$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa File: 8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa (raw, json) Hash identifier: UJV8nRWOde5UKhKnJkDwxVR7QXTC0p+0zW8iTQMGZW0= Subject key identifier: 44:5F:94:09:6D:BC:FF:2C:9E:AF:B9:89:92:F6:77:A2:6E:4A:40:AF Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584EC372B0A4A7D09BAE1B482240 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 398395 IP address blocks: 199.253.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:b0:a4:a7:d0:9b:ae:1b:48:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=253c50cd-84cc-4192-8c92-c2e7ec07a837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:fe:8e:bb:43:6e:5e:1a:9d:18:5a:31:cb: 2f:9a:a1:01:f9:57:41:c1:99:c9:5d:ea:5d:ca:bb: f3:d0:2a:ae:ad:9f:a0:6b:7a:3a:51:a6:f0:f0:e2: 38:46:34:7d:94:73:e1:45:98:de:f3:0a:85:5f:11: 0d:95:ea:59:6d:55:c9:12:07:8d:c2:53:c4:bc:fe: 5c:2a:d8:11:83:07:8e:7e:d7:f1:0b:e0:15:4f:d4: 8f:f6:88:f8:d2:2f:d9:dc:d0:d0:c5:62:51:f8:a9: 0c:9d:7d:64:10:9b:c0:46:03:c7:99:d6:99:cf:fb: 69:f7:c6:d6:77:28:92:6d:bc:bc:03:dd:67:14:29: 0d:11:d5:29:0d:dc:59:cf:3b:c3:e6:88:8a:45:3b: d2:96:bf:ac:e7:90:82:f7:d9:9f:ae:fe:cc:1e:0c: 09:3d:3b:95:a6:48:a2:63:36:94:9f:a3:09:58:70: 31:e3:86:4c:bc:79:1b:9c:e1:42:70:82:07:8e:f4: 89:7b:cf:40:03:e8:27:02:e4:30:f2:f3:99:4a:4f: 26:ac:36:ee:43:32:f4:15:bf:05:94:5c:5b:9e:23: b8:ff:e0:82:37:fe:05:c2:3e:4d:16:61:a6:04:89: 93:cd:67:10:cd:57:ed:aa:3a:28:c7:95:04:36:c4: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5F:94:09:6D:BC:FF:2C:9E:AF:B9:89:92:F6:77:A2:6E:4A:40:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fe:f5:0b:fd:bd:02:ef:d1:40:56:62:f0:03:bb:fb:74:47: 6b:ac:4e:4c:c4:09:af:b8:a2:56:20:f2:6b:16:b8:19:0c:0b: 0b:7f:48:a5:1f:50:28:9b:90:49:49:45:87:b1:fb:99:b0:98: 0c:0b:f1:22:a0:b9:1b:78:f7:7a:8b:4f:7a:a9:52:31:31:06: a4:32:43:7d:c7:0b:bd:4f:05:ab:59:0c:5f:1f:ac:6e:62:05: 5d:db:4e:52:aa:f6:30:64:c7:9d:da:e5:6a:db:75:c9:c0:e6: 06:cf:5a:77:fc:67:c7:75:7c:c2:3f:96:05:8f:20:26:d3:20: 77:29:c1:58:82:72:13:1e:ab:5d:99:b7:5e:6b:be:87:5a:ae: 3f:84:a1:96:90:75:a0:27:c2:a1:ad:a2:ab:85:d5:7b:2d:dd: af:6f:a4:1d:c9:8c:9d:ce:f8:7c:ac:34:74:40:d1:da:e9:a4: b5:54:78:7d:39:26:45:73:96:fe:f7:49:79:3d:d7:44:1b:8a: ad:a2:1f:ec:fb:7a:10:c5:04:f5:81:29:3f:2b:8f:8f:cc:91: 21:ed:47:de:f8:0b:f3:16:9a:4c:8b:af:2a:ea:1e:f9:9f:32: 1d:d5:d9:cd:85:3a:cd:e5:0f:d2:b7:ae:26:21:d2:5b:90:3e: 75:a3:3a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcrCkp9CbrhtIIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MjUzYzUwY2QtODRjYy00MTkyLThjOTItYzJlN2VjMDdhODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFj+jrtDbl4anRhaMcsvmqEB+VdBwZnJXepd yrvz0CqurZ+ga3o6Uabw8OI4RjR9lHPhRZje8wqFXxENlepZbVXJEgeNwlPEvP5c KtgRgweOftfxC+AVT9SP9oj40i/Z3NDQxWJR+KkMnX1kEJvARgPHmdaZz/tp98bW dyiSbby8A91nFCkNEdUpDdxZzzvD5oiKRTvSlr+s55CC99mfrv7MHgwJPTuVpkii YzaUn6MJWHAx44ZMvHkbnOFCcIIHjvSJe89AA+gnAuQw8vOZSk8mrDbuQzL0Fb8F lFxbniO4/+CCN/4Fwj5NFmGmBImTzWcQzVftqjoox5UENsTUuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERflAltvP8snq+5iZL2d6JuSkCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGQzNmEzY2EtNjYwYy0z N2I4LTkzMGItMDRiZDNiMjY3NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz+9Qv9vQLv0UBWYvADu/t0R2usTkzECa+4olYg8msWuBkMCwt/SKUf UCibkElJRYex+5mwmAwL8SKguRt493qLT3qpUjExBqQyQ33HC71PBatZDF8frG5i BV3bTlKq9jBkx53a5WrbdcnA5gbPWnf8Z8d1fMI/lgWPICbTIHcpwViCchMeq12Z t15rvodarj+EoZaQdaAnwqGtoquF1Xst3a9vpB3JjJ3O+HysNHRA0drppLVUeH05 JkVzlv73SXk910Qbiq2iH+z7ehDFBPWBKT8rj4/MkSHtR974C/MWmkyLryrqHvmf Mh3V2c2FOs3lD9K3riYh0luQPnWjOlg= -----END CERTIFICATE-----Generated at Sat Sep 5 00:50:23 2026 by rpki-client