$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa File: 1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa (raw, json) Hash identifier: 1WSOqKC4aJvbyZ7K6ugoEh737sobtEc3eAFW6KFKdhk= Subject key identifier: 93:9C:85:C5:3C:40:5E:3C:CE:38:79:BD:26:12:9B:B8:A9:9C:03:68 Certificate issuer: /CN=20ffd753-1cb0-470b-9810-1f98670d442f Certificate serial: 010D0C9F4328584EDF5C9386E99173F4C44CCFD0 Authority key identifier: F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 53902 IP address blocks: 192.58.129.0/24 maxlen: 24 2602:f4d6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:93:86:e9:91:73:f4:c4:4c:cf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ffd753-1cb0-470b-9810-1f98670d442f Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=ed28ca1a-0016-409c-9251-5a7b62ec893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:d1:da:e8:53:e8:a8:7a:c6:b1:08:22:74: 95:a0:df:21:5f:e1:c4:36:c0:ea:e7:f2:6a:fb:12: 98:9d:47:9e:ae:2d:96:b2:8f:9c:a5:22:7f:a0:d3: 2f:f9:71:46:75:6f:0a:b4:f5:78:b6:28:9d:4d:ad: c7:de:68:c5:4f:ea:2d:09:81:a5:ba:62:42:05:c7: 7f:17:bb:be:98:5c:e4:43:26:59:3a:a7:80:31:3a: 73:7d:a7:44:47:15:a7:3a:8a:dc:d0:ed:96:e6:a5: 17:32:ab:e7:c0:6f:36:f3:b4:bf:9f:05:07:43:83: ed:86:5d:d5:a5:cc:7b:7d:c2:b9:af:20:87:f8:c4: 81:ed:40:52:df:61:4d:ea:08:1c:ff:a1:32:97:cc: 54:fc:79:79:f2:c8:8b:a8:ed:f6:e3:6f:b0:81:28: 84:d5:7a:c0:fc:42:2a:30:95:3c:2c:03:6e:05:0c: 80:37:0b:6d:6f:89:ac:f7:c4:8e:1f:6c:9c:2a:f5: e2:c2:fa:09:bc:d8:98:11:9d:7e:5f:83:0d:d7:99: 29:0a:79:f0:25:49:81:ec:dd:51:52:03:11:52:f6: 1f:72:9a:b7:1a:ab:bc:62:c0:07:9f:ca:d6:10:7b: ef:f5:b5:ec:d2:76:b5:03:cc:b8:7b:82:8a:96:68: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9C:85:C5:3C:40:5E:3C:CE:38:79:BD:26:12:9B:B8:A9:9C:03:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl X509v3 Authority Key Identifier: keyid:F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer sbgp-ipAddrBlock: critical IPv4: 192.58.129.0/24 IPv6: 2602:f4d6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e0:d2:cb:77:07:0d:52:54:c7:5d:e4:55:0b:72:ca:a7:09: b2:86:8c:09:c5:1f:c6:18:ed:1e:e5:37:27:bd:10:73:9a:f2: 52:ba:11:57:ba:c3:69:49:56:28:a9:67:1f:d5:4d:25:36:e2: 4e:a1:63:cb:b7:10:29:12:f5:8e:ca:50:0d:37:e2:35:85:47: 1d:83:0e:9c:f9:7a:6a:ac:1a:e2:02:71:6d:02:4a:79:34:d8: 97:b0:36:81:58:fd:3c:1d:5c:ad:b6:2b:e0:3a:6a:56:4f:cb: 34:52:45:ff:58:a1:06:40:df:5b:72:ea:18:2b:85:ec:1d:1c: 8e:71:d1:a8:4f:c4:0b:50:47:22:c3:da:cf:90:20:eb:2b:d8: 26:33:d1:bb:8a:0a:7f:25:d9:6b:f0:6b:b6:30:1c:e9:30:fd: 4a:57:98:99:8b:50:ea:cf:c9:8b:c3:c0:5f:dc:71:51:6a:22: 9c:46:32:ac:bf:32:ec:30:dc:4b:8b:5b:79:7a:6b:fd:5f:fe: f7:a5:10:2a:b0:be:b8:c2:4f:3a:16:d6:0c:33:68:9c:a0:4b: c6:4a:f9:5c:ac:85:d1:1a:95:45:12:4d:e6:12:04:bc:e5:0b: 7e:0e:c2:29:84:c4:b3:e8:5b:11:26:4d:f7:2d:7f:00:dc:c5: 58:e5:ac:0c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7fXJOG6ZFz9MRMz9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmZmQ3NTMtMWNiMC00NzBiLTk4MTAtMWY5ODY3MGQ0 NDJmMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk ZWQyOGNhMWEtMDAxNi00MDljLTkyNTEtNWE3YjYyZWM4OTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/R2uhT6Kh6xrEIInSVoN8hX+HENsDq5/Jq +xKYnUeeri2Wso+cpSJ/oNMv+XFGdW8KtPV4tiidTa3H3mjFT+otCYGlumJCBcd/ F7u+mFzkQyZZOqeAMTpzfadERxWnOorc0O2W5qUXMqvnwG8287S/nwUHQ4Pthl3V pcx7fcK5ryCH+MSB7UBS32FN6ggc/6Eyl8xU/Hl58siLqO3242+wgSiE1XrA/EIq MJU8LANuBQyANwttb4ms98SOH2ycKvXiwvoJvNiYEZ1+X4MN15kpCnnwJUmB7N1R UgMRUvYfcpq3Gqu8YsAHn8rWEHvv9bXs0na1A8y4e4KKlmgxzQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJOchcU8QF48zjh5vSYSm7ipnANoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZm ZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4NjcwZDQ0MmYvMWM3YzM3MzUtNDQ5YS0z YWU3LTliODItZDM4YjIxYTgxZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjBmZmQ3NTMtMWNiMC00NzBiLTk4 MTAtMWY5ODY3MGQ0NDJmLzIwZmZkNzUzLTFjYjAtNDcwYi05ODEwLTFmOTg2NzBk NDQyZi5jcmwwHwYDVR0jBBgwFoAU9heFA0A8DSI3OwIV34+aUPibhoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZmZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4 NjcwZDQ0MmYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwDqBMA4E AgACMAgDBgAmAvTWADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZ4NLLdwcNUlTHXeRVC3LKpwmyhowJxR/G GO0e5TcnvRBzmvJSuhFXusNpSVYoqWcf1U0lNuJOoWPLtxApEvWOylANN+I1hUcd gw6c+XpqrBriAnFtAkp5NNiXsDaBWP08HVyttivgOmpWT8s0UkX/WKEGQN9bcuoY K4XsHRyOcdGoT8QLUEciw9rPkCDrK9gmM9G7igp/Jdlr8Gu2MBzpMP1KV5iZi1Dq z8mLw8Bf3HFRaiKcRjKsvzLsMNxLi1t5emv9X/73pRAqsL64wk86FtYMM2icoEvG SvlcrIXRGpVFEk3mEgS85Qt+DsIphMSz6FsRJk33LX8A3MVY5awM -----END CERTIFICATE-----Generated at Thu Aug 27 04:55:42 2026 by rpki-client