$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa File: 542301b0-83c1-3997-b59d-aab70751e89e.roa (raw, json) Hash identifier: G2cmNrMs4n7ZArgYivLsSAS6PVikUvw207g5X5KBwrw= Subject key identifier: 4F:0C:19:EA:73:7E:45:E0:71:47:8D:06:65:D1:56:D4:9A:B9:90:0A Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584EAD1C4FE014F29177A45F7F80 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 55293 IP address blocks: 128.201.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:4f:e0:14:f2:91:77:a4:5f:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=a7f8f7b2-93d6-4294-927c-97081c051f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:78:1f:5f:09:45:09:17:10:95:87:f8:62: dc:05:c8:8e:5b:2f:04:d4:72:c0:12:84:b9:11:d0: 16:73:51:f2:f2:47:c2:26:7c:b1:f9:6e:ed:ac:34: 85:37:4a:39:5e:99:9a:75:b7:a2:0c:79:0f:b6:58: dc:5b:8f:a1:30:a2:9b:cc:f9:bf:75:c2:a5:78:7f: 36:9d:f0:58:8f:16:48:d3:fd:03:dd:6b:de:7b:91: a6:4a:3e:cc:57:b5:6e:47:aa:06:4f:98:41:2d:ad: d3:14:a1:94:1a:ab:a1:02:3f:0f:70:6e:70:ea:af: fe:80:76:3f:fe:5f:e0:74:ad:8b:57:17:b4:73:e1: b4:be:0d:7a:41:10:40:5c:02:5e:68:e6:8c:c7:8b: 61:cb:ba:82:78:66:8a:69:5e:82:1f:63:ad:cb:dd: 6d:49:69:28:42:1a:88:35:ac:e5:72:42:05:ab:fb: ea:d3:c3:97:a5:d1:0c:e3:32:d6:c4:99:0e:f5:40: e9:85:b5:9b:7f:71:d5:b9:54:84:37:d6:65:46:b6: a0:66:c6:38:39:fb:dc:9b:62:70:bf:2d:e0:8e:ad: ce:1e:21:3b:27:32:d8:3e:18:a5:bd:22:b8:cd:b6: 20:52:90:8c:38:ef:05:26:2b:41:1c:62:e9:72:f4: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0C:19:EA:73:7E:45:E0:71:47:8D:06:65:D1:56:D4:9A:B9:90:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 128.201.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a9:55:e1:7d:fe:bb:7a:77:4d:6d:6b:4b:4e:5c:31:31:67: b4:52:11:46:f5:82:c6:c4:c9:5b:89:72:4b:be:c8:2b:72:3e: a6:7e:d4:77:07:c2:a9:57:c6:80:96:15:c9:94:79:ef:7b:67: b0:98:b4:53:16:95:64:9a:44:9c:f6:5c:ff:37:54:23:e7:13: 67:07:8b:bd:10:a3:05:6c:07:d6:83:57:46:a3:bb:88:d0:eb: 26:a7:bf:7c:ec:40:b0:f0:99:e3:16:8f:36:2d:e6:a6:2d:ad: bf:9d:0a:68:04:88:96:65:fe:d2:f4:91:04:ef:14:38:38:1a: 25:06:db:10:1c:ab:d9:a5:ae:94:2b:ba:d8:84:34:e2:dc:56: b4:a8:55:af:99:35:75:66:e0:61:42:7e:13:1d:6d:f1:0e:75: d6:c3:c2:22:e5:f4:dc:d3:cd:90:aa:38:e6:35:78:87:a8:e5: a2:87:b4:77:7e:2b:a1:8a:54:ba:92:b5:3a:db:d8:43:a4:b2: e1:18:0e:93:4b:53:c0:a1:ff:47:ba:49:be:f9:93:6f:b3:42: 0d:76:fe:f5:1b:47:4f:cc:0a:c3:c2:69:83:b1:b3:1e:06:63: a4:b0:d6:d9:c9:b6:9c:53:3d:f5:db:f0:9b:61:b4:d3:96:62: 06:a0:6f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHE/gFPKRd6Rff4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk YTdmOGY3YjItOTNkNi00Mjk0LTkyN2MtOTcwODFjMDUxZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUJ4H18JRQkXEJWH+GLcBciOWy8E1HLAEoS5 EdAWc1Hy8kfCJnyx+W7trDSFN0o5XpmadbeiDHkPtljcW4+hMKKbzPm/dcKleH82 nfBYjxZI0/0D3Wvee5GmSj7MV7VuR6oGT5hBLa3TFKGUGquhAj8PcG5w6q/+gHY/ /l/gdK2LVxe0c+G0vg16QRBAXAJeaOaMx4thy7qCeGaKaV6CH2Oty91tSWkoQhqI NazlckIFq/vq08OXpdEM4zLWxJkO9UDphbWbf3HVuVSEN9ZlRragZsY4Ofvcm2Jw vy3gjq3OHiE7JzLYPhilvSK4zbYgUpCMOO8FJitBHGLpcvTgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8MGepzfkXgcUeNBmXRVtSauZAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTQyMzAxYjAtODNjMS0z OTk3LWI1OWQtYWFiNzA3NTFlODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgMkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACupVeF9/rt6d01ta0tOXDExZ7RSEUb1gsbEyVuJcku+yCtyPqZ+1HcH wqlXxoCWFcmUee97Z7CYtFMWlWSaRJz2XP83VCPnE2cHi70QowVsB9aDV0aju4jQ 6yanv3zsQLDwmeMWjzYt5qYtrb+dCmgEiJZl/tL0kQTvFDg4GiUG2xAcq9mlrpQr utiENOLcVrSoVa+ZNXVm4GFCfhMdbfEOddbDwiLl9NzTzZCqOOY1eIeo5aKHtHd+ K6GKVLqStTrb2EOksuEYDpNLU8Ch/0e6Sb75k2+zQg12/vUbR0/MCsPCaYOxsx4G Y6Sw1tnJtpxTPfXb8JthtNOWYgagb50= -----END CERTIFICATE-----Generated at Sat Aug 22 19:33:08 2026 by rpki-client