68:74:26: a4:bd:04:02:87:0c:e3:30:08:9f:b4:87:23:33:dc: 95:2e:c3:c4:58:1c:d1:7f:1f:ab:d1:72:c6:75:c6: 95:50:a1:0e:64:14:45:d0:10:0e:fe:33:0b:d0:5b: 56:d0:dc:7c:e8:44:7b:fd:7d:b6:08:e2:60:81:38: b7:cc:19:98:ca:e6:db:45:da:6d:86:8c:f6:58:e2: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B4:EC:56:13:D1:43:35:F4:D3:E3:10:69:D8:C2:1E:EC:48:10:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.129.0-198.164.133.255 198.164.136.0/22 198.164.144.0/22 198.164.156.0/24 198.164.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f9:70:31:0c:58:1e:62:b4:e3:30:fe:fd:0c:65:c5:00:0b: 93:91:21:91:7f:4e:20:11:6e:12:13:47:ad:39:ce:20:6f:0f: 94:ed:30:52:b9:94:f5:67:80:24:ff:8e:10:ee:2f:21:a5:99: 50:1f:73:9f:c0:77:c4:7b:2a:f8:7d:4b:44:3c:76:b7:0e:84: 2a:75:14:d9:8d:76:db:73:ff:fc:e4:cf:85:10:59:97:90:ab: c8:c6:e6:87:75:10:5d:4a:38:66:e8:cf:e8:8e:10:54:ef:47: ab:5f:1a:23:9c:a2:fb:af:09:85:56:ab:ca:f1:43:85:9c:20: ee:7f:d2:78:de:f5:dc:b2:cb:43:61:ea:41:ca:15:50:f0:75: 84:72:b7:6c:4d:77:44:c4:2a:a9:73:c9:cf:31:32:9a:0b:65: 40:82:e5:94:c7:29:1b:6f:93:a8:a3:41:52:57:69:b5:84:5d: d7:f6:7f:86:00:c9:cb:33:0f:3b:ae:8a:7b:f9:33:ba:ab:db: c3:f0:b0:05:aa:2e:46:5c:37:f6:20:f8:de:1a:a6:ba:62:67: 54:1c:89:35:94:bf:70:d1:77:50:ce:ae:52:5a:74:05:9f:4a: f3:72:7b:1b:ac:b8:41:34:40:c8:db:ab:87:5f:ab:c0:d6:72: c1:d8:96:9a -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE5BKdyxgs/EW9+repAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ODI2NzRmYjYtYThjOS00YmI1LWE5N2UtYjJhNGZjMDAyMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5tkbGzycwnht07Tgk/AjL4yL8bNfKes67AA pboMuhjWg6Xo1TmKpw/8+ec1fohk0iLJh8cXK508zzTo1wbpZ6T9H0BY4qbE/HYn lJ0i2cY2vdv7N1x29Ixv5FYWRQl7hco1IroRhxtA4qZts+eJP5BwTUc0xQuMliLf fjiTsfpvW5cZs3wTj/JsgKDTue+3rMW7kxojCKqQmC/Yj7ZiWuHoFlS9q8hiNEKn U0WLJBNodCakvQQChwzjMAiftIcjM9yVLsPEWBzRfx+r0XLGdcaVUKEOZBRF0BAO /jML0FtW0Nx86ER7/X22COJggTi3zBmYyubbRdpthoz2WOLJjQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFGS07FYT0UM19NPjEGnYwh7sSBDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvM2FlYmM1YTctNzY5Ni0z YWI3LWE5ZGYtYzczYWVmYWVhYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBADGpIED BAHGpIQDBALGpIgDBALGpJADBADGpJwDBADGpJ4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU/lwMQxYHmK0 4zD+/QxlxQALk5EhkX9OIBFuEhNHrTnOIG8PlO0wUrmU9WeAJP+OEO4vIaWZUB9z n8B3xHsq+H1LRDx2tw6EKnUU2Y1223P//OTPhRBZl5CryMbmh3UQXUo4ZujP6I4Q VO9Hq18aI5yi+68JhVaryvFDhZwg7n/SeN713LLLQ2HqQcoVUPB1hHK3bE13RMQq qXPJzzEymgtlQILllMcpG2+TqKNBUldptYRd1/Z/hgDJyzMPO66Ke/kzuqvbw/Cw BaouRlw39iD43hqmumJnVByJNZS/cNF3UM6uUlp0BZ9K83J7G6y4QTRAyNurh1+r wNZywdiWmg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:52:45 2026 by rpki-client