$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa File: 854cc417-9964-39fb-bc3c-89da106824ca.roa (raw, json) Hash identifier: 1y8/CIxnupgmUVWK87DTyGSwN7mpXH/DEa9O9+W60Ls= Subject key identifier: 13:AC:83:F6:60:57:FC:36:3F:B1:C9:6E:29:15:8C:71:49:EA:27:72 Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F4328584EA7972FEB6150167E201E1E60 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21777 IP address blocks: 199.33.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:2f:eb:61:50:16:7e:20:1e:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=60ba739e-78b1-4bfb-8a2b-22ee7ef6998a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:49:0b:7c:0b:b2:8b:c2:d8:ae:a9:7d:0f: 8b:e6:23:05:ad:d3:95:44:5d:a7:8b:28:66:6b:3d: e1:bd:1f:42:03:33:91:ef:87:6e:86:68:b0:34:aa: 39:98:58:8b:2a:29:2b:6d:7d:25:90:0e:78:d8:8f: 4d:9e:47:7b:08:1f:75:5e:03:60:2e:a1:99:22:80: 4a:6d:9a:d6:f0:1c:6b:bb:bd:19:d5:a5:cd:a3:bd: fd:57:51:4a:9f:9d:68:7b:60:c2:d7:f1:0d:8a:2e: 7f:58:d4:89:2a:cb:61:6b:42:a5:3d:7b:51:2a:da: f6:89:73:9b:4e:e0:1d:4d:97:e3:fc:1f:d7:da:19: a5:69:9b:ca:cd:7b:28:c3:ec:d9:98:18:97:ea:f7: 57:a4:db:38:10:78:b4:d0:a6:82:7c:35:5d:ed:9e: eb:7b:a1:38:f5:dc:5d:ea:e8:04:0f:43:3c:b1:55: 41:bb:b9:3c:e9:18:f9:55:d9:21:d0:10:d3:c2:80: 39:ca:ad:64:f1:f4:01:a5:fc:b3:77:8c:04:d9:8e: 88:9e:6d:88:70:8c:3f:9c:a3:63:20:6e:15:64:d1: b3:71:51:13:c1:94:90:71:f3:f6:c0:79:7f:52:f8: ce:5b:ce:d4:84:f5:a7:d3:9c:1e:cd:7a:83:3e:34: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AC:83:F6:60:57:FC:36:3F:B1:C9:6E:29:15:8C:71:49:EA:27:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/854cc417-9964-39fb-bc3c-89da106824ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 199.33.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e6:7f:da:2b:43:6b:27:f4:94:cd:aa:d3:be:f8:92:d2:9a: e5:f6:7d:78:f9:d8:cf:a2:ea:22:03:63:3c:f7:87:4e:7e:14: ff:bc:50:b4:6c:bb:aa:8f:9c:fc:6c:fe:f2:20:33:5f:8a:a1: 98:4d:ac:6e:00:35:02:f1:e7:fb:08:8f:a6:d3:c0:ad:2c:15: 6d:a9:5a:f4:64:a8:5e:38:88:71:a3:d9:c1:04:d4:89:49:9f: 57:f2:12:e1:6d:bb:42:1f:0a:20:4d:33:21:fb:99:74:c2:fd: a2:9c:be:a3:15:7e:13:41:44:c5:71:dd:7e:f8:b7:55:59:35: 15:f7:73:13:53:81:31:29:84:0a:ec:32:21:22:76:db:84:0e: e3:d6:a4:82:0c:0a:46:c2:6f:d4:ce:be:ce:dc:a3:67:35:01: bd:98:fb:c1:1a:a2:6e:90:f6:16:1c:ad:ac:10:a1:6f:9b:b8: 2f:0b:c0:7c:aa:52:0a:94:6c:0b:37:e3:92:71:42:5c:cf:13: 22:05:56:94:30:d4:5c:cb:7a:09:78:a9:f0:50:57:b7:bb:d0: c6:a6:ac:86:c6:9e:95:c0:44:83:eb:e0:aa:d2:25:a0:c8:ef: 68:12:ba:19:37:a3:40:d6:9d:0f:ba:94:f3:70:45:1d:11:29: 77:4b:12:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nly/rYVAWfiAeHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjBiYTczOWUtNzhiMS00YmZiLThhMmItMjJlZTdlZjY5OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn5JC3wLsovC2K6pfQ+L5iMFrdOVRF2niyhm az3hvR9CAzOR74duhmiwNKo5mFiLKikrbX0lkA542I9Nnkd7CB91XgNgLqGZIoBK bZrW8Bxru70Z1aXNo739V1FKn51oe2DC1/ENii5/WNSJKstha0KlPXtRKtr2iXOb TuAdTZfj/B/X2hmlaZvKzXsow+zZmBiX6vdXpNs4EHi00KaCfDVd7Z7re6E49dxd 6ugED0M8sVVBu7k86Rj5Vdkh0BDTwoA5yq1k8fQBpfyzd4wE2Y6Inm2IcIw/nKNj IG4VZNGzcVETwZSQcfP2wHl/UvjOW87UhPWn05wezXqDPjQQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOsg/ZgV/w2P7HJbikVjHFJ6idyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvODU0Y2M0MTctOTk2NC0z OWZiLWJjM2MtODlkYTEwNjgyNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPmf9orQ2sn9JTNqtO++JLSmuX2fXj52M+i6iIDYzz3h05+FP+8ULRs u6qPnPxs/vIgM1+KoZhNrG4ANQLx5/sIj6bTwK0sFW2pWvRkqF44iHGj2cEE1IlJ n1fyEuFtu0IfCiBNMyH7mXTC/aKcvqMVfhNBRMVx3X74t1VZNRX3cxNTgTEphArs MiEidtuEDuPWpIIMCkbCb9TOvs7co2c1Ab2Y+8Eaom6Q9hYcrawQoW+buC8LwHyq UgqUbAs345JxQlzPEyIFVpQw1FzLegl4qfBQV7e70MamrIbGnpXARIPr4KrSJaDI 72gSuhk3o0DWnQ+6lPNwRR0RKXdLEuU= -----END CERTIFICATE-----Generated at Mon Aug 31 10:51:44 2026 by rpki-client