$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/3afb8caa-991b-3067-b227-08532466f6f7.roa File: 3afb8caa-991b-3067-b227-08532466f6f7.roa (raw, json) Hash identifier: W/MbCqO9Jze8JZCp9a6+lEhOS4lmLqIfyiC4HIZUnDY= Subject key identifier: FC:C0:CE:54:F2:21:AF:BD:75:50:0B:E2:61:5C:94:6B:9D:72:35:BA Certificate issuer: /CN=c7890c7a-293b-4953-a7a1-ffd97374a468 Certificate serial: 010D0C9F4328584E7102851AEB461F974C138F00 Authority key identifier: 95:DC:CE:F2:A1:A0:C9:93:E3:B8:6D:31:E9:E2:6D:86:F5:60:7F:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/3afb8caa-991b-3067-b227-08532466f6f7.roa Signing time: Thu 09 Jul 2026 12:19:56 +0000 ROA not before: Thu 09 Jul 2026 12:19:56 +0000 ROA not after: Wed 07 Oct 2026 12:19:56 +0000 asID: 400175 IP address blocks: 198.252.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/c7890c7a-293b-4953-a7a1-ffd97374a468.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/c7890c7a-293b-4953-a7a1-ffd97374a468.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:71:02:85:1a:eb:46:1f:97:4c:13:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7890c7a-293b-4953-a7a1-ffd97374a468 Validity Not Before: Jul 9 12:19:56 2026 GMT Not After : Oct 7 12:19:56 2026 GMT Subject: CN=bdb8c173-4c0e-4dd0-818b-32124d008566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:aa:c8:fc:a6:f0:ba:df:fe:fd:2d:00:f4: ab:3b:79:d0:4a:fe:3b:df:70:84:f3:94:76:2a:02: d9:ff:1f:59:e6:c5:f8:d7:3c:f2:7c:44:6c:38:e6: a9:89:2a:50:56:c8:97:b5:55:29:68:d0:e1:62:7d: 83:2f:c7:d9:27:40:30:84:7c:b0:c7:04:9b:77:87: 63:d8:fe:ee:b6:f3:f8:67:2a:5a:24:66:0f:6f:43: aa:e0:37:37:eb:56:70:7b:5f:f1:ad:6f:03:3f:c7: 7d:37:b6:5b:7f:2d:33:98:34:6d:d5:68:fa:33:15: 01:82:b3:2c:ee:2d:ba:b8:5e:29:43:bc:5d:07:8f: 8c:bc:05:af:4e:6d:32:83:a1:5c:62:08:8b:35:34: 50:f8:eb:ce:59:48:08:df:43:0f:63:66:5c:99:fc: b7:67:51:c1:1c:55:59:c4:a7:a3:eb:14:1c:20:d2: d3:df:fe:d5:d4:84:00:67:5b:08:86:c6:8a:42:b1: 84:1d:f9:21:e1:f6:6d:7b:5b:76:4e:ef:31:9c:b8: 6d:de:c9:4d:70:45:cc:66:58:15:df:a2:4e:fb:d7: 31:77:a8:26:e9:d4:42:29:cb:d9:e3:ba:7f:7e:79: f2:2f:87:92:cd:df:20:1d:10:76:2c:b4:5b:55:75: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C0:CE:54:F2:21:AF:BD:75:50:0B:E2:61:5C:94:6B:9D:72:35:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/3afb8caa-991b-3067-b227-08532466f6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468/c7890c7a-293b-4953-a7a1-ffd97374a468.crl X509v3 Authority Key Identifier: keyid:95:DC:CE:F2:A1:A0:C9:93:E3:B8:6D:31:E9:E2:6D:86:F5:60:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c7890c7a-293b-4953-a7a1-ffd97374a468.cer sbgp-ipAddrBlock: critical IPv4: 198.252.