$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/af52f7c8-d301-3e10-ac13-22863d68b38e.roa File: af52f7c8-d301-3e10-ac13-22863d68b38e.roa (raw, json) Hash identifier: B4akVKMXADrIrp/3NYs4Y2Dbl6+6qMiNo07lzNzAYKc= Subject key identifier: 16:C8:DB:FA:78:58:85:40:D7:27:C1:50:F5:40:F3:CC:27:92:2E:96 Certificate issuer: /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Certificate serial: 010D0C9F4328584EA78828EF677AC7937738B6C0 Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/af52f7c8-d301-3e10-ac13-22863d68b38e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401612 IP address blocks: 205.189.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:28:ef:67:7a:c7:93:77:38:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1510f1da-eecb-4f03-a6dc-c44043f7b4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e1:58:1c:06:b4:ee:d2:40:79:cc:d6:2e:8a: 7d:51:3f:4e:c2:0f:c1:9d:75:a0:11:7c:00:96:d2: b1:1c:b9:8f:c4:8b:fd:96:db:ab:35:c0:f0:a2:b0: bc:95:85:5e:03:5b:66:8c:e8:fb:66:5d:45:bf:81: 5a:19:06:bf:b2:6e:f0:e7:5d:9b:88:f7:2b:7f:63: d9:13:3b:79:59:fa:da:3f:96:7c:bf:a7:71:b8:db: 31:5f:e2:e2:e0:db:e9:0d:83:18:5f:07:82:92:01: 54:e7:74:93:f1:88:8c:0e:4c:3a:af:07:e5:b3:65: 95:35:b7:5d:b3:48:07:57:b3:2a:76:76:0f:b7:37: b2:9d:6f:fd:b0:c4:a8:75:85:30:5a:98:b2:11:2c: 9b:33:2f:e9:15:44:54:ce:48:b2:84:17:be:0f:c2: b4:57:b8:35:fc:69:5e:24:a8:7f:81:73:1f:28:1e: 6f:29:16:0b:2e:cc:1e:7c:5a:34:1d:8f:be:6a:2a: 7e:42:5d:15:37:07:6b:2e:3c:eb:45:67:57:fc:d5: 22:43:81:61:4c:80:83:c4:b5:7c:08:01:c9:78:f0: 74:c2:06:23:84:f5:a7:27:d7:1f:b6:65:ef:2b:1b: c3:2e:56:a7:fe:e0:2b:be:6e:4e:f1:d8:4a:f0:ea: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:DB:FA:78:58:85:40:D7:27:C1:50:F5:40:F3:CC:27:92:2E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/af52f7c8-d301-3e10-ac13-22863d68b38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl X509v3 Authority Key Identifier: keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer sbgp-ipAddrBlock: critical IPv4: 205.189.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e0:b2:79:4b:d0:90:5f:1e:81:bc:33:c0:da:c0:8a:4f:0f: 4b:a9:d3:60:a4:e8:92:4a:4e:8f:c3:98:20:06:bf:f4:10:07: 88:8b:7c:5a:94:12:06:2d:90:e1:84:1d:c0:73:ca:9c:50:8a: b9:d1:69:f6:b6:b0:f8:d1:33:4a:43:4b:56:79:e9:10:aa:03: 9e:83:e6:8c:fc:bb:61:a7:74:7a:25:2a:59:76:f3:2f:ca:90: 42:4e:d0:46:28:81:2c:42:c7:98:e8:91:89:44:cc:e9:a2:37: d0:b7:35:cf:05:71:0b:2d:43:76:5c:38:3e:b0:22:a4:4e:10: 8f:9d:1e:34:cf:b3:15:93:25:92:27:e5:32:91:34:df:79:bd: 9d:c5:8a:a1:c2:d0:6d:99:c6:aa:92:da:02:18:a2:69:ff:7d: b8:43:1e:83:65:89:e6:de:06:4b:10:37:97:fe:2d:dd:8f:67: 29:05:26:52:80:bf:74:56:d0:9b:4a:44:fd:47:7a:ca:ae:fb: 36:d9:ba:80:94:59:82:25:1c:59:63:d9:63:02:c9:63:39:8d: 3e:24:c3:ed:6c:ba:4e:17:09:ed:5d:d6:1b:22:19:d0:59:76: ef:12:7a:a2:c5:33:3b:f1:88:a9:34:80:74:eb:22:cb:49:17: c1:2c:4c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCjvZ3rHk3c4tsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZmIyOWQtNTdhNC00OWM2LWFhODUtNDg5MmMxZjY5 YzQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTUxMGYxZGEtZWVjYi00ZjAzLWE2ZGMtYzQ0MDQzZjdiNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+FYHAa07tJAeczWLop9UT9Owg/BnXWgEXwA ltKxHLmPxIv9lturNcDworC8lYVeA1tmjOj7Zl1Fv4FaGQa/sm7w512biPcrf2PZ Ezt5WfraP5Z8v6dxuNsxX+Li4NvpDYMYXweCkgFU53ST8YiMDkw6rwfls2WVNbdd s0gHV7MqdnYPtzeynW/9sMSodYUwWpiyESybMy/pFURUzkiyhBe+D8K0V7g1/Gle JKh/gXMfKB5vKRYLLswefFo0HY++aip+Ql0VNwdrLjzrRWdX/NUiQ4FhTICDxLV8 CAHJePB0wgYjhPWnJ9cftmXvKxvDLlan/uArvm5O8dhK8OpYgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbI2/p4WIVA1yfBUPVA88wnki6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2Jm YjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFmNjljNDgvYWY1MmY3YzgtZDMwMS0z ZTEwLWFjMTMtMjI4NjNkNjhiMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNiZmIyOWQtNTdhNC00OWM2LWFh ODUtNDg5MmMxZjY5YzQ4LzAzYmZiMjlkLTU3YTQtNDljNi1hYTg1LTQ4OTJjMWY2 OWM0OC5jcmwwHwYDVR0jBBgwFoAUI24Bv7J6VPsOidxfKDvh1fZXEYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODky YzFmNjljNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzb3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrgsnlL0JBfHoG8M8DawIpPD0up02Ck6JJKTo/DmCAGv/QQB4iLfFqU EgYtkOGEHcBzypxQirnRafa2sPjRM0pDS1Z56RCqA56D5oz8u2GndHolKll28y/K kEJO0EYogSxCx5jokYlEzOmiN9C3Nc8FcQstQ3ZcOD6wIqROEI+dHjTPsxWTJZIn 5TKRNN95vZ3FiqHC0G2ZxqqS2gIYomn/fbhDHoNliebeBksQN5f+Ld2PZykFJlKA v3RW0JtKRP1Hesqu+zbZuoCUWYIlHFlj2WMCyWM5jT4kw+1suk4XCe1d1hsiGdBZ du8SeqLFMzvxiKk0gHTrIstJF8EsTEY= -----END CERTIFICATE-----Generated at Tue Aug 4 02:32:45 2026 by rpki-client