$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/864e88f0-2757-349d-8e72-739c2aa64be4.roa File: 864e88f0-2757-349d-8e72-739c2aa64be4.roa (raw, json) Hash identifier: 1qlZhjyeT9TH/Rt1hCC0LGoO8s4t1Aae83p6k6XXliU= Subject key identifier: 3C:98:66:8C:C5:28:AB:BD:92:B9:0C:C0:E3:31:15:9B:D9:81:EC:86 Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F4328584E8B24E9F3C124B2A5D67AEA40 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/864e88f0-2757-349d-8e72-739c2aa64be4.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 393891 IP address blocks: 192.103.118.0/24 maxlen: 24 192.103.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:24:e9:f3:c1:24:b2:a5:d6:7a:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=991b3e01-ac7c-4659-9973-c3601bddf1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:a9:5c:3d:c6:5f:51:d2:e3:d1:51:e3:19: 0f:d3:7e:c3:b5:2e:a1:dc:db:80:a0:5a:48:52:14: 39:35:6e:de:0a:36:de:ed:e9:ae:3e:7d:c0:8c:32: f5:43:b3:23:b8:86:4b:c7:95:ce:bd:78:63:31:ce: b2:86:f7:73:d5:15:61:c0:ca:50:60:0f:c8:3d:0f: b4:d7:db:8c:a9:6e:e7:d5:64:77:3a:4c:96:ae:33: c4:9c:46:69:76:62:f1:c0:56:17:57:42:69:31:be: b2:25:a5:c0:e9:92:22:24:e2:a3:43:05:da:95:77: 2e:ae:a2:57:6b:6a:d2:c9:b3:1c:88:6d:b9:62:80: a3:73:a1:25:c7:56:dc:88:0a:38:80:99:60:0f:9e: 78:3b:25:b7:7b:48:28:b0:6a:fc:dc:c5:9e:b2:74: a6:0a:8e:47:ff:74:87:77:e3:ed:7a:6b:c1:26:1f: 11:4b:96:0d:37:27:7e:1f:91:71:3b:1e:d0:a8:39: a5:c7:75:0f:ba:71:a3:d4:ce:71:0f:97:c3:21:46: b3:7d:45:9f:91:28:31:71:50:41:58:82:93:43:27: e1:79:18:64:0e:0b:7f:e2:4f:90:3a:77:3c:d1:79: 39:91:15:b5:bb:ff:3c:d3:9e:c8:1c:de:c2:17:f0: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:98:66:8C:C5:28:AB:BD:92:B9:0C:C0:E3:31:15:9B:D9:81:EC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/864e88f0-2757-349d-8e72-739c2aa64be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 192.103.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:58:88:59:43:5b:8d:8d:33:1c:b8:4d:68:7f:68:a5:5a: 8f:26:c0:f7:e2:f0:b3:1e:7b:8a:e1:fa:a2:54:d6:06:fe:fc: d9:f1:d7:b7:eb:f0:4b:02:ce:1c:d8:41:4f:96:9a:64:36:01: d8:ac:3a:c5:8a:4f:42:6e:32:90:39:40:d4:13:62:6f:a1:df: 7e:38:85:36:d5:1b:a4:3b:09:82:42:af:c0:97:fb:39:67:f6: 9a:fe:35:6f:df:97:61:cf:94:83:fb:11:97:73:99:e3:3e:2a: 1d:cc:25:ca:51:43:68:62:69:08:c7:51:18:62:0b:aa:76:e9: 88:a1:4b:76:82:64:15:3f:4e:6e:34:59:ad:78:13:40:d3:fc: b6:84:0d:51:93:f2:4e:ab:7c:70:e5:b3:0a:64:7d:eb:4c:29: 36:ad:74:6f:d2:34:a6:58:da:dc:94:b0:a1:d9:e8:01:24:bb: 08:82:18:2d:48:49:33:e1:cd:39:e3:ee:9c:aa:58:b0:89:c9: 5c:c3:ea:cb:35:e2:fc:cf:f3:af:2c:86:86:14:b6:f1:f5:dd: d5:a1:d4:8c:f9:c4:2e:02:89:1c:2b:6a:fc:fb:26:20:4b:e3: e0:05:56:8f:7d:70:ba:59:d3:a7:df:18:72:33:c2:f9:61:05: f7:8a:7f:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJOnzwSSypdZ66kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk OTkxYjNlMDEtYWM3Yy00NjU5LTk5NzMtYzM2MDFiZGRmMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL6pXD3GX1HS49FR4xkP037DtS6h3NuAoFpI UhQ5NW7eCjbe7emuPn3AjDL1Q7MjuIZLx5XOvXhjMc6yhvdz1RVhwMpQYA/IPQ+0 19uMqW7n1WR3OkyWrjPEnEZpdmLxwFYXV0JpMb6yJaXA6ZIiJOKjQwXalXcurqJX a2rSybMciG25YoCjc6Elx1bciAo4gJlgD554OyW3e0gosGr83MWesnSmCo5H/3SH d+PtemvBJh8RS5YNNyd+H5FxOx7QqDmlx3UPunGj1M5xD5fDIUazfUWfkSgxcVBB WIKTQyfheRhkDgt/4k+QOnc80Xk5kRW1u/88057IHN7CF/C5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyYZozFKKu9krkMwOMxFZvZgeyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvODY0ZTg4ZjAtMjc1Ny0z NDlkLThlNzItNzM5YzJhYTY0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwGd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5KWIhZQ1uNjTMcuE1of2ilWo8mwPfi8LMee4rh+qJU1gb+/Nnx17fr 8EsCzhzYQU+WmmQ2AdisOsWKT0JuMpA5QNQTYm+h3344hTbVG6Q7CYJCr8CX+zln 9pr+NW/fl2HPlIP7EZdzmeM+Kh3MJcpRQ2hiaQjHURhiC6p26YihS3aCZBU/Tm40 Wa14E0DT/LaEDVGT8k6rfHDlswpkfetMKTatdG/SNKZY2tyUsKHZ6AEkuwiCGC1I STPhzTnj7pyqWLCJyVzD6ss14vzP868shoYUtvH13dWh1Iz5xC4CiRwravz7JiBL 4+AFVo99cLpZ06ffGHIzwvlhBfeKf/g= -----END CERTIFICATE-----Generated at Fri Jul 24 22:40:45 2026 by rpki-client