$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/2815ec29-2f49-3216-8563-81d058c14538.roa File: 2815ec29-2f49-3216-8563-81d058c14538.roa (raw, json) Hash identifier: FveHvy8Z6TV+LVJ7BpOkUA5PcSQFptQqXeCIsXMaVEg= Subject key identifier: 81:12:01:D2:94:1C:62:75:3E:9B:58:8A:8E:F8:25:D8:CD:B7:BE:70 Certificate issuer: /CN=fbebcb6e-1b07-44f5-ab89-04e964f4e4b1 Certificate serial: 010D0C9F4328584EDF5C880B1ED66FD9538099C0 Authority key identifier: 49:09:48:E2:FE:38:8E:92:5F:91:12:6C:D9:36:13:C7:6E:19:33:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/2815ec29-2f49-3216-8563-81d058c14538.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 199.34.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:88:0b:1e:d6:6f:d9:53:80:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbebcb6e-1b07-44f5-ab89-04e964f4e4b1 Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=92625bc3-4136-41bc-9f6e-beaca876c173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:55:48:71:30:85:de:fc:8f:f8:91:89:00: e4:3a:b0:0a:79:15:03:b1:02:0d:00:41:1b:a9:3d: 06:f8:07:ec:10:4f:77:e5:4a:d1:d9:2f:65:85:dc: c3:bc:1f:90:02:c2:a2:90:f8:38:71:86:6c:ca:60: bc:ec:da:38:90:74:ca:aa:ce:4f:41:74:70:78:fd: 92:88:26:c8:76:96:bd:8e:57:44:1d:0d:2f:7e:99: b0:7b:28:8b:9e:75:b0:52:28:79:1d:78:1c:e2:0e: 08:35:e7:48:ed:79:df:69:12:46:08:23:95:ef:6f: f5:69:33:5c:94:0f:8c:20:92:19:6e:94:ff:e3:54: f4:87:cd:19:54:4c:7e:13:64:bf:9a:2f:fb:87:02: f8:ea:08:d0:3d:41:7f:b7:f6:ee:72:d3:0e:04:8a: 30:2e:3b:e3:02:e9:d8:06:44:bb:c6:1a:8d:25:4c: 20:0b:59:a8:f7:bb:18:89:01:3d:80:fa:ca:9f:e7: ed:69:1a:5f:f7:a9:9b:0e:d5:66:4c:75:f5:d6:88: 0b:42:fa:25:26:7a:53:c6:ae:a9:7c:df:3c:c5:4f: de:15:59:a8:a7:7d:47:e2:13:b1:7b:c5:21:32:ac: db:ae:9b:5f:35:17:43:94:1c:a2:7c:2b:e8:25:8d: 36:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:12:01:D2:94:1C:62:75:3E:9B:58:8A:8E:F8:25:D8:CD:B7:BE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/2815ec29-2f49-3216-8563-81d058c14538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.crl X509v3 Authority Key Identifier: keyid:49:09:48:E2:FE:38:8E:92:5F:91:12:6C:D9:36:13:C7:6E:19:33:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer sbgp-ipAddrBlock: critical IPv4: 199.34.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:05:79:cc:9a:bc:80:52:a2:e4:53:96:93:9c:d5:b1:cc:d0: 91:b7:46:41:3b:08:80:d9:99:9b:89:fc:5b:0c:1a:6f:5b:3b: b0:51:e9:e1:52:9b:94:71:61:b0:a6:b7:4a:61:73:da:c4:23: 6d:96:fa:f1:15:a7:e7:24:c0:9a:d1:b4:ec:07:ed:0a:9e:82: 19:93:b1:0c:f5:07:5e:ef:87:f4:20:0d:93:e8:46:e1:36:2a: 52:3d:89:07:49:bf:53:ea:ce:6c:69:48:8a:ff:f3:b9:49:c4: 1f:37:d6:f2:83:58:25:c1:fb:6d:c7:8a:ea:ce:a9:94:6c:63: aa:bf:7c:92:5f:d1:55:e7:82:aa:b2:00:85:81:1c:d7:83:aa: 63:8f:1d:4c:18:38:a3:44:eb:c1:8b:c0:21:77:f0:db:67:de: ee:e0:46:f4:ec:6e:39:45:20:d4:bd:f0:45:25:e7:a6:9a:f8: 73:0c:3a:af:48:c3:18:e5:80:08:35:bb:e6:6b:86:75:ce:1a: 81:66:2f:86:63:b7:ca:c9:16:b2:f7:5b:f1:3a:3b:3b:7a:06: 24:9a:59:5f:ce:39:2a:8a:30:d1:34:46:92:96:8d:1d:0d:30: 65:10:1a:c6:b0:e1:f2:10:d4:ef:94:30:f5:82:e7:42:65:f1: 1f:12:3e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7fXIgLHtZv2VOAmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJlYmNiNmUtMWIwNy00NGY1LWFiODktMDRlOTY0ZjRl NGIxMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk OTI2MjViYzMtNDEzNi00MWJjLTlmNmUtYmVhY2E4NzZjMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSNVSHEwhd78j/iRiQDkOrAKeRUDsQINAEEb qT0G+AfsEE935UrR2S9lhdzDvB+QAsKikPg4cYZsymC87No4kHTKqs5PQXRweP2S iCbIdpa9jldEHQ0vfpmweyiLnnWwUih5HXgc4g4INedI7XnfaRJGCCOV72/1aTNc lA+MIJIZbpT/41T0h80ZVEx+E2S/mi/7hwL46gjQPUF/t/buctMOBIowLjvjAunY BkS7xhqNJUwgC1mo97sYiQE9gPrKn+ftaRpf96mbDtVmTHX11ogLQvolJnpTxq6p fN88xU/eFVmop31H4hOxe8UhMqzbrptfNRdDlByifCvoJY02oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIESAdKUHGJ1PptYio74JdjNt75wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mYmVi Y2I2ZS0xYjA3LTQ0ZjUtYWI4OS0wNGU5NjRmNGU0YjEvMjgxNWVjMjktMmY0OS0z MjE2LTg1NjMtODFkMDU4YzE0NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZmJlYmNiNmUtMWIwNy00NGY1LWFi ODktMDRlOTY0ZjRlNGIxL2ZiZWJjYjZlLTFiMDctNDRmNS1hYjg5LTA0ZTk2NGY0 ZTRiMS5jcmwwHwYDVR0jBBgwFoAUSQlI4v44jpJfkRJs2TYTx24ZMwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mYmViY2I2ZS0xYjA3LTQ0ZjUtYWI4OS0wNGU5 NjRmNGU0YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUFecyavIBSouRTlpOc1bHM0JG3RkE7CIDZmZuJ/FsMGm9bO7BR6eFS m5RxYbCmt0phc9rEI22W+vEVp+ckwJrRtOwH7QqeghmTsQz1B17vh/QgDZPoRuE2 KlI9iQdJv1PqzmxpSIr/87lJxB831vKDWCXB+23HiurOqZRsY6q/fJJf0VXngqqy AIWBHNeDqmOPHUwYOKNE68GLwCF38Ntn3u7gRvTsbjlFINS98EUl56aa+HMMOq9I wxjlgAg1u+ZrhnXOGoFmL4Zjt8rJFrL3W/E6Ozt6BiSaWV/OOSqKMNE0RpKWjR0N MGUQGsaw4fIQ1O+UMPWC50Jl8R8SPrI= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:59 2026 by rpki-client