$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/82f5e0be-2a31-314d-95a7-71fe8ff62743.roa File: 82f5e0be-2a31-314d-95a7-71fe8ff62743.roa (raw, json) Hash identifier: airA9Q9tcLOH+Mli9NQ6DAWx+pvEkO+yC7exx9Jrg/c= Subject key identifier: 0E:CE:52:5C:E2:BE:7C:79:86:34:49:E0:5E:DD:61:93:0D:86:D9:2C Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584E6EB35FA2F29D34A6FA908C00 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/82f5e0be-2a31-314d-95a7-71fe8ff62743.roa Signing time: Wed 08 Jul 2026 16:28:51 +0000 ROA not before: Wed 08 Jul 2026 16:28:51 +0000 ROA not after: Tue 06 Oct 2026 16:28:51 +0000 asID: 834 IP address blocks: 158.62.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:b3:5f:a2:f2:9d:34:a6:fa:90:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Jul 8 16:28:51 2026 GMT Not After : Oct 6 16:28:51 2026 GMT Subject: CN=3cd977e6-07ac-44c8-a7bd-0a82e62b9061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:3c:b1:b0:7d:85:39:f6:70:29:ba:ba:4e: f6:a2:01:69:93:23:51:2e:02:47:54:7b:9c:db:1c: 68:02:bf:d6:34:e4:8c:2b:ff:4e:a5:2f:43:62:42: c7:52:e2:a7:4e:39:ac:9a:18:78:d9:c7:e0:34:b0: b5:37:8d:8f:5a:62:fc:58:87:62:03:bd:71:49:d2: 1e:26:1f:6e:e4:b8:a9:a4:83:22:e8:8b:ea:d2:be: be:c7:d2:1b:38:c9:f0:2b:d7:60:bb:c2:90:3f:22: ba:a3:98:38:fd:2e:30:0e:4f:39:bf:29:dd:24:f1: 95:da:c2:3e:c6:6d:3a:28:f5:25:1d:4d:db:9d:12: 71:be:24:3b:b0:d7:ed:7b:0d:cb:44:55:ec:9b:b8: aa:ec:10:a6:dd:e6:0b:4e:12:20:1a:f2:4c:df:b3: 1a:b4:b4:e5:46:b9:c7:42:c6:0a:80:e1:52:88:b3: c6:d1:c6:03:6e:de:55:dc:3e:8d:40:66:d3:5c:4e: 73:35:16:5c:ef:dc:a0:3a:f8:7d:2d:7c:1b:07:2a: 6f:7b:81:a6:98:b3:46:7d:6c:5d:f8:79:96:80:74: 4d:f5:44:8c:67:1b:cf:1a:ef:a8:d0:22:53:c3:e0: 80:5b:35:0e:42:fa:b5:66:63:42:a4:09:bf:a6:a1: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CE:52:5C:E2:BE:7C:79:86:34:49:E0:5E:DD:61:93:0D:86:D9:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/82f5e0be-2a31-314d-95a7-71fe8ff62743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 158.62.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:52:85:e8:de:78:5c:2a:62:fc:e1:6d:e8:c9:ab:3a:43:73: aa:84:d7:2b:a4:03:b0:66:b4:82:3a:9e:15:0e:73:bc:e1:4f: c9:66:cf:9d:cc:04:73:97:e9:c5:e9:4b:7b:b1:55:2f:a8:4a: 39:7f:d6:81:61:b1:36:ac:ab:d2:89:11:75:d7:48:d4:33:a7: 83:20:06:e7:72:2a:20:b6:f1:40:b9:32:7c:8a:ae:d9:69:ac: 59:86:e1:4c:1d:f6:bd:36:d3:3f:f4:ce:04:e6:96:74:4a:db: 02:20:3b:1a:cd:14:dd:7d:2f:60:b3:91:43:88:bd:f9:02:56: 43:fb:41:b7:ba:22:fe:4a:9f:77:01:9c:cd:3a:ef:1c:ad:6a: f2:9d:a4:6d:bd:2e:31:f7:a9:16:76:fe:41:c0:eb:06:23:7a: a6:7d:2d:c9:cf:e4:d4:ff:a8:de:05:5b:19:2d:f3:0b:d7:b1: f6:a7:76:97:55:ae:9b:d6:74:c6:43:33:86:8c:97:9b:cf:50: ad:89:16:cd:90:14:d3:b3:61:af:9d:4f:39:9d:c9:cc:1d:e2: 04:2b:f8:84:ae:56:e8:c7:9d:18:33:09:a3:56:5d:5c:1c:10: bd:41:95:48:bf:1e:69:81:5c:d7:28:6b:ec:b7:03:a1:dc:f4: 2d:0d:96:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5us1+i8p00pvqQjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MDcwODE2Mjg1MVoXDTI2MTAwNjE2Mjg1MVowLzEtMCsGA1UEAxMk M2NkOTc3ZTYtMDdhYy00NGM4LWE3YmQtMGE4MmU2MmI5MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bg8sbB9hTn2cCm6uk72ogFpkyNRLgJHVHuc 2xxoAr/WNOSMK/9OpS9DYkLHUuKnTjmsmhh42cfgNLC1N42PWmL8WIdiA71xSdIe Jh9u5LippIMi6Ivq0r6+x9IbOMnwK9dgu8KQPyK6o5g4/S4wDk85vyndJPGV2sI+ xm06KPUlHU3bnRJxviQ7sNftew3LRFXsm7iq7BCm3eYLThIgGvJM37MatLTlRrnH QsYKgOFSiLPG0cYDbt5V3D6NQGbTXE5zNRZc79ygOvh9LXwbBypve4GmmLNGfWxd +HmWgHRN9USMZxvPGu+o0CJTw+CAWzUOQvq1ZmNCpAm/pqH0SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7OUlzivnx5hjRJ4F7dYZMNhtksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODJmNWUwYmUtMmEzMS0z MTRkLTk1YTctNzFmZThmZjYyNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRShejeeFwqYvzhbejJqzpDc6qE1yukA7BmtII6nhUOc7zhT8lmz53M BHOX6cXpS3uxVS+oSjl/1oFhsTasq9KJEXXXSNQzp4MgBudyKiC28UC5MnyKrtlp rFmG4Uwd9r020z/0zgTmlnRK2wIgOxrNFN19L2CzkUOIvfkCVkP7Qbe6Iv5Kn3cB nM067xytavKdpG29LjH3qRZ2/kHA6wYjeqZ9LcnP5NT/qN4FWxkt8wvXsfandpdV rpvWdMZDM4aMl5vPUK2JFs2QFNOzYa+dTzmdycwd4gQr+ISuVujHnRgzCaNWXVwc EL1BlUi/HmmBXNcoa+y3A6Hc9C0NlnM= -----END CERTIFICATE-----Generated at Fri Jul 17 10:54:03 2026 by rpki-client