$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa File: ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa (raw, json) Hash identifier: 6pDAYWS2YP2L/MC+HJ/VZkl9KaZvDZm1/2FF79gzD1I= Subject key identifier: 60:DF:1D:A3:99:4F:40:1A:AD:9B:15:40:83:B6:1F:D1:D7:1A:4E:A2 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584E6CFC50E5A6F13AC9509C2F00 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa Signing time: Wed 08 Jul 2026 01:44:12 +0000 ROA not before: Wed 08 Jul 2026 01:44:12 +0000 ROA not after: Fri 14 Aug 2026 23:03:36 +0000 asID: 30286 IP address blocks: 199.101.158.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:fc:50:e5:a6:f1:3a:c9:50:9c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Jul 8 01:44:12 2026 GMT Not After : Aug 14 23:03:36 2026 GMT Subject: CN=17c9a64f-4b5e-46d6-859e-ce5fbf294b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bf:c0:8c:ef:58:bd:d9:8f:d2:dc:36:dd:0e: 5d:71:a2:a7:02:46:ab:44:a3:5e:ef:f4:bf:77:59: 47:cf:a0:7c:a7:26:ad:28:cd:cb:63:8a:cc:b2:f6: fa:8b:98:5d:7a:f0:25:73:7f:69:3a:ca:87:f0:16: 26:42:38:6a:02:73:15:dc:27:21:9d:81:31:7f:91: 5a:a1:51:b1:bb:e6:4e:aa:37:a2:13:dc:27:26:5c: 4b:bd:ed:e5:c4:a1:2c:2a:42:17:72:5f:ee:11:a3: ce:1d:da:a3:3e:af:a4:a1:76:cf:8c:da:5b:40:36: b1:bb:3b:12:3d:31:48:de:23:fd:b2:d2:8e:01:ae: 49:5d:03:95:b0:2e:81:41:1e:9b:6a:af:7c:b7:6e: ef:1d:5e:16:77:9f:d0:7d:6e:56:dc:1c:ad:84:de: 47:4d:53:d4:c9:98:28:96:19:a5:06:92:99:14:c6: 4b:f5:fd:99:80:e8:a6:fa:fc:70:58:a8:3b:c5:45: d1:fe:ad:fc:16:ce:24:4d:f2:a9:77:56:c7:99:61: 35:e4:a9:1f:44:d9:cf:0a:a3:57:52:1b:20:98:46: 32:79:6e:5c:fb:df:98:d6:df:d5:c8:59:25:0d:c7: 26:44:1b:23:8b:f7:c3:5c:0a:31:76:be:b2:5b:77: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DF:1D:A3:99:4F:40:1A:AD:9B:15:40:83:B6:1F:D1:D7:1A:4E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d1:15:ff:82:f2:09:99:49:15:b2:b0:3a:34:11:19:0b:84: a0:fe:4e:e3:91:45:4e:a2:14:da:b7:2b:59:50:44:a2:28:39: d3:15:71:4c:55:84:98:45:92:33:ff:e4:4f:89:b7:55:df:cd: 92:87:09:7e:08:0e:fd:52:4e:59:72:99:87:12:30:d6:52:90: 95:28:65:2c:37:47:7c:4d:45:f2:43:80:57:8a:78:b7:67:d9: 01:55:ed:b6:76:8f:1a:1a:d5:84:f2:f5:c1:f3:06:8f:25:6d: 4b:ca:09:a2:47:c3:63:7d:a6:ff:05:bf:3e:b5:a4:af:50:17: 81:00:f7:d5:41:96:d2:98:69:83:c9:fd:9d:4d:86:0b:12:3e: 0e:26:5e:15:9e:45:5a:74:5a:57:1d:88:2a:17:7c:38:01:60: 23:21:5c:bf:7d:20:63:5e:a5:c7:3d:5a:d9:9e:af:cb:07:a8: 4f:9e:3d:50:41:8e:f6:c5:5c:30:c6:14:25:03:67:9d:a8:67: 0b:63:e4:a2:ae:e2:96:35:08:89:cb:bb:fb:19:ea:ff:00:80: 5f:99:51:36:7e:5e:58:f1:b2:a4:a9:05:74:33:fd:f2:79:fd: a8:24:4e:12:cc:61:1b:31:07:28:75:4a:11:14:13:34:c5:97: 18:eb:76:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5s/FDlpvE6yVCcLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDcwODAxNDQxMloXDTI2MDgxNDIzMDMzNlowLzEtMCsGA1UEAxMk MTdjOWE2NGYtNGI1ZS00NmQ2LTg1OWUtY2U1ZmJmMjk0YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L/AjO9YvdmP0tw23Q5dcaKnAkarRKNe7/S/ d1lHz6B8pyatKM3LY4rMsvb6i5hdevAlc39pOsqH8BYmQjhqAnMV3CchnYExf5Fa oVGxu+ZOqjeiE9wnJlxLve3lxKEsKkIXcl/uEaPOHdqjPq+koXbPjNpbQDaxuzsS PTFI3iP9stKOAa5JXQOVsC6BQR6baq98t27vHV4Wd5/QfW5W3BythN5HTVPUyZgo lhmlBpKZFMZL9f2ZgOim+vxwWKg7xUXR/q38Fs4kTfKpd1bHmWE15KkfRNnPCqNX UhsgmEYyeW5c+9+Y1t/VyFklDccmRBsji/fDXAoxdr6yW3c26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDfHaOZT0AarZsVQIO2H9HXGk6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvZWM1ZTFkN2UtNTM3Zi0z ZjdiLWI5NjctNTBlN2E3MWY3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3RFf+C8gmZSRWysDo0ERkLhKD+TuORRU6iFNq3K1lQRKIoOdMVcUxV hJhFkjP/5E+Jt1XfzZKHCX4IDv1STllymYcSMNZSkJUoZSw3R3xNRfJDgFeKeLdn 2QFV7bZ2jxoa1YTy9cHzBo8lbUvKCaJHw2N9pv8Fvz61pK9QF4EA99VBltKYaYPJ /Z1NhgsSPg4mXhWeRVp0WlcdiCoXfDgBYCMhXL99IGNepcc9Wtmer8sHqE+ePVBB jvbFXDDGFCUDZ52oZwtj5KKu4pY1CInLu/sZ6v8AgF+ZUTZ+XljxsqSpBXQz/fJ5 /agkThLMYRsxByh1ShEUEzTFlxjrdtk= -----END CERTIFICATE-----Generated at Tue Jul 21 20:03:10 2026 by rpki-client