$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa File: 42e8aaf6-e160-3994-b12c-56f0221750e9.roa (raw, json) Hash identifier: 0CjumR4ZUSPNm1u2rcyYFh8WPK0cboC4RkCZE54SMn4= Subject key identifier: 1D:75:53:45:06:2B:8E:F3:4A:76:55:A0:94:07:F0:14:68:B1:57:16 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584EA78868BB4CDBCBF38AE6EB80 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16532 IP address blocks: 198.52.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:68:bb:4c:db:cb:f3:8a:e6:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7b08256-c038-4ce2-a3a3-d3e2756eef72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:6c:a2:2e:a9:ba:0d:09:27:e9:97:6c:32: 5e:e2:82:81:a7:41:ca:4e:c5:c8:dc:af:fd:0d:2b: ea:50:e4:9a:57:20:7b:8b:fb:7c:33:76:52:07:0f: 60:1b:10:74:f7:8a:3e:08:31:3a:16:94:9f:07:a7: 9b:44:71:ba:92:5a:32:d4:80:b4:fd:89:ed:4c:a6: e7:c9:23:72:6b:36:3c:62:5b:8b:2c:0d:b7:d3:63: 99:4b:ac:1c:5c:78:5f:88:8a:05:ae:7c:7a:e4:b3: ef:05:6e:27:de:b9:f3:09:96:4c:6b:d4:f1:90:94: 4b:af:87:54:89:d7:d3:14:93:82:41:9e:bc:78:2a: 6a:fa:e5:12:66:80:d2:47:0d:78:1c:de:3f:32:01: 28:b1:62:4e:22:d4:a0:d9:a9:b4:04:ca:64:c1:4c: dd:25:99:54:7f:0d:eb:d7:ff:2c:87:8c:59:d7:d5: 76:68:a7:a9:e2:3e:10:ac:de:96:44:69:ec:ab:cd: 25:01:52:e3:6f:5c:ac:48:77:c1:02:eb:72:f9:ea: e0:cf:38:1e:b4:ca:21:6d:3b:28:d3:b3:be:2b:cb: f5:94:b1:d7:a4:69:60:76:47:f8:b3:1a:89:c0:96: e5:90:2c:a8:0a:c9:b2:d9:df:0c:96:df:98:d7:4f: 76:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:75:53:45:06:2B:8E:F3:4A:76:55:A0:94:07:F0:14:68:B1:57:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/42e8aaf6-e160-3994-b12c-56f0221750e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 198.52.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4e:ec:43:2d:ed:17:79:ea:4e:8a:96:d6:16:b8:d4:eb:7b: 76:dc:f6:0e:65:f2:f4:4b:85:01:70:03:4b:8a:7c:33:f9:18: 76:69:78:6b:d7:a3:8f:e4:89:05:ce:be:1a:0c:c6:4d:e6:48: a6:54:c2:68:49:d8:4d:42:86:11:56:78:98:5e:94:18:ad:3f: 61:d7:32:50:af:8b:22:ec:24:a8:23:c5:56:62:d0:2d:20:e7: 1a:ac:49:ae:c8:61:a9:5d:fc:b4:76:f6:60:ad:3f:5e:49:e8: 0a:77:41:a3:57:49:de:a8:61:6e:ef:fd:9d:79:d9:b9:c3:dd: 3a:f4:9e:57:d1:a5:33:f8:d5:4c:28:61:78:bb:a8:c8:d9:ab: 77:38:f3:a3:75:bc:eb:d8:55:93:26:ca:9e:de:61:e0:78:5e: a4:55:53:3d:1a:38:55:a4:2b:98:f5:f4:28:4e:70:aa:85:b8: 26:55:8f:0f:83:0f:7e:aa:e4:d3:e9:31:2a:c0:30:5e:ae:24: 70:16:07:56:04:96:b5:02:ac:4e:da:9d:ff:5d:ee:cf:d4:64: 2d:24:30:80:44:38:67:48:8f:00:25:1e:9c:cf:c2:20:66:ae: 91:3d:c7:c1:93:76:83:c3:9d:43:27:9d:e6:69:bf:c8:71:3e: 88:7f:9f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGi7TNvL84rm64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDdiMDgyNTYtYzAzOC00Y2UyLWEzYTMtZDNlMjc1NmVlZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA055soi6pug0JJ+mXbDJe4oKBp0HKTsXI3K/9 DSvqUOSaVyB7i/t8M3ZSBw9gGxB094o+CDE6FpSfB6ebRHG6kloy1IC0/YntTKbn ySNyazY8YluLLA2302OZS6wcXHhfiIoFrnx65LPvBW4n3rnzCZZMa9TxkJRLr4dU idfTFJOCQZ68eCpq+uUSZoDSRw14HN4/MgEosWJOItSg2am0BMpkwUzdJZlUfw3r 1/8sh4xZ19V2aKep4j4QrN6WRGnsq80lAVLjb1ysSHfBAuty+ergzzgetMohbTso 07O+K8v1lLHXpGlgdkf4sxqJwJblkCyoCsmy2d8Mlt+Y10926wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB11U0UGK47zSnZVoJQH8BRosVcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNDJlOGFhZjYtZTE2MC0z OTk0LWIxMmMtNTZmMDIyMTc1MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExjQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENO7EMt7Rd56k6KltYWuNTre3bc9g5l8vRLhQFwA0uKfDP5GHZpeGvX o4/kiQXOvhoMxk3mSKZUwmhJ2E1ChhFWeJhelBitP2HXMlCviyLsJKgjxVZi0C0g 5xqsSa7IYald/LR29mCtP15J6Ap3QaNXSd6oYW7v/Z152bnD3Tr0nlfRpTP41Uwo YXi7qMjZq3c486N1vOvYVZMmyp7eYeB4XqRVUz0aOFWkK5j19ChOcKqFuCZVjw+D D36q5NPpMSrAMF6uJHAWB1YElrUCrE7anf9d7s/UZC0kMIBEOGdIjwAlHpzPwiBm rpE9x8GTdoPDnUMnneZpv8hxPoh/n1g= -----END CERTIFICATE-----Generated at Mon Aug 31 12:15:55 2026 by rpki-client