$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/d8750dd2-e1dc-3cb0-aa82-f14a2334596a.roa File: d8750dd2-e1dc-3cb0-aa82-f14a2334596a.roa (raw, json) Hash identifier: 4+5hIOlPI6wJlo+/vA7wGHoBSg5jFDAWPTcHsapb17A= Subject key identifier: 84:C4:49:C0:C1:0E:E0:F6:E8:F7:04:CA:EF:8B:A0:F2:14:2C:31:B3 Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584E6C198AB590B87E00F90F17C8 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/d8750dd2-e1dc-3cb0-aa82-f14a2334596a.roa Signing time: Tue 07 Jul 2026 18:07:17 +0000 ROA not before: Tue 07 Jul 2026 18:07:17 +0000 ROA not after: Mon 05 Oct 2026 18:07:17 +0000 asID: 397285 IP address blocks: 199.58.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:19:8a:b5:90:b8:7e:00:f9:0f:17:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Jul 7 18:07:17 2026 GMT Not After : Oct 5 18:07:17 2026 GMT Subject: CN=d5467987-6ef7-4069-9f26-4a4740c28af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:32:13:9b:0f:af:a5:10:0a:11:4f:51:b4: 34:07:f1:3f:89:b8:f0:2a:55:89:ae:27:5f:a8:fa: 68:6d:ba:70:e9:a6:db:64:40:27:29:8d:94:a3:09: 31:e3:2e:2e:60:da:07:5a:50:f9:cf:e8:4e:ac:eb: ec:11:3b:6e:25:f1:86:ad:49:4b:73:bd:8c:ad:06: e8:81:8f:6a:0f:ca:9b:c0:3b:0a:a9:2b:62:97:9f: ee:8b:e7:5b:96:8a:fb:6e:bd:a0:04:7e:46:27:c0: aa:7f:8c:c2:3f:10:9a:6d:94:c1:25:40:27:eb:e6: d8:1f:b0:78:23:fd:37:57:78:d2:53:2c:c1:a4:e4: 9d:ad:7e:a5:da:b6:67:9a:6d:80:24:91:a5:53:8d: 86:0d:97:7a:24:39:b0:3f:d2:ab:92:d9:0e:ee:2b: 14:f5:23:fc:3a:90:8b:99:1a:dc:a9:cb:48:7d:2c: f7:c7:14:16:a1:49:2e:53:5a:2f:de:00:52:74:0c: 71:d7:9e:0e:4e:0c:76:c0:dd:17:a2:8d:b9:4b:c9: 98:28:02:f6:cb:a2:43:5d:62:32:01:8f:76:62:81: 1d:be:43:18:2b:85:1b:9b:10:c4:20:cc:e5:24:dd: c1:6a:02:a1:9b:ad:ec:41:28:26:b7:2b:49:67:2c: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C4:49:C0:C1:0E:E0:F6:E8:F7:04:CA:EF:8B:A0:F2:14:2C:31:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/d8750dd2-e1dc-3cb0-aa82-f14a2334596a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 199.58.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:32:2f:73:c5:a0:74:30:48:8a:7e:c1:b6:a7:c0:c7:34:e2: 8f:85:c1:cb:1e:e7:87:1f:c3:2e:26:3d:aa:79:22:e3:14:ec: 7c:bc:f5:51:d5:32:96:58:62:fe:56:98:3e:58:cc:8b:a1:21: 68:ee:0e:04:5d:fc:3a:0b:db:e8:5f:b8:ae:4c:b4:6f:41:ac: c7:7c:b8:e4:63:f2:a2:4f:6c:8c:27:12:77:9c:c1:df:fd:e8: a9:a4:71:5c:f0:4a:b8:19:30:01:d5:f8:3f:bd:8d:c2:16:7f: 6c:fc:c2:41:d8:9f:79:31:bc:e8:a9:de:f0:64:1e:02:5e:ed: 04:8d:f7:2b:f4:bc:2c:ed:d8:c0:f7:64:39:32:6c:fe:96:a6: bc:fc:06:96:30:47:7e:40:e2:c1:79:8c:2a:d9:c7:b4:dc:9d: b9:bc:2b:26:a9:03:91:11:5c:3a:6e:b7:25:82:30:ff:29:6e: ca:fa:02:7d:95:63:17:9e:1d:9c:ba:22:aa:ab:cf:32:77:f2: 24:cc:11:06:9e:b0:3a:0c:b5:03:c0:8e:af:ba:90:b4:c8:1b: 52:47:c3:f1:e0:2b:cd:54:d3:c7:81:9b:a9:83:51:62:19:01: 0d:7e:31:49:a6:bd:de:8c:55:0b:2e:83:38:8a:5c:18:70:9d: 19:4e:5c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sGYq1kLh+APkPF8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDcwNzE4MDcxN1oXDTI2MTAwNTE4MDcxN1owLzEtMCsGA1UEAxMk ZDU0Njc5ODctNmVmNy00MDY5LTlmMjYtNGE0NzQwYzI4YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC4yE5sPr6UQChFPUbQ0B/E/ibjwKlWJridf qPpobbpw6abbZEAnKY2Uowkx4y4uYNoHWlD5z+hOrOvsETtuJfGGrUlLc72MrQbo gY9qD8qbwDsKqStil5/ui+dblor7br2gBH5GJ8Cqf4zCPxCabZTBJUAn6+bYH7B4 I/03V3jSUyzBpOSdrX6l2rZnmm2AJJGlU42GDZd6JDmwP9KrktkO7isU9SP8OpCL mRrcqctIfSz3xxQWoUkuU1ov3gBSdAxx154OTgx2wN0Xoo25S8mYKAL2y6JDXWIy AY92YoEdvkMYK4UbmxDEIMzlJN3BagKhm63sQSgmtytJZyzR8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITEScDBDuD26PcEyu+LoPIULDGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvZDg3NTBkZDItZTFkYy0z Y2IwLWFhODItZjE0YTIzMzQ1OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEyL3PFoHQwSIp+wbanwMc04o+Fwcse54cfwy4mPap5IuMU7Hy89VHV MpZYYv5WmD5YzIuhIWjuDgRd/DoL2+hfuK5MtG9BrMd8uORj8qJPbIwnEnecwd/9 6KmkcVzwSrgZMAHV+D+9jcIWf2z8wkHYn3kxvOip3vBkHgJe7QSN9yv0vCzt2MD3 ZDkybP6Wprz8BpYwR35A4sF5jCrZx7Tcnbm8KyapA5ERXDputyWCMP8pbsr6An2V YxeeHZy6IqqrzzJ38iTMEQaesDoMtQPAjq+6kLTIG1JHw/HgK81U08eBm6mDUWIZ AQ1+MUmmvd6MVQsugziKXBhwnRlOXNE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:16:51 2026 by rpki-client