$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa File: 40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa (raw, json) Hash identifier: uTVjsGU/qWiWu52vl3qGV4KZNB7NdAl/U10pWIBPeX0= Subject key identifier: 97:60:58:6C:1E:CD:F3:3B:BC:58:AC:18:59:9C:92:BD:DC:66:87:85 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584EAF2350D3FC55EBA9F1D1E2E0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa Signing time: Fri 31 Jul 2026 18:26:08 +0000 ROA not before: Fri 31 Jul 2026 18:26:08 +0000 ROA not after: Thu 29 Oct 2026 18:26:08 +0000 asID: 6559 IP address blocks: 198.86.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:23:50:d3:fc:55:eb:a9:f1:d1:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jul 31 18:26:08 2026 GMT Not After : Oct 29 18:26:08 2026 GMT Subject: CN=e5f22da9-3e38-4395-afc0-f6bf60b1485a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:32:df:79:7c:21:6d:00:77:a2:98:4a:0b:f5: 54:0e:e5:48:98:36:2d:48:48:d9:af:af:94:39:ab: ad:c0:c2:c6:6d:ec:23:83:1d:0b:ac:20:5c:ac:9e: a2:e0:f9:7f:98:fd:4d:a0:36:3e:a3:7e:a4:a3:65: fa:a5:41:7b:10:3c:e5:64:8c:cc:bd:d1:09:ad:d9: 0c:b8:ce:37:97:e9:aa:db:1b:c1:b8:62:7a:30:e5: 95:aa:e1:01:1f:eb:ec:d3:0f:84:fa:82:52:04:2e: 56:06:d5:92:2b:98:2b:35:cd:d9:db:ed:1d:59:97: e8:fe:c4:e7:d5:3f:6a:f2:c8:8e:93:4d:c4:15:03: be:a9:f2:ce:9e:d9:7c:ab:81:b7:d7:75:1a:83:bc: dc:03:40:61:06:37:20:dc:b2:a2:39:98:9f:c1:b6: 37:ba:b7:f3:d7:e2:ba:c2:94:20:8f:7f:53:92:8f: 17:de:d2:c4:3f:2e:a6:1c:84:a8:1f:2b:d0:53:76: e1:12:4c:19:b9:1c:35:ae:85:37:2e:bd:e8:85:62: 9c:0e:9f:cb:0d:52:46:1e:66:25:28:cf:a8:1f:5a: a2:35:c1:f9:81:81:1c:0f:2d:83:73:a1:87:ce:b2: 81:23:a0:47:3f:53:03:d9:50:69:34:a5:eb:6b:5e: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:60:58:6C:1E:CD:F3:3B:BC:58:AC:18:59:9C:92:BD:DC:66:87:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40f34ac0-d171-3e21-bc1d-7d4c97e8a2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e9:75:df:e0:78:9f:18:d4:3a:7b:7f:f2:75:86:df:11:7e: 81:4c:5d:c3:a9:d5:5f:76:47:d2:62:02:7b:e2:0f:c0:65:69: c1:79:27:1b:80:84:2a:27:f7:72:61:b8:a0:07:4a:89:d3:f6: 9b:56:2e:d6:57:3d:82:3d:91:52:81:2a:ac:52:8a:79:8d:e5: 42:f5:5e:2d:0b:ae:c7:95:71:86:83:0d:55:a2:d1:92:47:68: e0:d3:79:d0:53:3e:c5:96:53:94:35:c9:37:c7:78:c0:75:c0: 17:98:b8:03:dc:08:69:59:c6:8a:a1:10:d6:2f:ca:a6:c6:5f: 86:1a:f9:14:5a:f2:ac:e0:d2:f1:71:9c:0c:09:74:2f:47:20: ac:9b:be:f4:72:d6:bc:ba:e6:c2:e7:79:e0:11:8f:9c:bb:20: 8a:25:21:a4:67:80:40:a9:a3:fd:42:67:e2:c2:ed:77:48:9f: d5:1f:91:33:f9:55:ed:f5:af:ea:3b:6c:6b:25:ce:d7:df:82: 4a:a3:d6:af:1f:9e:3e:e7:9f:a1:a3:e8:78:b5:8e:02:55:de: 6f:92:03:31:2f:ce:75:8e:ba:6d:fc:c2:87:e6:bd:e3:7c:2b: 8d:ee:d3:6b:57:f1:08:50:56:44:08:2a:71:a1:1d:8d:13:ec: ed:f2:a9:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vI1DT/FXrqfHR4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDczMTE4MjYwOFoXDTI2MTAyOTE4MjYwOFowLzEtMCsGA1UEAxMk ZTVmMjJkYTktM2UzOC00Mzk1LWFmYzAtZjZiZjYwYjE0ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjLfeXwhbQB3ophKC/VUDuVImDYtSEjZr6+U OautwMLGbewjgx0LrCBcrJ6i4Pl/mP1NoDY+o36ko2X6pUF7EDzlZIzMvdEJrdkM uM43l+mq2xvBuGJ6MOWVquEBH+vs0w+E+oJSBC5WBtWSK5grNc3Z2+0dWZfo/sTn 1T9q8siOk03EFQO+qfLOntl8q4G313Uag7zcA0BhBjcg3LKiOZifwbY3urfz1+K6 wpQgj39Tko8X3tLEPy6mHISoHyvQU3bhEkwZuRw1roU3Lr3ohWKcDp/LDVJGHmYl KM+oH1qiNcH5gYEcDy2Dc6GHzrKBI6BHP1MD2VBpNKXra17HpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdgWGwezfM7vFisGFmckr3cZoeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDBmMzRhYzAtZDE3MS0z ZTIxLWJjMWQtN2Q0Yzk3ZThhMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnpdd/geJ8Y1Dp7f/J1ht8RfoFMXcOp1V92R9JiAnviD8BlacF5JxuA hCon93JhuKAHSonT9ptWLtZXPYI9kVKBKqxSinmN5UL1Xi0LrseVcYaDDVWi0ZJH aODTedBTPsWWU5Q1yTfHeMB1wBeYuAPcCGlZxoqhENYvyqbGX4Ya+RRa8qzg0vFx nAwJdC9HIKybvvRy1ry65sLneeARj5y7IIolIaRngECpo/1CZ+LC7XdIn9UfkTP5 Ve31r+o7bGslztffgkqj1q8fnj7nn6Gj6Hi1jgJV3m+SAzEvznWOum38wofmveN8 K43u02tX8QhQVkQIKnGhHY0T7O3yqYU= -----END CERTIFICATE-----Generated at Sat Aug 22 18:00:08 2026 by rpki-client