$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0/f9bb5f06-4bd2-3aee-a0b3-c523b47b3541.roa File: f9bb5f06-4bd2-3aee-a0b3-c523b47b3541.roa (raw, json) Hash identifier: j5Z4I7eIXGap1665XKUFnuKYvjCcSnEjek0E+D9JUi8= Subject key identifier: 46:D0:E2:56:DC:70:B1:F4:74:BD:01:CC:87:E0:0D:7A:0A:F2:41:D9 Certificate issuer: /CN=140bb9ab-8ef3-4384-b19e-f14c0901f1d0 Certificate serial: 010D0C9F4328584E5E07D46B2B760E6FAF08F800 Authority key identifier: CF:78:23:67:35:BB:3D:04:D3:2F:64:9A:1A:BA:43:A2:F9:A8:2C:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0/f9bb5f06-4bd2-3aee-a0b3-c523b47b3541.roa Signing time: Thu 02 Jul 2026 17:10:16 +0000 ROA not before: Thu 02 Jul 2026 17:10:16 +0000 ROA not after: Wed 30 Sep 2026 17:10:16 +0000 asID: 399486 IP address blocks: 198.99.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0/140bb9ab-8ef3-4384-b19e-f14c0901f1d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0/140bb9ab-8ef3-4384-b19e-f14c0901f1d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:07:d4:6b:2b:76:0e:6f:af:08:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140bb9ab-8ef3-4384-b19e-f14c0901f1d0 Validity Not Before: Jul 2 17:10:16 2026 GMT Not After : Sep 30 17:10:16 2026 GMT Subject: CN=a43f78c3-57d4-482f-812d-c8b273c7d904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:34:cc:50:58:12:ef:e3:8d:d9:ce:1b:06:f1: 5e:5a:13:28:4b:bf:78:0e:d3:39:dc:a2:8a:18:7d: 67:68:f9:34:72:15:84:58:51:b1:89:21:8b:e2:96: dc:12:fe:b2:d9:fc:ce:9f:c3:63:a1:ca:54:84:44: ea:ae:3f:da:70:84:f3:ef:83:ae:a2:5b:76:cc:72: ad:9b:63:60:41:fc:99:73:00:f5:4f:33:48:3e:01: a0:67:0f:94:ee:0a:3b:d5:2c:db:69:bf:57:59:0c: e4:e0:3c:99:fa:ae:66:d8:2e:9e:cc:74:9f:dd:89: 2a:da:57:e5:d2:5d:5b:a2:db:56:ca:92:a2:33:bb: e5:60:59:0b:02:e9:cf:b3:45:a6:fe:63:6b:79:ff: dd:65:01:b8:ba:d7:ef:2c:17:70:cf:23:e6:5c:f9: c2:1e:10:b0:8e:07:9c:6e:8f:00:8a:cc:33:29:86: 08:7d:50:8d:2a:53:5a:f8:e9:e5:22:7c:64:85:d3: f7:2c:73:b4:52:cf:f4:69:ad:ab:fc:d9:66:50:24: 5e:e2:ce:c5:7b:60:40:71:f4:7e:b3:d9:2d:12:87: 9c:47:26:74:b2:0a:6e:e1:14:f4:7c:ca:7e:33:26: ba:5a:4f:8d:24:cc:97:08:1d:80:06:a1:5f:68:c4: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D0:E2:56:DC:70:B1:F4:74:BD:01:CC:87:E0:0D:7A:0A:F2:41:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0/f9bb5f06-4bd2-3aee-a0b3-c523b47b3541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0/140bb9ab-8ef3-4384-b19e-f14c0901f1d0.crl X509v3 Authority Key Identifier: keyid:CF:78:23:67:35:BB:3D:04:D3:2F:64:9A:1A:BA:43:A2:F9:A8:2C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/140bb9ab-8ef3-4384-b19e-f14c0901f1d0.cer sbgp-ipAddrBlock: critical IPv4: 198.99.