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b1:fd:6c:e5:f8:6b:ba:f7:b6:7c:b1:df:f6:21:8b:45:59: 7f:58:c6:95:93:70:21:6c:24:ee:e2:5f:93:16:36:45:f8:19: 4f:08:f5:29:2a:44:f4:85:d1:42:ec:4d:a1:62:b9:bb:d0:d1: 60:14:58:90:e2:da:99:18:13:ad:1d:c1:2a:ba:2c:d2:d1:de: d1:b7:8c:fd:c9:e2:80:15:30:f9:29:e2:55:e8:b7:ff:33:63: 3a:fd:02:0a:0e:89:97:db:39:b1:ab:d2:ee:06:b1:58:a5:04: 32:c6:c3:ae:70:9a:a7:6e:56:65:e7:77:0e:dd:5e:07:62:61: b2:2a:1c:8c:49:c7:65:aa:bf:16:3c:e8:ef:b9:1d:37:01:7b: 10:3a:15:be:e0:51:4e:b9:48:d3:1c:35:37:a8:90:00:8a:0d: f2:17:29:36:6b:98:75:5a:02:f2:e9:cb:e0:0f:8e:84:e7:57: 98:79:a0:4e:ec:a7:7d:38:ab:27:55:60:db:a2:40:0c:0e:7b: e5:10:d7:4d:0d:96:7d:43:0d:07:c0:54:bd:f6:95:9b:bb:4d: d6:50:0d:ba:b4:f3:19:b6:df:59:4d:21:8c:d4:e4:b7:17:33: f3:24:36:36:c9:c5:9f:2a:d8:d1:cd:b9:85:16:73:24:08:e5: 29:82:35:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5xAoUa60Yfl0wTjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc4OTBjN2EtMjkzYi00OTUzLWE3YTEtZmZkOTczNzRh NDY4MB4XDTI2MDcwOTEyMTk1NloXDTI2MTAwNzEyMTk1NlowLzEtMCsGA1UEAxMk YmRiOGMxNzMtNGMwZS00ZGQwLTgxOGItMzIxMjRkMDA4NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksCqyPym8Lrf/v0tAPSrO3nQSv4733CE85R2 KgLZ/x9Z5sX41zzyfERsOOapiSpQVsiXtVUpaNDhYn2DL8fZJ0AwhHywxwSbd4dj 2P7utvP4ZypaJGYPb0Oq4Dc361Zwe1/xrW8DP8d9N7Zbfy0zmDRt1Wj6MxUBgrMs 7i26uF4pQ7xdB4+MvAWvTm0yg6FcYgiLNTRQ+OvOWUgI30MPY2Zcmfy3Z1HBHFVZ xKej6xQcINLT3/7V1IQAZ1sIhsaKQrGEHfkh4fZte1t2Tu8xnLht3slNcEXMZlgV 36JO+9cxd6gm6dRCKcvZ47p/fnnyL4eSzd8gHRB2LLRbVXUWIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzAzlTyIa+9dVAL4mFclGudcjW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNzg5 MGM3YS0yOTNiLTQ5NTMtYTdhMS1mZmQ5NzM3NGE0NjgvM2FmYjhjYWEtOTkxYi0z MDY3LWIyMjctMDg1MzI0NjZmNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzc4OTBjN2EtMjkzYi00OTUzLWE3 YTEtZmZkOTczNzRhNDY4L2M3ODkwYzdhLTI5M2ItNDk1My1hN2ExLWZmZDk3Mzc0 YTQ2OC5jcmwwHwYDVR0jBBgwFoAUldzO8qGgyZPjuG0x6eJthvVgf1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNzg5MGM3YS0yOTNiLTQ5NTMtYTdhMS1mZmQ5 NzM3NGE0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOx/Wzl+Gu697Z8sd/2IYtFWX9YxpWTcCFsJO7iX5MWNkX4GU8I9Skq RPSF0ULsTaFiubvQ0WAUWJDi2pkYE60dwSq6LNLR3tG3jP3J4oAVMPkp4lXot/8z Yzr9AgoOiZfbObGr0u4GsVilBDLGw65wmqduVmXndw7dXgdiYbIqHIxJx2WqvxY8 6O+5HTcBexA6Fb7gUU65SNMcNTeokACKDfIXKTZrmHVaAvLpy+APjoTnV5h5oE7s p304qydVYNuiQAwOe+UQ100Nln1DDQfAVL32lZu7TdZQDbq08xm231lNIYzU5LcX M/MkNjbJxZ8q2NHNuYUWcyQI5SmCNXM= -----END CERTIFICATE-----Generated at Tue Jul 21 20:58:22 2026 by rpki-client