$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/26a9dbba-6e61-3927-90ec-9a05cf5ced9d.roa File: 26a9dbba-6e61-3927-90ec-9a05cf5ced9d.roa (raw, json) Hash identifier: 7QwcyS8giKoZUQXXzIMft9m2xR74Y27LpdM7RyzzBb4= Subject key identifier: A9:28:51:7F:D3:33:3F:7A:97:9B:E6:B7:6F:0E:DE:28:D2:E7:53:7E Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584E9384F96BF3385D4EB97FBCC0 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/26a9dbba-6e61-3927-90ec-9a05cf5ced9d.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 3356 IP address blocks: 199.230.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f9:6b:f3:38:5d:4e:b9:7f:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=9b0b5e2a-7d8d-4231-8b88-1c980ddfbdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:ba:37:7d:a7:72:13:bd:70:ae:5a:af:ea: 8f:f6:9c:03:c1:fd:d9:b8:01:e9:9d:bf:7e:23:52: 5c:51:06:44:7d:6e:eb:1c:f6:79:1c:f7:6f:32:ef: fa:09:ca:c1:81:97:63:c9:f2:fe:b4:b7:a0:51:f6: 57:5c:ee:02:dc:95:c6:b2:b4:a0:01:23:e7:c6:8f: a9:29:b0:c3:7d:3b:e6:38:86:29:d3:81:12:d4:81: 60:7b:04:0c:4f:2d:8b:01:9e:f6:43:c3:4a:3c:2b: 52:0a:71:09:17:9d:39:21:ff:61:94:36:8f:95:de: c2:11:18:7c:82:c8:7b:9c:15:0c:b9:ee:a0:eb:6e: 96:0c:0a:67:ef:4e:41:84:80:52:06:5c:ce:ec:91: 7e:79:02:0a:dd:82:12:9c:f5:7d:32:56:05:f3:ef: 9c:21:a7:7d:b9:73:50:5f:00:a8:79:9d:d5:13:2b: 9b:92:7a:b0:91:39:91:7a:b5:ff:ea:4a:b8:6d:35: 0a:b6:9d:53:69:41:c9:66:2d:ea:e0:02:6a:e2:86: 4a:12:89:0f:53:f5:19:37:ce:b7:8b:60:85:dc:92: 33:44:3e:c7:97:bf:a8:b1:90:df:90:1e:76:ea:c3: 73:35:a4:e7:11:ba:e1:14:aa:b8:90:da:2a:f0:06: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:28:51:7F:D3:33:3F:7A:97:9B:E6:B7:6F:0E:DE:28:D2:E7:53:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/26a9dbba-6e61-3927-90ec-9a05cf5ced9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv4: 199.230.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:20:9b:89:86:19:b7:c6:5c:c3:13:41:3c:6d:12:a3:53:64: 64:1e:ec:13:d9:c1:6e:be:97:62:76:38:97:ac:72:ed:96:0b: 99:4c:93:a2:6f:d3:84:76:42:ec:d2:b3:c4:02:a6:78:da:1b: b3:81:70:76:b7:36:d6:c3:9c:5f:9e:89:de:06:84:9c:0e:a1: c5:62:16:dd:f8:d8:96:c3:3c:b4:9f:ab:19:5b:a6:e6:27:18: 92:9d:be:bb:51:2f:5d:19:36:17:54:9e:53:42:e7:e6:07:ca: d1:46:e2:dd:33:79:fa:4d:d8:b6:4d:44:cb:59:23:b2:01:f9: 85:6b:fb:28:d7:96:31:40:73:e1:e1:3b:6d:48:7b:69:ac:62: f7:97:95:7e:77:86:cc:a8:d6:b8:7a:34:5d:cf:29:ca:80:57: fe:43:ee:aa:4a:cc:4a:31:34:e7:e7:72:66:ae:63:88:f8:59: 3c:d1:c9:0a:b1:4a:e0:3c:a9:ba:5f:da:c2:44:30:0f:7d:62: d0:a2:dc:1b:9a:72:20:3f:21:10:c3:40:f4:f7:7e:c1:fb:63: 67:6f:f0:a2:6d:da:a8:7f:c0:03:d9:cf:95:c4:24:f3:ba:34: 58:ff:8a:5a:c6:62:4d:b6:8b:e3:cd:96:ca:d4:04:8b:e0:b5: 0b:50:61:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPlr8zhdTrl/vMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk OWIwYjVlMmEtN2Q4ZC00MjMxLThiODgtMWM5ODBkZGZiZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fC6N32nchO9cK5ar+qP9pwDwf3ZuAHpnb9+ I1JcUQZEfW7rHPZ5HPdvMu/6CcrBgZdjyfL+tLegUfZXXO4C3JXGsrSgASPnxo+p KbDDfTvmOIYp04ES1IFgewQMTy2LAZ72Q8NKPCtSCnEJF505If9hlDaPld7CERh8 gsh7nBUMue6g626WDApn705BhIBSBlzO7JF+eQIK3YISnPV9MlYF8++cIad9uXNQ XwCoeZ3VEyubknqwkTmRerX/6kq4bTUKtp1TaUHJZi3q4AJq4oZKEokPU/UZN863 i2CF3JIzRD7Hl7+osZDfkB526sNzNaTnEbrhFKq4kNoq8AZl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkoUX/TMz96l5vmt28O3ijS51N+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvMjZhOWRiYmEtNmU2MS0z OTI3LTkwZWMtOWEwNWNmNWNlZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHx+aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYgm4mGGbfGXMMTQTxtEqNTZGQe7BPZwW6+l2J2OJescu2WC5lMk6Jv 04R2QuzSs8QCpnjaG7OBcHa3NtbDnF+eid4GhJwOocViFt342JbDPLSfqxlbpuYn GJKdvrtRL10ZNhdUnlNC5+YHytFG4t0zefpN2LZNRMtZI7IB+YVr+yjXljFAc+Hh O21Ie2msYveXlX53hsyo1rh6NF3PKcqAV/5D7qpKzEoxNOfncmauY4j4WTzRyQqx SuA8qbpf2sJEMA99YtCi3BuaciA/IRDDQPT3fsH7Y2dv8KJt2qh/wAPZz5XEJPO6 NFj/ilrGYk22i+PNlsrUBIvgtQtQYaw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:09:09 2026 by rpki-client