$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa File: 97f6a99c-5994-36e5-96af-33d5a5e18816.roa (raw, json) Hash identifier: mt50YYkSbrY+LO/RK92uMzbVU7+J10x4eQ9jh0rZ3SU= Subject key identifier: BA:DA:98:37:E1:76:3D:D4:C1:D9:67:64:07:1B:B0:A1:BF:71:C5:21 Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F4328584E5619F0DDF5988A195F7660C0 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 36601 IP address blocks: 192.109.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:f0:dd:f5:98:8a:19:5f:76:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=6b8a6411-30ef-4c9a-826d-55ebeff6858f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:88:bd:44:30:3c:86:12:1e:e8:22:c9:33: 30:89:fa:97:b6:82:03:c1:26:4c:ea:f9:b2:ff:32: 82:73:79:81:2c:f1:78:8d:29:4c:97:4f:41:e5:83: 72:9f:e9:4e:9a:71:31:31:5c:7d:f3:07:0b:19:a3: 70:c8:6b:69:1a:a8:2c:3c:f0:06:c3:80:6a:b5:c1: fa:1d:02:de:12:dc:e5:8e:8b:c0:74:0e:ed:d5:a7: 3e:84:f1:83:58:3a:d0:59:27:a3:6b:63:2f:ae:0c: 71:0e:54:0d:42:ff:94:84:48:0f:69:e5:a9:df:93: 7c:28:70:07:49:47:bc:74:3d:ba:40:eb:18:72:50: dc:42:02:6e:3b:59:e7:04:55:69:b1:c3:e6:58:8f: 62:1b:c7:50:b0:09:a3:f1:25:e9:39:1f:f3:23:2d: bf:0a:ef:e8:30:2b:a8:1c:f1:f0:0f:4c:76:42:a4: 7c:0b:8d:f0:48:54:11:53:b1:dd:41:4d:ce:ab:87: 81:fb:80:a7:1a:01:26:c2:00:60:83:de:f8:38:e7: ad:4c:6a:6d:b2:29:32:bb:2c:7d:80:6d:ab:34:e5: 18:1b:98:b4:95:34:e6:18:63:02:e1:88:07:d5:04: 1f:e4:bf:44:b6:8a:d7:09:4c:36:fa:5b:1a:54:68: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:98:37:E1:76:3D:D4:C1:D9:67:64:07:1B:B0:A1:BF:71:C5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/97f6a99c-5994-36e5-96af-33d5a5e18816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: 192.109.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1a:07:bc:c0:b7:0f:6d:66:72:49:dd:bd:a8:51:a5:d0:79: a1:20:bb:f7:f3:be:b0:d4:bb:05:81:99:20:b6:4d:0d:ae:88: be:3e:e3:95:f8:0b:db:c7:46:b2:d6:30:ce:a3:51:e4:02:8d: 6c:ae:38:ff:98:cf:1e:db:45:c8:18:d8:74:92:9a:e5:a3:af: 29:f0:82:bb:d9:56:37:26:53:72:e7:c4:d8:a7:fc:3d:75:d0: 1b:2f:07:92:60:32:f0:6c:c8:55:29:81:c6:be:8f:a6:b6:c8: bf:87:8d:6a:bb:2b:d0:b6:68:ed:49:68:c0:49:9e:7c:97:38: 4c:d2:cf:f1:ee:9c:dd:cd:b7:46:23:23:6f:66:51:d3:56:86: 45:69:ff:21:ef:f2:33:1d:8c:a9:2c:d2:8c:cf:32:ad:d5:d3: fa:96:d9:94:f2:c3:b0:3f:8d:b7:f8:d3:2a:2f:f9:e5:17:f4: b9:8f:9a:90:c8:b3:12:26:f2:af:bc:0c:9d:3c:01:72:36:1e: 45:38:cc:89:59:40:fd:7f:9a:19:c5:61:5f:72:6b:24:fc:a5: 00:a1:6a:f4:ab:d7:ad:64:69:aa:30:73:0f:d7:c3:26:02:9d: 99:1b:1e:7b:e1:e1:c5:f5:40:64:84:69:76:76:4a:e2:8e:6f: 2a:71:8b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGfDd9ZiKGV92YMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk NmI4YTY0MTEtMzBlZi00YzlhLTgyNmQtNTVlYmVmZjY4NThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfuIvUQwPIYSHugiyTMwifqXtoIDwSZM6vmy /zKCc3mBLPF4jSlMl09B5YNyn+lOmnExMVx98wcLGaNwyGtpGqgsPPAGw4BqtcH6 HQLeEtzljovAdA7t1ac+hPGDWDrQWSeja2MvrgxxDlQNQv+UhEgPaeWp35N8KHAH SUe8dD26QOsYclDcQgJuO1nnBFVpscPmWI9iG8dQsAmj8SXpOR/zIy2/Cu/oMCuo HPHwD0x2QqR8C43wSFQRU7HdQU3Oq4eB+4CnGgEmwgBgg974OOetTGptsikyuyx9 gG2rNOUYG5i0lTTmGGMC4YgH1QQf5L9EtorXCUw2+lsaVGi5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLramDfhdj3UwdlnZAcbsKG/ccUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvOTdmNmE5OWMtNTk5NC0z NmU1LTk2YWYtMzNkNWE1ZTE4ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwG1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQaB7zAtw9tZnJJ3b2oUaXQeaEgu/fzvrDUuwWBmSC2TQ2uiL4+45X4 C9vHRrLWMM6jUeQCjWyuOP+Yzx7bRcgY2HSSmuWjrynwgrvZVjcmU3LnxNin/D11 0BsvB5JgMvBsyFUpgca+j6a2yL+HjWq7K9C2aO1JaMBJnnyXOEzSz/HunN3Nt0Yj I29mUdNWhkVp/yHv8jMdjKks0ozPMq3V0/qW2ZTyw7A/jbf40yov+eUX9LmPmpDI sxIm8q+8DJ08AXI2HkU4zIlZQP1/mhnFYV9yayT8pQChavSr161kaaowcw/XwyYC nZkbHnvh4cX1QGSEaXZ2SuKObypxi5M= -----END CERTIFICATE-----Generated at Tue Jul 21 20:20:16 2026 by rpki-client