$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa File: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json) Hash identifier: DEkDVmrKIHmk4oXEYApt4tDI1MZsyGqTkbsirnrvv14= Subject key identifier: E3:6D:3C:21:97:81:0B:98:01:8D:6B:A9:31:60:6A:04:37:0A:50:99 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584EA787D855F5A24A419E94B000 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2902 IP address blocks: 198.59.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d8:55:f5:a2:4a:41:9e:94:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2c0de74c-9eb5-42b6-b148-8131e7d6cb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:ab:b6:66:07:6c:de:08:6e:7c:0d:77:83: 90:d1:62:af:11:87:6e:3f:41:0f:a4:ae:c5:ab:1a: fe:f2:6e:33:40:44:50:5b:4a:39:b8:3b:98:4d:e7: 3d:cc:a1:02:fb:73:2d:67:d0:71:1e:82:68:e1:c9: a1:d7:fe:7b:5b:65:0c:d0:00:58:39:ad:c8:c0:e6: 14:de:b0:89:6c:8e:2e:2c:1b:c0:40:a8:db:ab:82: c1:93:db:ae:11:30:2a:c8:59:a3:d8:9c:87:59:50: 35:f8:f4:b0:b3:c8:f7:0d:97:e1:66:36:91:10:44: d7:19:f7:e8:05:32:96:1f:6e:3b:e1:e9:e1:6a:32: a2:22:22:c1:35:7d:55:8f:66:d5:7e:83:d6:b9:42: 1f:31:57:58:86:16:4e:20:2b:82:eb:05:fb:53:97: 80:c1:27:ec:76:db:18:7f:ac:3e:eb:c9:0b:d6:7f: 5f:56:6b:d0:66:21:3b:b0:25:db:54:c6:41:f8:e3: 18:ae:08:11:6a:b5:2e:ff:45:51:18:cf:03:63:28: 18:2e:bb:ee:10:48:50:b2:af:d1:bc:c1:52:36:a8: 98:71:99:6f:c0:5e:c1:75:41:7e:b8:58:33:54:e1: be:35:0a:6e:02:f5:3d:96:e9:79:75:08:d4:12:10: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6D:3C:21:97:81:0B:98:01:8D:6B:A9:31:60:6A:04:37:0A:50:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: 198.59.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d4:30:60:09:74:b0:5d:ab:37:b3:e7:bd:2f:2e:f4:f0:08: ce:a4:6d:03:62:af:cf:cb:ee:dc:26:86:b6:97:28:f1:35:01: e9:e8:5e:26:46:02:b7:4e:6c:af:a0:d7:b6:37:3f:69:6c:53: 9f:7b:e0:4c:7b:3b:26:b6:da:a6:91:d3:53:e6:6d:b9:66:ff: 62:a9:68:eb:02:67:7e:7a:9e:b3:fa:56:30:04:d0:9b:ef:e8: 92:dd:97:b3:d5:9b:c4:7c:21:c6:3e:78:79:78:31:c5:74:d6: 58:ba:76:69:19:93:f4:67:5a:d2:36:1a:cd:f5:91:d3:60:a6: d0:79:12:a8:68:a3:ab:a8:06:2f:5c:d0:6d:2c:90:7e:a8:7e: 65:0a:bc:f1:41:ca:f4:3b:0d:48:62:d6:74:a6:a6:0f:fe:99: f8:be:52:88:69:b7:91:2b:10:91:58:37:c2:2f:24:b5:85:13: c7:86:96:a0:65:c2:14:dd:d6:c8:be:bf:5e:a9:4c:05:9f:47: 91:8f:d7:c3:6d:ba:41:56:41:44:46:55:79:37:a2:43:c4:14: 58:f6:97:8d:0f:96:16:c5:b0:ac:35:8d:4e:c7:13:d6:36:28: 7c:a8:61:d2:46:25:bd:bf:b4:2c:4b:2a:de:52:c9:08:25:0e: ed:4a:54:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9hV9aJKQZ6UsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmMwZGU3NGMtOWViNS00MmI2LWIxNDgtODEzMWU3ZDZjYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5GrtmYHbN4IbnwNd4OQ0WKvEYduP0EPpK7F qxr+8m4zQERQW0o5uDuYTec9zKEC+3MtZ9BxHoJo4cmh1/57W2UM0ABYOa3IwOYU 3rCJbI4uLBvAQKjbq4LBk9uuETAqyFmj2JyHWVA1+PSws8j3DZfhZjaREETXGffo BTKWH2474enhajKiIiLBNX1Vj2bVfoPWuUIfMVdYhhZOICuC6wX7U5eAwSfsdtsY f6w+68kL1n9fVmvQZiE7sCXbVMZB+OMYrggRarUu/0VRGM8DYygYLrvuEEhQsq/R vMFSNqiYcZlvwF7BdUF+uFgzVOG+NQpuAvU9lul5dQjUEhA+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONtPCGXgQuYAY1rqTFgagQ3ClCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvOWZmMzA4MjQtMTA4NC0z MmU5LWFhMTktNTNjNDliNWRiNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxjvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjUMGAJdLBdqzez570vLvTwCM6kbQNir8/L7twmhraXKPE1AenoXiZG ArdObK+g17Y3P2lsU5974Ex7Oya22qaR01Pmbblm/2KpaOsCZ356nrP6VjAE0Jvv 6JLdl7PVm8R8IcY+eHl4McV01li6dmkZk/RnWtI2Gs31kdNgptB5Eqhoo6uoBi9c 0G0skH6ofmUKvPFByvQ7DUhi1nSmpg/+mfi+Uohpt5ErEJFYN8IvJLWFE8eGlqBl whTd1si+v16pTAWfR5GP18NtukFWQURGVXk3okPEFFj2l40PlhbFsKw1jU7HE9Y2 KHyoYdJGJb2/tCxLKt5SyQglDu1KVMc= -----END CERTIFICATE-----Generated at Mon Aug 10 14:46:26 2026 by rpki-client