$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2ff8b681-d2bf-30ff-a728-84775f05b750.roa File: 2ff8b681-d2bf-30ff-a728-84775f05b750.roa (raw, json) Hash identifier: d/IFiMBJCR4kMOYV2u8W08WqwDCHMBY51FYQ8LQM7nQ= Subject key identifier: 20:1B:18:AC:C2:2F:C6:C8:C9:BA:63:CE:72:35:A2:A5:75:B8:67:C1 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584EA7880DB141992A31FC440F00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2ff8b681-d2bf-30ff-a728-84775f05b750.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394832 IP address blocks: 199.91.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:0d:b1:41:99:2a:31:fc:44:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=61e48f57-8228-4a87-85fc-74816288a9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:57:87:6f:fa:9b:e3:1c:1a:11:96:d6:f1: c9:c2:c9:03:db:e5:28:ab:04:75:1c:1e:bc:ce:16: 7e:a6:e3:94:0a:f3:09:58:9a:60:57:c0:50:d3:1f: f1:65:b1:39:2c:d5:e9:69:18:8e:9d:e5:16:87:71: d7:dc:3d:fc:10:6d:33:26:fa:ce:03:9c:b7:4a:95: 42:22:bd:fa:55:14:b9:0d:c4:36:48:c6:83:b4:22: 4a:b1:e4:bc:f7:57:2a:1d:a6:cb:7e:e3:ab:bb:87: f5:ec:ba:49:97:20:b8:f6:80:e0:90:31:55:dd:06: 2d:66:c8:60:f7:35:cd:eb:ff:bb:d2:74:fb:57:97: 0a:05:87:b2:66:37:b1:15:e3:09:27:e7:68:f8:b0: f0:df:80:31:6e:ad:73:5c:3a:e6:d2:51:47:34:1b: cd:74:31:0d:27:31:95:55:25:16:e3:98:0a:b8:f8: 33:e3:92:00:b3:39:36:bd:82:6a:53:07:07:4e:3d: 0b:17:e7:a0:6e:51:d7:b9:eb:4c:83:16:2e:ce:5f: da:90:78:f1:ff:6c:78:94:4e:ab:83:2b:c1:b5:5a: 5e:2d:35:10:92:8b:a9:70:41:3c:2d:2a:e4:81:05: b1:bb:b5:be:a8:5b:19:8d:c3:7d:3c:bb:38:b4:da: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1B:18:AC:C2:2F:C6:C8:C9:BA:63:CE:72:35:A2:A5:75:B8:67:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/2ff8b681-d2bf-30ff-a728-84775f05b750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0c:5b:f8:6f:cb:18:17:ad:a8:3b:a7:80:cc:a0:64:66:00: d5:c2:6f:dc:f7:73:cf:49:4c:a3:85:c8:23:83:57:a4:e7:27: b2:e0:4d:cc:db:e5:13:ea:09:b7:88:14:6e:26:4e:ea:a5:a4: ca:2e:98:a3:1b:4b:88:3a:0c:80:cf:0c:23:e6:96:37:cf:f5: 8a:4e:ae:53:ae:30:4a:78:d3:a8:ff:40:5e:8b:54:54:76:eb: 04:6e:4e:93:85:07:17:c6:c7:03:76:c6:54:03:e6:26:23:4c: ad:ff:70:69:f3:4d:92:dd:ad:34:02:77:62:fb:6e:26:7c:c0: 4f:9c:b4:e5:12:44:9d:a3:5c:7a:d7:35:15:03:56:f7:18:86: df:c4:20:48:52:4d:4c:4f:0d:e4:03:53:0d:c4:23:5c:7c:d2: 3c:14:89:b5:fd:08:d3:c2:c0:84:72:d8:15:4b:0a:5b:e1:2d: bb:dc:ea:c2:36:cb:ad:92:9c:72:3d:5a:a1:bc:93:58:7e:8a: e1:f3:7e:5a:f2:15:b4:8f:38:cf:d2:99:f9:13:a6:e0:71:d2: aa:e9:1d:35:6d:2b:a8:96:8e:81:f1:37:4a:65:c9:8f:3d:c7: a1:fd:59:b2:2c:de:27:66:f5:5f:94:9f:01:06:88:9e:26:b8: 8d:27:8c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niA2xQZkqMfxEDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjFlNDhmNTctODIyOC00YTg3LTg1ZmMtNzQ4MTYyODhhOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNRXh2/6m+McGhGW1vHJwskD2+UoqwR1HB68 zhZ+puOUCvMJWJpgV8BQ0x/xZbE5LNXpaRiOneUWh3HX3D38EG0zJvrOA5y3SpVC Ir36VRS5DcQ2SMaDtCJKseS891cqHabLfuOru4f17LpJlyC49oDgkDFV3QYtZshg 9zXN6/+70nT7V5cKBYeyZjexFeMJJ+do+LDw34Axbq1zXDrm0lFHNBvNdDENJzGV VSUW45gKuPgz45IAszk2vYJqUwcHTj0LF+egblHXuetMgxYuzl/akHjx/2x4lE6r gyvBtVpeLTUQkoupcEE8LSrkgQWxu7W+qFsZjcN9PLs4tNrBLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAbGKzCL8bIybpjznI1oqV1uGfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMmZmOGI2ODEtZDJiZi0z MGZmLWE3MjgtODQ3NzVmMDViNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcMW/hvyxgXrag7p4DMoGRmANXCb9z3c89JTKOFyCODV6TnJ7LgTczb 5RPqCbeIFG4mTuqlpMoumKMbS4g6DIDPDCPmljfP9YpOrlOuMEp406j/QF6LVFR2 6wRuTpOFBxfGxwN2xlQD5iYjTK3/cGnzTZLdrTQCd2L7biZ8wE+ctOUSRJ2jXHrX NRUDVvcYht/EIEhSTUxPDeQDUw3EI1x80jwUibX9CNPCwIRy2BVLClvhLbvc6sI2 y62SnHI9WqG8k1h+iuHzflryFbSPOM/SmfkTpuBx0qrpHTVtK6iWjoHxN0plyY89 x6H9WbIs3idm9V+UnwEGiJ4muI0njME= -----END CERTIFICATE-----Generated at Mon Aug 31 11:23:36 2026 by rpki-client