$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: T0eb6MHiLZgv1MD9y2VJEgddCWS2vsb3TwTW6Q4FL/8= Subject key identifier: 52:A2:92:7F:C5:72:D5:65:67:01:5D:BE:66:10:38:36:07:83:C8:08 Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F4328584E7204CB15124E448DFEDA63F0 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 7311 IP address blocks: 161.129.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:cb:15:12:4e:44:8d:fe:da:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=f192e274-62d4-4380-9734-e3de533e718d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:2b:fa:17:36:be:da:55:a7:a0:9b:2d:a1: 86:55:9f:46:d3:e9:6b:64:db:7b:cc:2a:87:38:d9: 99:79:fb:f1:43:71:15:15:d0:b8:3e:cb:ef:83:61: 59:51:5a:8a:77:a4:da:88:8c:4b:ca:0b:90:76:13: 16:80:a4:be:9e:1e:ab:5a:30:47:84:64:42:f3:c1: ab:8d:96:1d:e3:bf:24:b9:1c:67:e4:a9:c8:41:69: 91:2b:17:52:37:7a:a6:89:90:cc:e0:4f:61:76:c1: f6:cd:14:fe:77:35:97:87:b8:8a:01:dc:5b:7c:b9: 3c:a6:51:84:22:7e:60:4d:fd:01:e2:85:9a:63:c1: 68:b2:5e:43:db:cf:1f:ef:72:3f:a2:62:c0:79:17: f3:24:fa:75:59:14:f6:d0:29:1f:7d:02:39:10:93: e5:be:fb:68:d7:8f:ba:87:07:62:ea:2c:f4:0f:3d: 7e:2b:d2:a8:4c:05:64:5c:60:fe:ab:8d:bc:73:b3: bf:2b:09:31:73:6b:e9:9a:b0:b4:5a:99:e6:6e:5a: 03:db:e0:cc:0e:1a:1c:db:1a:96:d9:46:e9:38:e9: 7d:31:6e:a2:d9:3b:1f:31:e2:4b:03:a2:68:cf:bb: 83:47:5d:c2:dd:ec:23:97:0d:9b:e5:5d:79:2d:5c: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:92:7F:C5:72:D5:65:67:01:5D:BE:66:10:38:36:07:83:C8:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b8:3e:a7:64:2c:8d:4c:79:bf:c5:27:bf:7e:dd:df:ef:67: 86:4c:32:33:d3:c4:a2:20:64:5c:ac:9f:a7:66:ac:37:16:97: ab:49:96:34:b9:6e:ce:85:3c:b0:dd:3d:49:47:85:f0:df:27: b2:86:da:5a:5a:55:f2:3e:3d:c4:33:64:ac:5d:2f:06:cd:3d: 3a:ab:75:c3:88:11:92:d7:d1:26:6d:73:0e:97:dd:4c:1a:9c: a5:3b:b5:1c:93:c3:30:e8:83:a2:1e:05:b1:18:4b:2a:90:49: c1:60:ae:06:37:bb:54:46:83:83:2e:53:78:8d:6a:8a:96:2c: 25:be:38:b3:c8:40:22:bd:d1:ea:9b:5f:48:df:c8:f5:86:bd: ce:57:fd:02:71:9b:9f:74:9d:db:c4:14:37:b1:7d:a6:d4:d2: 9b:0d:21:94:3a:f0:b6:fb:7c:25:99:74:73:c3:bd:b1:61:9e: 60:73:cb:55:8c:e1:74:ef:12:a1:fb:75:0b:d8:ee:12:f5:b1: a9:10:28:eb:12:6f:57:5e:41:4d:2b:11:9e:59:30:65:7e:9b: d4:37:5e:3e:08:9b:7e:4b:08:a6:55:32:18:13:d8:16:6d:a3: 55:67:45:2a:87:0c:d9:9a:fe:62:54:84:4f:ed:6b:52:a0:5b: 6c:73:ce:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMsVEk5Ejf7aY/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ZjE5MmUyNzQtNjJkNC00MzgwLTk3MzQtZTNkZTUzM2U3MThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixEr+hc2vtpVp6CbLaGGVZ9G0+lrZNt7zCqH ONmZefvxQ3EVFdC4Psvvg2FZUVqKd6TaiIxLyguQdhMWgKS+nh6rWjBHhGRC88Gr jZYd478kuRxn5KnIQWmRKxdSN3qmiZDM4E9hdsH2zRT+dzWXh7iKAdxbfLk8plGE In5gTf0B4oWaY8Fosl5D288f73I/omLAeRfzJPp1WRT20CkffQI5EJPlvvto14+6 hwdi6iz0Dz1+K9KoTAVkXGD+q428c7O/Kwkxc2vpmrC0WpnmbloD2+DMDhoc2xqW 2UbpOOl9MW6i2TsfMeJLA6Joz7uDR13C3ewjlw2b5V15LVzpLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKikn/FctVlZwFdvmYQODYHg8gIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy4PqdkLI1Meb/FJ79+3d/vZ4ZMMjPTxKIgZFysn6dmrDcWl6tJljS5 bs6FPLDdPUlHhfDfJ7KG2lpaVfI+PcQzZKxdLwbNPTqrdcOIEZLX0SZtcw6X3Uwa nKU7tRyTwzDog6IeBbEYSyqQScFgrgY3u1RGg4MuU3iNaoqWLCW+OLPIQCK90eqb X0jfyPWGvc5X/QJxm590ndvEFDexfabU0psNIZQ68Lb7fCWZdHPDvbFhnmBzy1WM 4XTvEqH7dQvY7hL1sakQKOsSb1deQU0rEZ5ZMGV+m9Q3Xj4Im35LCKZVMhgT2BZt o1VnRSqHDNma/mJUhE/ta1KgW2xzzqI= -----END CERTIFICATE-----Generated at Sat Jul 11 02:21:00 2026 by rpki-client