$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: bEYjvWm/WT3o1Q7+27v/3HE6b/PJesxghX14tFdhXtk= Subject key identifier: 0A:1F:75:93:34:DD:03:B3:9D:1B:0E:70:D8:4A:AE:AB:F2:98:08:DE Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F4328584E4559E3502FF73D20AACD7284 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e3:50:2f:f7:3d:20:aa:cd:72:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=575cceeb-0476-48e9-8415-114120fd5228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:92:11:d6:47:3a:d1:0d:3f:05:1a:1a:c7:a6: 10:61:ce:f6:ca:90:84:20:09:cc:d7:a1:75:3f:90: b6:45:88:21:ff:94:39:be:31:05:8a:77:03:db:58: b9:a6:71:0a:4f:0a:6f:84:8e:ee:09:ac:aa:68:b3: f5:50:31:a4:7d:f1:43:7d:55:e6:ab:ba:79:45:f6: b1:10:15:6b:71:bf:2c:f8:0f:de:48:ae:3d:a6:d4: 56:da:33:b4:4e:39:88:6c:b5:a5:14:76:d9:1d:ca: 57:39:af:ab:1c:a8:19:90:98:e7:7b:38:a6:db:8d: e5:c1:2d:d3:81:d8:d1:30:3a:51:22:07:77:97:95: 43:dc:32:2c:d2:f6:99:4c:ce:b6:12:34:d5:53:cb: cc:d4:a3:42:72:97:2f:f3:f7:94:ad:f3:4e:e8:ba: bf:a8:28:f9:d6:ab:39:ef:7b:ae:0a:4a:14:d6:b5: c2:35:ec:db:88:0f:4a:11:3f:66:2a:1d:8b:cc:18: ad:4a:47:77:dc:a2:e2:0c:19:2a:b5:5d:a0:9d:d1: 12:3c:97:0d:68:81:f5:dc:73:6c:8a:0b:99:31:09: 74:0a:07:d3:fd:08:19:30:95:67:21:2f:aa:24:be: 74:48:4d:d0:4b:e0:41:4b:93:7c:43:e1:0b:2a:f8: c5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1F:75:93:34:DD:03:B3:9D:1B:0E:70:D8:4A:AE:AB:F2:98:08:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:7b:37:07:81:05:11:c9:ca:7c:d0:3c:f2:b8:a2:29:2e:0b: 23:e2:6e:3b:17:11:a6:a1:7f:20:ed:21:7e:df:a8:29:c5:18: e4:41:9a:e3:66:8d:bb:f8:80:f8:3d:8a:0c:3c:99:41:a2:71: b0:e3:23:d6:ad:2c:1c:0b:73:28:f3:43:6d:27:f5:3a:92:26: 50:70:f3:0e:9a:28:10:b1:27:65:43:4a:07:b3:08:b3:4c:87: 08:4c:54:8d:a9:a0:2d:6f:3a:43:f2:60:de:8a:6b:90:35:9c: 76:42:36:6f:2a:46:35:f4:01:33:0f:ba:2b:b6:97:5d:6b:cf: 1d:ac:65:c9:7d:06:72:c2:22:1a:51:95:a0:ee:ef:cf:c3:76: 50:60:6b:0d:62:60:56:07:fb:41:09:93:07:40:c2:39:45:89: fb:db:6b:70:30:b8:3c:60:bb:ef:8e:a1:fc:e2:7e:35:34:ea: 46:b1:ce:fd:e1:9f:0e:03:80:fe:00:5a:db:a2:eb:25:ba:b8: 5a:ab:7e:0a:61:32:5e:6a:23:8d:ad:3b:47:69:24:af:82:67: f9:a1:82:f7:4c:45:3e:be:99:90:e4:04:79:63:b5:aa:29:b0: 74:b2:c3:e3:b8:4e:e5:7b:fd:2a:65:8b:c6:ce:7f:58:03:b6: be:2d:96:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWeNQL/c9IKrNcoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NTc1Y2NlZWItMDQ3Ni00OGU5LTg0MTUtMTE0MTIwZmQ1MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5IR1kc60Q0/BRoax6YQYc72ypCEIAnM16F1 P5C2RYgh/5Q5vjEFincD21i5pnEKTwpvhI7uCayqaLP1UDGkffFDfVXmq7p5Rfax EBVrcb8s+A/eSK49ptRW2jO0TjmIbLWlFHbZHcpXOa+rHKgZkJjnezim243lwS3T gdjRMDpRIgd3l5VD3DIs0vaZTM62EjTVU8vM1KNCcpcv8/eUrfNO6Lq/qCj51qs5 73uuCkoU1rXCNezbiA9KET9mKh2LzBitSkd33KLiDBkqtV2gndESPJcNaIH13HNs iguZMQl0CgfT/QgZMJVnIS+qJL50SE3QS+BBS5N8Q+ELKvjF/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAofdZM03QOznRsOcNhKrqvymAjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN57NweBBRHJynzQPPK4oikuCyPibjsXEaahfyDtIX7fqCnFGORBmuNm jbv4gPg9igw8mUGicbDjI9atLBwLcyjzQ20n9TqSJlBw8w6aKBCxJ2VDSgezCLNM hwhMVI2poC1vOkPyYN6Ka5A1nHZCNm8qRjX0ATMPuiu2l11rzx2sZcl9BnLCIhpR laDu78/DdlBgaw1iYFYH+0EJkwdAwjlFifvba3AwuDxgu++OofzifjU06kaxzv3h nw4DgP4AWtui6yW6uFqrfgphMl5qI42tO0dpJK+CZ/mhgvdMRT6+mZDkBHljtaop sHSyw+O4TuV7/Spli8bOf1gDtr4tlto= -----END CERTIFICATE-----Generated at Sat Jul 18 02:21:16 2026 by rpki-client