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:59:fd:59:d2:57:43:cd:26:89:f7:00:d4:6e:2c:c6:30:1e: bf:69:bb:16:57:9b:33:44:b9:4b:80:25:70:33:06:cd:c6:d9: a1:20:38:53:64:1a:ff:2b:19:7c:ab:fa:43:55:b7:d8:7d:99: 5c:9a:81:25:9e:5f:5d:ea:4d:16:b7:87:33:45:fe:8c:f2:d3: d4:b0:1c:bb:06:94:49:b0:47:85:83:5c:62:eb:6c:92:c0:18: 75:5c:ce:6e:4a:3e:81:a2:01:15:ca:66:a4:c3:5d:c8:21:8d: 68:ad:ff:42:30:48:df:67:d5:2e:19:6e:01:f0:20:ae:b6:ea: aa:b2:43:de:7b:ce:bb:dd:1b:98:78:2a:30:9d:d9:35:86:16: 63:d1:7d:5d:cf:9f:75:bf:22:5d:22:3e:89:37:b6:42:f4:41: 97:2a:85:99:d5:55:c4:96:cf:69:1c:00:13:71:a4:7a:63:0c: f2:15:3d:df:69:34:d9:b4:1a:fc:85:a6:d3:22:94:9f:94:ed: 0e:d0:81:44:c0:75:e3:ea:b5:74:04:9e:4b:53:35:36:16:2d: 8b:3d:db:8d:ea:97:01:c9:be:16:fb:fa:5e:d1:4d:da:c4:89: 00:fb:2d:aa:95:25:0b:7e:75:01:3e:5f:2d:ab:65:8b:c9:98: 5e:ba:f0:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eB9RrK3YOb68I+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQwYmI5YWItOGVmMy00Mzg0LWIxOWUtZjE0YzA5MDFm MWQwMB4XDTI2MDcwMjE3MTAxNloXDTI2MDkzMDE3MTAxNlowLzEtMCsGA1UEAxMk YTQzZjc4YzMtNTdkNC00ODJmLTgxMmQtYzhiMjczYzdkOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjTMUFgS7+ON2c4bBvFeWhMoS794DtM53KKK GH1naPk0chWEWFGxiSGL4pbcEv6y2fzOn8NjocpUhETqrj/acITz74Ouolt2zHKt m2NgQfyZcwD1TzNIPgGgZw+U7go71Szbab9XWQzk4DyZ+q5m2C6ezHSf3Ykq2lfl 0l1bottWypKiM7vlYFkLAunPs0Wm/mNref/dZQG4utfvLBdwzyPmXPnCHhCwjgec bo8AiswzKYYIfVCNKlNa+OnlInxkhdP3LHO0Us/0aa2r/NlmUCRe4s7Fe2BAcfR+ s9ktEoecRyZ0sgpu4RT0fMp+Mya6Wk+NJMyXCB2ABqFfaMSQRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbQ4lbccLH0dL0BzIfgDXoK8kHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xNDBi YjlhYi04ZWYzLTQzODQtYjE5ZS1mMTRjMDkwMWYxZDAvZjliYjVmMDYtNGJkMi0z YWVlLWEwYjMtYzUyM2I0N2IzNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTQwYmI5YWItOGVmMy00Mzg0LWIx OWUtZjE0YzA5MDFmMWQwLzE0MGJiOWFiLThlZjMtNDM4NC1iMTllLWYxNGMwOTAx ZjFkMC5jcmwwHwYDVR0jBBgwFoAUz3gjZzW7PQTTL2SaGrpDovmoLFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xNDBiYjlhYi04ZWYzLTQzODQtYjE5ZS1mMTRj MDkwMWYxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmNLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJZ/VnSV0PNJon3ANRuLMYwHr9puxZXmzNEuUuAJXAzBs3G2aEgOFNk Gv8rGXyr+kNVt9h9mVyagSWeX13qTRa3hzNF/ozy09SwHLsGlEmwR4WDXGLrbJLA GHVczm5KPoGiARXKZqTDXcghjWit/0IwSN9n1S4ZbgHwIK626qqyQ957zrvdG5h4 KjCd2TWGFmPRfV3Pn3W/Il0iPok3tkL0QZcqhZnVVcSWz2kcABNxpHpjDPIVPd9p NNm0GvyFptMilJ+U7Q7QgUTAdePqtXQEnktTNTYWLYs9243qlwHJvhb7+l7RTdrE iQD7LaqVJQt+dQE+Xy2rZYvJmF668Gk= -----END CERTIFICATE-----Generated at Thu Jul 9 21:02:10 2026 by rpki-client