$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/85c2d1ab-506c-32be-904e-a2a3f4403fd4.roa File: 85c2d1ab-506c-32be-904e-a2a3f4403fd4.roa (raw, json) Hash identifier: cwBL1OsWNp+UeU8pTLIgoz9ayoCxaTTgxyDcf4oBbqw= Subject key identifier: 85:B4:71:8C:C8:F5:45:51:5D:BC:32:A0:5A:63:61:7C:42:0F:D6:37 Certificate issuer: /CN=f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3 Certificate serial: 010D0C9F4328584EA6E80747503E81B0498292C0 Authority key identifier: FD:C7:BD:C9:49:06:E0:F1:34:EE:86:6C:C3:88:24:DF:12:06:F9:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/85c2d1ab-506c-32be-904e-a2a3f4403fd4.roa Signing time: Tue 28 Jul 2026 19:40:12 +0000 ROA not before: Tue 28 Jul 2026 19:40:12 +0000 ROA not after: Mon 26 Oct 2026 19:40:12 +0000 asID: 402687 IP address blocks: 207.241.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:e8:07:47:50:3e:81:b0:49:82:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3 Validity Not Before: Jul 28 19:40:12 2026 GMT Not After : Oct 26 19:40:12 2026 GMT Subject: CN=276fc301-ae7a-4dc7-a24b-67c7dc65d925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:0b:cb:8a:51:2e:21:c1:ef:84:98:7a:c2: 4c:1d:d9:66:7c:28:fd:e3:2d:a3:53:f9:66:71:5a: 83:5d:8e:e2:d3:2e:5c:39:be:fa:6c:b9:5a:3a:a7: 22:3a:40:f7:05:6b:94:92:5d:09:73:32:bc:08:e8: 02:62:43:f6:7e:65:37:b2:87:1d:8b:35:81:fd:4f: 83:91:49:63:ca:84:5f:26:e5:48:7d:a5:05:e0:da: 49:55:7e:c2:9a:ad:37:70:37:ea:47:7a:90:c6:3f: 28:08:e9:6e:f2:22:7d:50:fd:15:38:40:77:4e:9b: 28:e9:60:c4:8f:ba:6d:9d:7c:7f:f5:30:7e:bf:83: af:94:3e:88:62:73:2b:a1:0f:08:b6:da:e0:aa:f0: 46:e7:7f:de:31:53:c9:63:9e:ab:3a:00:b6:c2:d4: 99:c3:f4:f8:1b:ea:22:ca:a0:29:1a:1f:09:95:80: f0:a4:1a:fe:cf:0a:b0:72:14:d6:2f:d2:13:08:51: df:90:c7:fa:32:88:12:c1:1a:4a:e7:d4:ff:06:02: 71:52:22:4f:ab:64:ea:5a:61:cd:6a:b9:7b:ad:f8: dc:03:6f:18:0b:05:df:e5:63:c5:e7:52:19:8b:c7: 69:c3:27:90:44:ad:e3:98:46:de:fb:b4:1a:2b:0b: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B4:71:8C:C8:F5:45:51:5D:BC:32:A0:5A:63:61:7C:42:0F:D6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/85c2d1ab-506c-32be-904e-a2a3f4403fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.crl X509v3 Authority Key Identifier: keyid:FD:C7:BD:C9:49:06:E0:F1:34:EE:86:6C:C3:88:24:DF:12:06:F9:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.cer sbgp-ipAddrBlock: critical IPv4: 207.241.