$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa File: 4d9dde79-a7a1-3002-99de-718c0934d901.roa (raw, json) Hash identifier: 45aRO/78Vl0axxZ5cAhQ4gaYs76dmTHmkmdz3WU5WIE= Subject key identifier: D7:23:F9:15:CA:08:EC:A1:D1:ED:DA:9B:EE:37:F1:D1:88:2D:B0:71 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584ECBD1E08D1472546D2B57DC80 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 40628 IP address blocks: 199.27.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e0:8d:14:72:54:6d:2b:57:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=bdf1a055-3d28-463b-9de2-158de3bba4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:d0:39:f9:d9:1a:8a:a1:6d:2d:37:8b:4a: 7d:46:5a:b8:27:74:71:05:c6:e9:53:15:33:ac:d1: 8d:c6:dd:5e:a2:76:a4:e6:27:d4:da:e4:54:e0:0f: 5e:11:6b:3f:ca:40:0f:dd:ad:68:59:0e:c2:71:18: b1:3d:07:92:27:4b:b9:af:f6:fb:89:be:aa:cf:b9: 2c:a5:df:7f:9b:4f:c8:e4:56:59:98:1d:b7:9f:15: 6d:84:f8:a9:04:48:fc:15:3e:98:79:d3:27:8f:35: 51:4c:09:c4:f3:d8:50:3d:32:98:fe:8e:96:ee:62: 9b:ef:53:f8:2c:7f:9a:33:a1:38:ed:27:83:9c:3c: da:e0:64:7b:f1:ee:bf:e6:e3:80:ea:58:43:1f:ed: 0d:a4:cf:ac:c2:51:1d:85:fe:80:fe:33:5e:46:b9: 39:94:57:54:8f:d5:d0:ee:8f:b3:b6:a3:48:3c:b1: 88:77:d5:50:99:9f:07:0f:52:11:3f:26:8a:5f:16: 19:ce:77:b5:f2:39:bd:fd:21:97:63:6d:f7:b8:09: 42:64:7b:bd:57:84:4f:1d:92:ba:c5:cd:4b:77:8b: 47:c4:bc:d1:5f:cf:88:9b:26:2f:31:d0:f3:b7:76: 1d:ff:85:3f:af:fd:fd:7c:35:67:88:ae:6d:e2:bb: 42:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:F9:15:CA:08:EC:A1:D1:ED:DA:9B:EE:37:F1:D1:88:2D:B0:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 199.27.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:42:b1:4a:c1:26:5c:ad:9e:4c:8d:74:73:24:82:11:70:86: b4:94:00:b9:24:64:0d:e5:47:b0:da:d2:55:9b:24:f7:9c:88: 80:d4:1c:a1:fb:ac:62:b2:e1:05:cb:3f:c7:1d:ad:73:e8:87: b4:63:06:51:41:70:4c:bf:47:0d:6b:a6:f0:41:b6:1d:6e:47: af:6d:93:71:d8:6c:76:d2:13:d2:7c:07:1f:d6:91:82:14:c7: 62:91:35:68:ab:99:c3:a9:b7:04:c8:4c:13:66:fa:35:e9:05: 60:f4:9f:7c:8b:ce:40:e0:d3:c1:c0:cf:56:ce:3d:4d:5c:b3: 9e:de:4a:36:80:b4:dc:8d:fa:83:ce:9b:eb:ea:3e:78:11:b4: 64:2b:e5:13:ca:55:1d:4f:de:c9:29:77:11:45:28:46:26:57: 00:5a:aa:83:15:0b:bb:95:e0:64:2e:f5:26:83:24:b1:d8:5f: bb:16:28:83:e0:a9:b5:d8:cd:46:4d:1f:5b:7f:32:0b:3e:f0: 0b:1a:4e:78:68:69:0a:4f:ea:71:a3:78:21:1a:7f:40:6b:2f: d3:2a:de:b2:6e:9a:4a:2c:4a:b7:f3:cd:46:df:f2:25:30:1c: 47:bc:95:9b:d1:19:72:2e:74:3b:18:3d:53:e0:f0:4e:75:9d: 51:a8:77:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eCNFHJUbStX3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YmRmMWEwNTUtM2QyOC00NjNiLTlkZTItMTU4ZGUzYmJhNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslXQOfnZGoqhbS03i0p9Rlq4J3RxBcbpUxUz rNGNxt1eonak5ifU2uRU4A9eEWs/ykAP3a1oWQ7CcRixPQeSJ0u5r/b7ib6qz7ks pd9/m0/I5FZZmB23nxVthPipBEj8FT6YedMnjzVRTAnE89hQPTKY/o6W7mKb71P4 LH+aM6E47SeDnDza4GR78e6/5uOA6lhDH+0NpM+swlEdhf6A/jNeRrk5lFdUj9XQ 7o+ztqNIPLGId9VQmZ8HD1IRPyaKXxYZzne18jm9/SGXY233uAlCZHu9V4RPHZK6 xc1Ld4tHxLzRX8+ImyYvMdDzt3Yd/4U/r/39fDVniK5t4rtCuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcj+RXKCOyh0e3am+438dGILbBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNGQ5ZGRlNzktYTdhMS0z MDAyLTk5ZGUtNzE4YzA5MzRkOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApCsUrBJlytnkyNdHMkghFwhrSUALkkZA3lR7Da0lWbJPeciIDUHKH7 rGKy4QXLP8cdrXPoh7RjBlFBcEy/Rw1rpvBBth1uR69tk3HYbHbSE9J8Bx/WkYIU x2KRNWirmcOptwTITBNm+jXpBWD0n3yLzkDg08HAz1bOPU1cs57eSjaAtNyN+oPO m+vqPngRtGQr5RPKVR1P3skpdxFFKEYmVwBaqoMVC7uV4GQu9SaDJLHYX7sWKIPg qbXYzUZNH1t/Mgs+8AsaTnhoaQpP6nGjeCEaf0BrL9Mq3rJumkosSrfzzUbf8iUw HEe8lZvRGXIudDsYPVPg8E51nVGod4M= -----END CERTIFICATE-----Generated at Thu Aug 13 23:33:12 2026 by rpki-client