$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa File: 1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json) Hash identifier: MkMck4ih/dsy3ADwUfidIDHJ+sLsYeT3m9WRZ0fWZhU= Subject key identifier: 4A:1D:22:AA:F1:10:C3:62:C9:CC:FC:3A:ED:6E:7E:0B:06:3E:25:E7 Certificate issuer: /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Certificate serial: 010D0C9F4328584EB847429BE3F79CCFC57C9640 Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 36667 IP address blocks: 198.35.120.0/21 maxlen: 24 2620:c:8000::/48 maxlen: 48 2620:109:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:42:9b:e3:f7:9c:cf:c5:7c:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=5bd5ae25-3450-4df5-8498-d47da5343d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:e4:11:a2:bf:00:56:e3:78:db:4d:0e:ae: 2a:7b:10:a4:fb:d7:0a:67:27:96:00:7c:59:67:fe: 0d:3b:cb:d4:a0:2c:3c:77:4d:bc:5c:8b:3f:72:9b: fa:e2:49:91:6d:50:62:bb:e0:d9:7d:be:26:5f:9b: 56:a1:a4:4c:c8:8b:0e:b3:5d:90:67:e0:cc:e6:81: 8f:27:35:6b:ad:c1:c2:4e:46:b5:02:ed:ee:f2:b2: 78:d7:56:4b:9f:e8:5b:3a:94:5b:c1:bc:42:bd:62: dd:b0:e6:c9:55:30:31:ff:7a:88:eb:88:36:a3:dc: 5f:b8:0b:af:f1:9f:78:b9:ed:02:8c:12:86:c5:92: e0:5c:fd:5d:2f:e3:6e:67:0e:15:31:44:af:f1:2c: da:28:fe:aa:be:aa:b9:8d:98:47:89:ca:64:88:c5: fb:36:9a:0b:bc:98:dd:25:a5:73:3f:2f:4a:3e:1d: 3e:d1:72:fc:a9:3a:bf:02:8f:bc:23:05:4c:aa:05: 0f:aa:1e:8f:93:94:93:69:e8:32:cc:40:00:19:ed: 4c:bc:9b:fe:30:34:b4:df:73:61:9f:3b:bc:d7:69: 1a:22:9f:30:9c:07:2b:41:0c:d7:b3:6b:ba:1f:fd: de:a3:75:5a:e7:48:2e:cc:83:9e:3e:37:a6:63:a6: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:22:AA:F1:10:C3:62:C9:CC:FC:3A:ED:6E:7E:0B:06:3E:25:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl X509v3 Authority Key Identifier: keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer sbgp-ipAddrBlock: critical IPv4: 198.35.120.0/21 IPv6: 2620:c:8000::/48 2620:109:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d2:7a:dc:35:15:29:0b:48:a3:ac:3e:0c:b3:a2:0d:9d:35: ba:04:67:b7:b5:94:30:db:2e:7c:b2:2b:3b:23:43:77:d9:b6: c0:b7:2c:4b:a1:19:3b:03:54:ca:95:a9:a6:4c:6e:40:8f:ae: ae:74:ec:72:f8:6e:b1:56:89:84:ed:da:84:3c:40:2f:9c:0a: 0e:cb:fd:b5:f0:0e:66:1b:9c:94:92:1d:c6:cd:22:c0:ec:16: c8:e8:82:78:fd:83:35:d0:60:4c:76:66:59:dc:fc:e3:8c:6a: 9d:cd:09:79:fd:04:cd:b8:45:99:fb:38:4e:ab:88:25:7e:5a: b2:f6:e2:bb:06:f4:03:e6:26:32:11:97:b5:bc:bf:73:1b:aa: 36:0f:6e:a0:ee:3f:78:95:9f:8a:ca:48:24:44:c3:a8:d9:88: 3d:81:5e:d8:c9:53:77:e0:2a:1c:30:a3:52:4c:db:12:3a:80: 49:df:84:8e:2e:d2:48:dd:f6:7e:d1:58:11:b6:ee:47:3a:15: ff:59:45:50:cb:b6:c8:e1:75:eb:a3:5d:7d:9e:a8:a7:81:71: 0d:e1:65:3c:a8:01:0f:4f:99:e2:6d:4c:aa:64:4e:54:63:fc: cd:9a:0f:17:ca:ff:38:9f:ac:70:d2:80:4f:26:0d:0a:89:18: e4:6d:db:73 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE64R0Kb4/ecz8V8lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2 OTIyMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk NWJkNWFlMjUtMzQ1MC00ZGY1LTg0OTgtZDQ3ZGE1MzQzZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVfkEaK/AFbjeNtNDq4qexCk+9cKZyeWAHxZ Z/4NO8vUoCw8d028XIs/cpv64kmRbVBiu+DZfb4mX5tWoaRMyIsOs12QZ+DM5oGP JzVrrcHCTka1Au3u8rJ411ZLn+hbOpRbwbxCvWLdsObJVTAx/3qI64g2o9xfuAuv 8Z94ue0CjBKGxZLgXP1dL+NuZw4VMUSv8SzaKP6qvqq5jZhHicpkiMX7NpoLvJjd JaVzPy9KPh0+0XL8qTq/Ao+8IwVMqgUPqh6Pk5STaegyzEAAGe1MvJv+MDS033Nh nzu812kaIp8wnAcrQQzXs2u6H/3eo3Va50guzIOePjemY6Z8iwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFEodIqrxEMNiycz8Ou1ufgsGPiXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQx ZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvMWM4ZTU1ZTQtYTk3Ny0z NWU3LWE5OGYtZWIyOGI2ZmE5MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZkMWZlM2ItN2UyNC00ZDI3LWJi MTAtYmViOWNlMmQ2OTIyL2FmZDFmZTNiLTdlMjQtNGQyNy1iYjEwLWJlYjljZTJk NjkyMi5jcmwwHwYDVR0jBBgwFoAU76MsHlY0EPKfNjNb4XPd5lnEiQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5 Y2UyZDY5MjIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDxiN4MBgE AgACMBIDBwAmIAAMgAADBwQmIAEJYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADtJ63DUVKQtIo6w+DLOi DZ01ugRnt7WUMNsufLIrOyNDd9m2wLcsS6EZOwNUypWppkxuQI+urnTscvhusVaJ hO3ahDxAL5wKDsv9tfAOZhuclJIdxs0iwOwWyOiCeP2DNdBgTHZmWdz844xqnc0J ef0EzbhFmfs4TquIJX5asvbiuwb0A+YmMhGXtby/cxuqNg9uoO4/eJWfispIJETD qNmIPYFe2MlTd+AqHDCjUkzbEjqASd+Eji7SSN32ftFYEbbuRzoV/1lFUMu2yOF1 66NdfZ6op4FxDeFlPKgBD0+Z4m1MqmROVGP8zZoPF8r/OJ+scNKATyYNCokY5G3b cw== -----END CERTIFICATE-----Generated at Sat Sep 5 03:54:05 2026 by rpki-client