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:91:6a:5c:b8:48:6d:36:fe:db:bc:75:48:6c:6a:37:5e:4f: 9c:a1:4e:d1:00:6b:7a:42:29:e5:cc:de:26:33:6c:fa:64:88: 00:4a:b9:47:17:66:f9:6b:c7:27:9a:d1:12:5e:b7:c7:f5:c2: 99:ec:a3:f4:f7:70:54:13:e4:cc:29:dc:90:1c:66:52:22:e1: b3:41:91:b2:85:35:c3:8d:ac:ff:35:17:80:9b:2a:64:15:14: 54:c3:f7:84:14:52:ec:f3:f6:5c:7c:a9:26:a2:ec:b7:29:b3: b4:a3:15:37:f1:cc:39:82:c6:f3:9b:a7:24:6b:fd:e9:af:21: eb:a8:33:f0:f8:4d:58:81:5b:cc:35:03:08:58:0f:37:49:17: 6a:82:94:03:0c:b6:db:b3:88:62:cc:0a:67:c4:50:1b:2f:6f: 7f:2d:29:2e:bf:83:2e:58:be:d6:98:2d:11:98:39:92:9a:c6: 67:06:2f:ca:e4:e6:29:96:4e:a6:2c:82:61:0e:f1:47:2c:15: c9:74:31:f3:4c:5d:60:86:3d:ca:b1:8c:92:d2:1e:b3:e0:84: 04:02:2a:d9:12:41:9d:17:09:9a:2c:1e:c2:13:21:44:c1:1f: 16:46:e7:74:5f:fd:6c:58:d6:2e:91:bf:56:9a:3d:8a:b1:2f: dd:95:76:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6m6AdHUD6BsEmCksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdlN2UzY2ItZTFmYS00MGVkLTljZGMtZmY5ZjJkYmQ4 NmYzMB4XDTI2MDcyODE5NDAxMloXDTI2MTAyNjE5NDAxMlowLzEtMCsGA1UEAxMk Mjc2ZmMzMDEtYWU3YS00ZGM3LWEyNGItNjdjN2RjNjVkOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifQLy4pRLiHB74SYesJMHdlmfCj94y2jU/lm cVqDXY7i0y5cOb76bLlaOqciOkD3BWuUkl0JczK8COgCYkP2fmU3socdizWB/U+D kUljyoRfJuVIfaUF4NpJVX7Cmq03cDfqR3qQxj8oCOlu8iJ9UP0VOEB3Tpso6WDE j7ptnXx/9TB+v4OvlD6IYnMroQ8IttrgqvBG53/eMVPJY56rOgC2wtSZw/T4G+oi yqApGh8JlYDwpBr+zwqwchTWL9ITCFHfkMf6MogSwRpK59T/BgJxUiJPq2TqWmHN arl7rfjcA28YCwXf5WPF51IZi8dpwyeQRK3jmEbe+7QaKwtZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW0cYzI9UVRXbwyoFpjYXxCD9Y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mN2U3 ZTNjYi1lMWZhLTQwZWQtOWNkYy1mZjlmMmRiZDg2ZjMvODVjMmQxYWItNTA2Yy0z MmJlLTkwNGUtYTJhM2Y0NDAzZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZjdlN2UzY2ItZTFmYS00MGVkLTlj ZGMtZmY5ZjJkYmQ4NmYzL2Y3ZTdlM2NiLWUxZmEtNDBlZC05Y2RjLWZmOWYyZGJk ODZmMy5jcmwwHwYDVR0jBBgwFoAU/ce9yUkG4PE07oZsw4gk3xIG+acwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9mN2U3ZTNjYi1lMWZhLTQwZWQtOWNkYy1mZjlm MmRiZDg2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/G/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiRaly4SG02/tu8dUhsajdeT5yhTtEAa3pCKeXM3iYzbPpkiABKuUcX Zvlrxyea0RJet8f1wpnso/T3cFQT5Mwp3JAcZlIi4bNBkbKFNcONrP81F4CbKmQV FFTD94QUUuzz9lx8qSai7Lcps7SjFTfxzDmCxvObpyRr/emvIeuoM/D4TViBW8w1 AwhYDzdJF2qClAMMttuziGLMCmfEUBsvb38tKS6/gy5YvtaYLRGYOZKaxmcGL8rk 5imWTqYsgmEO8UcsFcl0MfNMXWCGPcqxjJLSHrPghAQCKtkSQZ0XCZosHsITIUTB HxZG53Rf/WxY1i6Rv1aaPYqxL92VdtE= -----END CERTIFICATE-----Generated at Wed Aug 26 22:31:39 2026 by rpki-client