$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json) Hash identifier: zI3eiztgrzHOjoKLkvcL7E16cm3anXoDRMyRHWcTRlI= Subject key identifier: 2E:4D:58:5D:AB:37:86:82:89:C3:2F:19:EF:6C:A9:6A:06:7C:6C:B1 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584E9BE507FCA5EF489EA0A53F00 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 15177 IP address blocks: 199.102.60.0/22 maxlen: 24 199.191.120.0/21 maxlen: 24 208.74.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:07:fc:a5:ef:48:9e:a0:a5:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=5ade3a58-d276-4593-976c-792bb3840b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:03:7a:90:d4:63:b9:c8:38:ff:9a:3a:d9: 3d:71:50:ff:c2:a0:9c:57:43:44:cc:6c:2a:48:f8: b1:29:85:3f:9f:1f:3e:6a:46:68:84:1f:ea:24:3b: 5a:dc:6e:e8:bd:b1:1c:0c:46:56:96:ce:20:02:12: 9a:45:f2:85:ff:96:e8:90:6b:e4:a1:34:68:68:d5: 1f:93:91:b0:f8:4c:75:67:7a:cc:a8:c1:65:eb:a3: 54:39:a6:b1:7f:e9:08:48:aa:69:95:56:13:d8:76: 39:f7:53:b0:cd:f8:f1:85:7e:88:6f:32:e5:5f:a1: 46:51:01:ce:6d:a8:7f:a0:4c:10:49:bb:51:10:40: 6a:2b:71:0c:4d:7f:8b:30:31:94:a3:26:5b:7e:8b: 50:46:8c:20:ff:5a:99:65:07:b8:f3:22:fa:bc:86: 51:e5:15:43:0e:14:b2:5c:19:97:72:e5:14:0e:37: b4:5d:ba:0f:97:41:24:1b:74:6b:7c:36:aa:c2:3f: f3:dd:4f:21:ed:d4:29:97:49:52:37:39:2c:18:e0: f4:71:2e:2a:e8:e2:9f:52:84:b5:81:3d:11:88:ab: 07:15:60:1f:88:bb:99:0f:eb:3a:01:07:ff:35:5e: d7:0b:c9:d6:1c:b0:f6:d2:fc:84:6e:f0:a8:67:8c: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4D:58:5D:AB:37:86:82:89:C3:2F:19:EF:6C:A9:6A:06:7C:6C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: 199.102.60.0/22 199.191.120.0/21 208.74.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:85:06:ca:4f:97:e4:ab:ae:d9:9f:ba:bb:a1:6b:03:23:ca: 3a:16:58:37:88:6e:d7:9f:a3:18:45:db:89:53:ac:45:11:7c: 41:87:ff:b8:4f:86:e0:e2:48:e7:4d:e2:77:ac:bb:9b:26:2f: 9e:be:39:d3:a3:af:27:0c:fd:9d:0f:b7:53:d2:d5:0f:41:e7: e1:2a:40:b7:f1:9a:0d:14:b5:ff:a6:81:a6:ad:0b:79:88:ec: ce:20:0b:b4:0c:31:ee:92:ae:5c:29:fa:f3:d4:19:2d:76:69: 1e:95:e7:de:01:14:06:d3:cb:f2:23:db:59:bb:ca:6a:a0:ed: bf:80:db:65:09:ef:21:bd:2b:11:11:49:14:af:39:9f:83:7c: 73:d7:ef:4b:30:4d:a6:e7:bb:28:f1:54:c3:c8:59:b1:23:b6: 85:2b:b6:fb:d5:68:74:f3:f7:11:a9:79:d7:1e:b3:f3:e9:2e: 6f:cd:bf:15:2e:d4:f4:6a:2b:fd:6d:d1:51:fe:e7:6e:0b:d2: 02:b6:90:0f:eb:cb:0e:53:bc:e9:9c:53:b9:31:d6:11:0f:02: 60:ed:60:1b:4f:ab:09:36:88:f7:c4:42:66:a8:c6:39:9a:8e: 2a:13:49:94:bf:f1:c3:9a:07:65:79:6b:3c:e6:81:55:8c:e7: 0e:b7:e8:ec -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6b5Qf8pe9InqClPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NWFkZTNhNTgtZDI3Ni00NTkzLTk3NmMtNzkyYmIzODQwYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv70DepDUY7nIOP+aOtk9cVD/wqCcV0NEzGwq SPixKYU/nx8+akZohB/qJDta3G7ovbEcDEZWls4gAhKaRfKF/5bokGvkoTRoaNUf k5Gw+Ex1Z3rMqMFl66NUOaaxf+kISKpplVYT2HY591OwzfjxhX6IbzLlX6FGUQHO bah/oEwQSbtREEBqK3EMTX+LMDGUoyZbfotQRowg/1qZZQe48yL6vIZR5RVDDhSy XBmXcuUUDje0XboPl0EkG3RrfDaqwj/z3U8h7dQpl0lSNzksGOD0cS4q6OKfUoS1 gT0RiKsHFWAfiLuZD+s6AQf/NV7XC8nWHLD20vyEbvCoZ4yqKwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFC5NWF2rN4aCicMvGe9sqWoGfGyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvMzI5Njc5NmMtYTgxMi0z ZmQ5LThiNzktYzYxN2Y4NTNiZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCx2Y8AwQD x794AwQD0EqYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABqFBspPl+SrrtmfuruhawMjyjoWWDeIbtefoxhF 24lTrEURfEGH/7hPhuDiSOdN4nesu5smL56+OdOjrycM/Z0Pt1PS1Q9B5+EqQLfx mg0Utf+mgaatC3mI7M4gC7QMMe6Srlwp+vPUGS12aR6V594BFAbTy/Ij21m7ymqg 7b+A22UJ7yG9KxERSRSvOZ+DfHPX70swTabnuyjxVMPIWbEjtoUrtvvVaHTz9xGp edces/PpLm/NvxUu1PRqK/1t0VH+524L0gK2kA/ryw5TvOmcU7kx1hEPAmDtYBtP qwk2iPfEQmaoxjmajioTSZS/8cOaB2V5azzmgVWM5w636Ow= -----END CERTIFICATE-----Generated at Thu Aug 27 03:14:49 2026 by rpki-client