$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/5752af09-f786-323e-af94-12d414fd9780.roa File: 5752af09-f786-323e-af94-12d414fd9780.roa (raw, json) Hash identifier: cVON6UM1yjk1qNGllfpArPG8g586VKKMaH0JgbYF2k0= Subject key identifier: 12:B4:C3:7C:00:E1:92:A2:07:D4:D5:16:7E:BA:4A:00:0B:8C:6D:96 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFDA4969541496737B58D80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/5752af09-f786-323e-af94-12d414fd9780.roa Signing time: Mon 20 Jul 2026 14:40:10 +0000 ROA not before: Mon 20 Jul 2026 14:40:10 +0000 ROA not after: Sun 18 Oct 2026 14:40:10 +0000 asID: 10279 IP address blocks: 198.13.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fd:a4:96:95:41:49:67:37:b5:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:40:10 2026 GMT Not After : Oct 18 14:40:10 2026 GMT Subject: CN=35d23ab7-b0e2-4860-9042-6396b5cad2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:2c:a2:e6:4a:e1:bd:17:49:7b:e7:27:03: aa:20:d9:30:e8:21:37:59:45:74:9f:d6:6c:3f:fc: 53:ad:b0:80:79:1b:ac:01:71:ca:33:e5:a2:59:cb: c6:75:e3:25:a3:b6:2c:df:60:da:15:ad:60:f4:d6: eb:37:df:cf:03:85:38:82:db:c6:ff:d1:09:5b:f0: c4:e9:4f:6e:1e:2c:4a:1b:6f:e8:21:54:96:09:cf: eb:d2:06:6b:9f:14:94:a4:9d:63:71:97:d6:30:1c: 0b:8e:a8:1c:35:46:a5:56:c8:fc:e0:32:69:54:20: e8:6f:ec:d6:b1:b7:04:0a:26:b2:2a:a7:c9:b8:a6: e9:85:fc:4b:10:b4:f6:8c:68:e5:5d:ad:5c:31:b4: d3:79:be:b8:ef:b2:57:41:1b:f2:40:af:57:d2:6e: 03:0d:11:96:e1:8a:bc:e0:df:f4:13:70:fe:1e:28: 14:79:58:4f:3a:39:04:00:bb:b2:a0:d0:6c:49:cd: 90:74:1d:30:36:72:61:23:e3:b5:22:4b:59:29:22: 31:46:6f:c6:af:92:77:a2:d5:c5:15:1d:70:00:e4: ca:ce:bb:fd:4a:18:38:e7:1e:79:e0:fa:52:59:3f: 64:3e:60:46:96:8a:93:67:10:97:e4:48:26:d1:bc: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B4:C3:7C:00:E1:92:A2:07:D4:D5:16:7E:BA:4A:00:0B:8C:6D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/5752af09-f786-323e-af94-12d414fd9780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 198.13.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f2:fd:8b:24:2a:2d:b1:f7:16:bf:43:d7:3b:4e:11:57:62: 78:1c:94:b3:36:47:4f:3a:07:2c:f0:d3:2a:a4:79:32:ad:61: c6:d2:78:26:e7:71:5b:b3:6d:db:a5:0e:77:9e:bc:42:6b:7a: ff:ac:8d:42:fb:7b:0a:ab:8c:4e:04:a1:6d:28:3c:e5:3c:46: c6:2b:05:cf:3e:39:c3:fb:86:59:91:57:67:9d:f7:50:e7:10: 30:35:fb:6d:91:00:5b:3a:43:c6:18:15:59:b8:fa:91:96:e8: b2:d1:cb:1f:70:2f:33:a5:31:31:37:de:52:b3:15:c7:ff:14: 63:f6:c4:c6:dd:42:b4:79:c2:ea:54:fb:b0:19:96:e7:e5:76: 65:ab:79:e5:85:5d:76:a8:8c:09:43:f6:8e:9e:eb:df:59:d7: e0:3d:70:e6:26:43:58:96:52:ba:42:e2:99:d5:93:27:06:56: 48:92:7e:8e:1c:ad:75:a1:df:71:49:26:61:37:dd:a6:f9:dc: 4b:52:72:6b:af:cc:53:e8:72:df:4c:90:17:62:aa:ba:0d:14: 4c:95:f6:09:70:33:36:a3:4e:2c:e3:6e:70:46:4d:6a:33:a0: 61:d4:98:e1:4d:f9:56:e3:3b:94:ca:e5:1b:4b:04:d4:d2:7d: 65:e7:d2:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P/aSWlUFJZze1jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0NDAxMFoXDTI2MTAxODE0NDAxMFowLzEtMCsGA1UEAxMk MzVkMjNhYjctYjBlMi00ODYwLTkwNDItNjM5NmI1Y2FkMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X8souZK4b0XSXvnJwOqINkw6CE3WUV0n9Zs P/xTrbCAeRusAXHKM+WiWcvGdeMlo7Ys32DaFa1g9NbrN9/PA4U4gtvG/9EJW/DE 6U9uHixKG2/oIVSWCc/r0gZrnxSUpJ1jcZfWMBwLjqgcNUalVsj84DJpVCDob+zW sbcECiayKqfJuKbphfxLELT2jGjlXa1cMbTTeb6477JXQRvyQK9X0m4DDRGW4Yq8 4N/0E3D+HigUeVhPOjkEALuyoNBsSc2QdB0wNnJhI+O1IktZKSIxRm/Gr5J3otXF FR1wAOTKzrv9Shg45x554PpSWT9kPmBGloqTZxCX5Egm0bxFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK0w3wA4ZKiB9TVFn66SgALjG2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNTc1MmFmMDktZjc4Ni0z MjNlLWFmOTQtMTJkNDE0ZmQ5NzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzy/YskKi2x9xa/Q9c7ThFXYngclLM2R086Byzw0yqkeTKtYcbSeCbn cVuzbdulDneevEJrev+sjUL7ewqrjE4EoW0oPOU8RsYrBc8+OcP7hlmRV2ed91Dn EDA1+22RAFs6Q8YYFVm4+pGW6LLRyx9wLzOlMTE33lKzFcf/FGP2xMbdQrR5wupU +7AZlufldmWreeWFXXaojAlD9o6e699Z1+A9cOYmQ1iWUrpC4pnVkycGVkiSfo4c rXWh33FJJmE33ab53EtScmuvzFPoct9MkBdiqroNFEyV9glwMzajTizjbnBGTWoz oGHUmOFN+VbjO5TK5RtLBNTSfWXn0lE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:50 2026 by rpki-client