$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa File: c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa (raw, json) Hash identifier: QrHOAaR98DleoWypdYPp0mQcaow1v26X5nWzChZYZD4= Subject key identifier: 49:09:EF:82:99:C4:59:AB:30:1A:34:4C:E7:87:3B:EA:30:3D:89:AF Certificate issuer: /CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Certificate serial: 010D0C9F4328584EA78868566EC4EE6F8E71EE00 Authority key identifier: 52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11655 IP address blocks: 23.128.92.0/24 maxlen: 24 207.89.50.0/24 maxlen: 24 2602:f979::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:68:56:6e:c4:ee:6f:8e:71:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8ae99c89-b776-4d32-bd30-6f50ac37fc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:0e:2a:0e:a5:d5:c5:5d:3c:25:2a:1d:fb: 80:8b:67:3d:e7:46:32:1a:83:1e:5f:a8:a3:34:ee: 0e:20:bf:41:6e:3b:3c:dd:9b:54:27:15:6a:ed:c3: 0a:08:46:b0:57:7e:e1:b9:ba:a1:36:1d:4f:9a:57: f6:ae:85:17:a5:0e:5d:28:8b:4e:9e:72:63:39:1c: b2:64:12:ee:38:d4:97:66:1b:a0:14:dc:8f:29:7b: df:4d:47:04:ff:e7:19:c3:d1:4b:ff:6b:69:85:51: 58:0b:c7:49:03:2a:3e:62:57:7d:a9:21:98:39:67: d6:31:b1:01:fc:ac:e3:df:99:0f:c1:a1:80:2e:e9: 3a:c3:24:a4:0d:ec:59:2b:1d:4a:7d:05:bb:7f:ff: a4:dd:fa:71:16:b0:07:8d:75:5c:12:d1:3f:6d:2d: 87:1c:4b:42:91:10:60:4c:68:08:a0:17:fd:2a:d8: f7:11:3b:76:12:55:71:0c:63:31:2d:ed:27:30:2e: f8:bd:52:6d:f6:01:ef:1b:2b:1e:6f:b8:88:0e:0f: 1e:1f:fd:ef:5f:84:3a:4b:4b:7a:72:48:3a:02:82: 74:75:d1:17:42:54:de:84:bf:7c:00:3b:1f:16:07: 66:33:3a:c8:75:c7:56:fd:50:f7:d8:46:57:4d:ff: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:EF:82:99:C4:59:AB:30:1A:34:4C:E7:87:3B:EA:30:3D:89:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl X509v3 Authority Key Identifier: keyid:52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer sbgp-ipAddrBlock: critical IPv4: 23.128.92.0/24 207.89.50.0/24 IPv6: 2602:f979::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:17:e3:ac:99:12:26:5d:42:b2:25:ac:6e:64:62:05:f8: 20:a8:dd:3a:99:66:96:c1:11:ea:d8:5e:e4:98:c0:39:fe:4a: 2d:a5:39:75:a6:27:a7:89:c8:a1:f1:05:62:bf:00:af:79:09: b0:e3:9a:a0:33:7c:6e:32:87:39:e9:1a:68:29:7c:2d:03:fe: 0c:1b:0e:ea:e4:76:6b:ad:b2:26:ac:2f:50:31:dd:e8:ad:e6: ca:03:f8:c8:aa:02:de:3e:58:79:f6:f0:45:98:d0:79:7f:61: 3d:c9:15:e1:22:9b:32:4b:52:b8:28:dd:a1:ab:81:23:d4:17: 96:b2:f4:b8:c1:55:b0:01:ae:8c:a6:9b:b2:97:fd:10:5e:c1: 0f:5f:37:63:28:aa:eb:6e:53:7c:e7:82:5c:52:46:c2:bd:5c: 8a:4e:bd:4f:c9:68:d4:60:d5:2e:aa:70:6c:ea:9b:a2:75:33: d3:1a:6c:7f:f2:27:4d:05:1a:93:0e:fa:38:31:b5:76:d4:91: 0b:50:bc:93:e8:40:a9:aa:d9:07:fd:18:52:9e:f3:f3:f4:22: 65:31:3c:8b:8a:f8:2d:5f:5f:e3:97:4d:c8:39:e4:7a:61:6f: ec:f0:c6:f1:38:f6:f9:a0:98:cf:37:33:a9:e5:8a:77:95:22: 42:fc:21:7b -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE6niGhWbsTub45x7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5N2RkYzEtZTYwNS00NmNmLWJjZjUtMDQ4ZjhkOGVi NDFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGFlOTljODktYjc3Ni00ZDMyLWJkMzAtNmY1MGFjMzdmYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV4OKg6l1cVdPCUqHfuAi2c950YyGoMeX6ij NO4OIL9Bbjs83ZtUJxVq7cMKCEawV37hubqhNh1Pmlf2roUXpQ5dKItOnnJjORyy ZBLuONSXZhugFNyPKXvfTUcE/+cZw9FL/2tphVFYC8dJAyo+Yld9qSGYOWfWMbEB /Kzj35kPwaGALuk6wySkDexZKx1KfQW7f/+k3fpxFrAHjXVcEtE/bS2HHEtCkRBg TGgIoBf9Ktj3ETt2ElVxDGMxLe0nMC74vVJt9gHvGyseb7iIDg8eH/3vX4Q6S0t6 ckg6AoJ0ddEXQlTehL98ADsfFgdmMzrIdcdW/VD32EZXTf+TzwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFEkJ74KZxFmrMBo0TOeHO+owPYmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTk3 ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhmOGQ4ZWI0MWEvYzZhZmM1OTYtMGI5Yi0z ZTQzLWIzYjMtZjdiODNkZjMxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2U5N2RkYzEtZTYwNS00NmNmLWJj ZjUtMDQ4ZjhkOGViNDFhLzNlOTdkZGMxLWU2MDUtNDZjZi1iY2Y1LTA0OGY4ZDhl YjQxYS5jcmwwHwYDVR0jBBgwFoAUUhpXjirHYbXjZst0dGGA4LEWSv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTk3ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhm OGQ4ZWI0MWEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4BcAwQA z1kyMA4EAgACMAgDBgAmAvl5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIDhfjrJkSJl1CsiWsbmRiBfgg qN06mWaWwRHq2F7kmMA5/kotpTl1pienicih8QVivwCveQmw45qgM3xuMoc56Rpo KXwtA/4MGw7q5HZrrbImrC9QMd3orebKA/jIqgLePlh59vBFmNB5f2E9yRXhIpsy S1K4KN2hq4Ej1BeWsvS4wVWwAa6Mppuyl/0QXsEPXzdjKKrrblN854JcUkbCvVyK Tr1PyWjUYNUuqnBs6puidTPTGmx/8idNBRqTDvo4MbV21JELULyT6ECpqtkH/RhS nvPz9CJlMTyLivgtX1/jl03IOeR6YW/s8MbxOPb5oJjPNzOp5Yp3lSJC/CF7 -----END CERTIFICATE-----Generated at Sat Aug 1 11:38:15 2026 by rpki-client