$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/f594481f-b71f-3694-9566-972e2d639987.roa File: f594481f-b71f-3694-9566-972e2d639987.roa (raw, json) Hash identifier: RYFSHywIpjSVGJbyJgUhujJF9Fjwwvg1gEOo+t6L3+A= Subject key identifier: AD:3C:0A:3E:AC:6A:7D:AE:35:96:A6:50:93:DF:31:B3:2A:46:FC:69 Certificate issuer: /CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Certificate serial: 010D0C9F4328584E736A1453F000E64FBC8E5EC0 Authority key identifier: DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/f594481f-b71f-3694-9566-972e2d639987.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 54821 IP address blocks: 198.58.28.0/22 maxlen: 24 2602:fe79::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:14:53:f0:00:e6:4f:bc:8e:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=838c2b1f-f58f-4eda-b953-35c6e8e0a1d3 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=88972a56-74e3-42f3-a03e-43b39c449d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:15:f2:e8:59:00:4b:3e:b7:64:0e:c7:15: 9e:a6:2d:0f:54:63:b4:58:9f:b3:98:0a:6d:91:82: a1:d3:34:f3:ef:b3:cc:ef:0b:67:cb:6c:60:f9:f5: 86:33:b2:cf:90:8c:e0:70:a6:21:5f:41:e5:87:db: 91:2d:81:2e:0c:43:4f:af:f1:6e:c2:a2:4d:2f:ca: e4:12:71:5e:ef:45:0c:14:57:14:7e:89:9a:5d:bb: 49:3d:86:fe:a9:dc:a1:2c:96:10:32:3b:f5:fb:6b: f9:f4:79:42:31:9b:24:33:e9:4f:7d:a6:91:b6:42: f4:38:42:68:9d:af:f8:38:cf:11:ee:f4:27:91:51: 46:f9:7c:0c:b0:ca:18:dc:ec:9a:f3:15:ab:97:5e: 66:9f:c2:ec:fb:41:b0:1e:8e:98:d6:1e:a0:40:26: c3:60:4b:f7:73:c8:a7:85:1d:52:23:df:8b:d8:7b: 40:52:a8:76:4e:d4:50:e5:6e:21:88:67:09:28:a4: 37:61:ca:ad:77:75:e9:24:62:6a:c1:b5:8c:be:f8: e2:c9:2c:86:2a:a2:84:20:26:02:44:34:a8:b1:61: 52:f2:c9:fb:18:28:6d:61:58:74:34:3f:51:5d:5e: 71:5e:b1:0f:5b:17:60:6e:10:6f:fa:ef:ae:18:44: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3C:0A:3E:AC:6A:7D:AE:35:96:A6:50:93:DF:31:B3:2A:46:FC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/f594481f-b71f-3694-9566-972e2d639987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.crl X509v3 Authority Key Identifier: keyid:DE:F8:1F:76:5A:25:D9:66:4A:7A:48:74:92:7E:15:29:92:58:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/838c2b1f-f58f-4eda-b953-35c6e8e0a1d3.cer sbgp-ipAddrBlock: critical IPv4: 198.58.28.0/22 IPv6: 2602:fe79::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:47:17:18:b0:8c:ef:f2:c9:a5:f2:9c:c7:31:a2:75:aa:5b: b5:e0:39:40:82:67:4c:ba:ab:5b:0a:d3:86:19:0e:53:c0:a6: 8d:3b:33:37:a5:8e:10:58:b5:35:71:67:0d:f0:31:12:76:d3: 81:91:b6:67:a9:e8:52:d1:4f:4f:67:b7:f3:da:0b:3d:c8:5c: 79:05:8e:3c:a1:13:4e:74:e5:4b:66:fc:ef:9c:f9:57:38:06: e9:01:0b:56:1a:c6:54:3e:c0:32:0e:09:e5:7e:b3:57:58:d1: d3:7b:1c:2d:68:c6:3f:70:8b:f5:ca:44:5a:90:a9:b9:0b:00: ee:57:99:0e:5e:8b:4d:4d:9b:a6:c1:4a:00:ab:5d:2b:d3:3b: 92:dc:8a:fb:d0:58:c5:43:68:01:7a:b3:56:83:0a:8e:47:37: 71:0e:9f:0f:9c:5c:72:4f:4f:77:27:20:4a:d4:77:79:61:b1: ee:bc:40:98:41:61:4a:93:4d:c5:99:2c:29:3a:14:49:92:fc: 96:53:0a:a8:a9:7f:fe:08:98:2c:c5:71:23:73:c8:8b:91:f8: 77:27:29:13:8d:4e:4c:60:6e:3c:c5:e7:70:cc:64:45:ae:00: 4f:b2:28:79:73:08:62:76:e5:d8:ef:f3:b4:38:89:da:c2:0f: 9c:08:76:e9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5zahRT8ADmT7yOXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4YzJiMWYtZjU4Zi00ZWRhLWI5NTMtMzVjNmU4ZTBh MWQzMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk ODg5NzJhNTYtNzRlMy00MmYzLWEwM2UtNDNiMzljNDQ5ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfAV8uhZAEs+t2QOxxWepi0PVGO0WJ+zmApt kYKh0zTz77PM7wtny2xg+fWGM7LPkIzgcKYhX0Hlh9uRLYEuDENPr/FuwqJNL8rk EnFe70UMFFcUfomaXbtJPYb+qdyhLJYQMjv1+2v59HlCMZskM+lPfaaRtkL0OEJo na/4OM8R7vQnkVFG+XwMsMoY3Oya8xWrl15mn8Ls+0GwHo6Y1h6gQCbDYEv3c8in hR1SI9+L2HtAUqh2TtRQ5W4hiGcJKKQ3Ycqtd3XpJGJqwbWMvvjiySyGKqKEICYC RDSosWFS8sn7GChtYVh0ND9RXV5xXrEPWxdgbhBv+u+uGESffQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFK08Cj6san2uNZamUJPfMbMqRvxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Mzhj MmIxZi1mNThmLTRlZGEtYjk1My0zNWM2ZThlMGExZDMvZjU5NDQ4MWYtYjcxZi0z Njk0LTk1NjYtOTcyZTJkNjM5OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODM4YzJiMWYtZjU4Zi00ZWRhLWI5 NTMtMzVjNmU4ZTBhMWQzLzgzOGMyYjFmLWY1OGYtNGVkYS1iOTUzLTM1YzZlOGUw YTFkMy5jcmwwHwYDVR0jBBgwFoAU3vgfdlol2WZKekh0kn4VKZJYaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MzhjMmIxZi1mNThmLTRlZGEtYjk1My0zNWM2 ZThlMGExZDMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCxjocMA4E AgACMAgDBgQmAv55ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgRxcYsIzv8sml8pzHMaJ1qlu14DlAgmdM uqtbCtOGGQ5TwKaNOzM3pY4QWLU1cWcN8DESdtOBkbZnqehS0U9PZ7fz2gs9yFx5 BY48oRNOdOVLZvzvnPlXOAbpAQtWGsZUPsAyDgnlfrNXWNHTexwtaMY/cIv1ykRa kKm5CwDuV5kOXotNTZumwUoAq10r0zuS3Ir70FjFQ2gBerNWgwqORzdxDp8PnFxy T093JyBK1Hd5YbHuvECYQWFKk03FmSwpOhRJkvyWUwqoqX/+CJgsxXEjc8iLkfh3 JykTjU5MYG48xedwzGRFrgBPsih5cwhiduXY7/O0OInawg+cCHbp -----END CERTIFICATE-----Generated at Tue Jul 21 20:15:54 2026 by rpki-client