$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa File: 02d90035-da81-3e67-96c7-9feeef8b261e.roa (raw, json) Hash identifier: eam0RJr9eZyutgL7TAVcTJ/at1czgkLmw9O8IIO9lm0= Subject key identifier: 6C:DE:55:91:E8:CA:86:67:93:8B:8A:BE:EB:56:3E:C1:3D:D9:61:A1 Certificate issuer: /CN=45657d9f-043b-4838-9072-ef0906bb567e Certificate serial: 010D0C9F4328584E640F61AC0C1CE09D3E260280 Authority key identifier: D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 16652 IP address blocks: 199.254.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:61:ac:0c:1c:e0:9d:3e:26:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45657d9f-043b-4838-9072-ef0906bb567e Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=078a5276-0345-45b5-8afb-51b3ad3f0cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fc:a9:e9:2f:92:51:0c:b4:ea:30:db:5f:d9: f5:91:b1:de:b2:d0:26:7d:db:6a:99:de:d5:0a:ca: 24:c8:55:5b:e8:76:19:2f:b2:4d:11:6d:19:f5:9d: 7c:5c:9e:39:0a:5d:70:bf:19:78:ba:eb:0f:76:2d: 6d:ae:4b:24:cf:b3:2f:bd:16:ab:08:8f:89:ac:75: cc:8d:be:ed:a8:c7:dd:a2:ff:eb:6c:ab:e9:92:e7: 8c:78:88:06:6a:5f:65:df:5c:28:36:0c:1e:a8:2b: 48:c2:ab:99:46:22:47:fd:81:81:81:08:35:47:42: e1:b2:74:9a:cc:83:38:5a:91:83:37:ff:04:eb:78: 6d:75:f6:53:1d:6c:de:df:83:07:04:81:91:9a:f9: db:3c:55:0a:1b:2e:38:17:d7:ae:21:a5:91:59:28: 5c:da:65:5a:09:eb:05:1d:ec:26:5a:a8:6b:82:33: fc:1a:e8:06:ee:c1:de:76:10:12:c5:eb:a4:3b:28: 2e:7a:fb:40:8c:76:43:75:3b:2b:8e:17:2f:e1:25: a2:35:93:8f:7b:87:9c:83:a0:3b:e5:c2:f6:3c:77: 94:11:f3:30:61:b7:98:53:0d:66:72:b7:f3:d9:6b: 38:55:38:01:73:37:40:dd:d5:de:95:45:54:c1:7d: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DE:55:91:E8:CA:86:67:93:8B:8A:BE:EB:56:3E:C1:3D:D9:61:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl X509v3 Authority Key Identifier: keyid:D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer sbgp-ipAddrBlock: critical IPv4: 199.254.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:98:47:06:9e:63:df:7e:59:98:31:35:d2:58:ab:15:26:c1: c7:0f:72:95:59:56:70:04:af:0a:1e:85:3f:90:16:61:64:6b: d1:9e:f3:e8:4a:bf:96:ed:cb:5c:12:16:98:30:4a:a5:d3:a1: 95:a9:7f:8d:d0:5a:47:e4:e0:99:51:dc:ed:ee:69:60:07:ae: c6:0c:5b:22:4e:58:fc:1b:74:23:4c:23:ae:ed:70:82:c4:e8: b5:07:08:d3:6c:cc:f6:c1:3e:25:cd:74:1c:ce:c4:86:ca:73: 1b:76:08:fe:49:e3:7d:e1:6f:b9:fd:c8:c6:32:16:5c:33:0d: 9e:83:25:47:ec:87:31:1b:6b:df:94:19:e7:ca:c8:b1:2f:37: c0:d6:11:fc:d3:8b:5c:d6:9a:b3:ba:bd:9c:9f:2b:59:5e:53: 8e:bf:de:a1:b5:c6:de:d3:e6:45:71:38:71:d9:b5:aa:11:38: 3d:30:29:a9:22:83:47:c6:78:82:18:1e:d7:7b:dc:fc:62:44: 7e:03:be:39:6c:99:86:6f:d4:3a:30:b9:be:ed:fc:fd:84:5c: 72:4d:3c:ba:21:29:12:01:34:d8:e5:5c:a9:d6:b9:7b:b3:ca: f2:5b:9d:65:bb:a8:41:5f:df:72:fc:e2:94:eb:b1:75:bb:b8: 3f:69:01:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2GsDBzgnT4mAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU2NTdkOWYtMDQzYi00ODM4LTkwNzItZWYwOTA2YmI1 NjdlMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MDc4YTUyNzYtMDM0NS00NWI1LThhZmItNTFiM2FkM2YwY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Pyp6S+SUQy06jDbX9n1kbHestAmfdtqmd7V CsokyFVb6HYZL7JNEW0Z9Z18XJ45Cl1wvxl4uusPdi1trkskz7MvvRarCI+JrHXM jb7tqMfdov/rbKvpkueMeIgGal9l31woNgweqCtIwquZRiJH/YGBgQg1R0LhsnSa zIM4WpGDN/8E63htdfZTHWze34MHBIGRmvnbPFUKGy44F9euIaWRWShc2mVaCesF HewmWqhrgjP8GugG7sHedhASxeukOyguevtAjHZDdTsrjhcv4SWiNZOPe4ecg6A7 5cL2PHeUEfMwYbeYUw1mcrfz2Ws4VTgBczdA3dXelUVUwX0mYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzeVZHoyoZnk4uKvutWPsE92WGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1 N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5MDZiYjU2N2UvMDJkOTAwMzUtZGE4MS0z ZTY3LTk2YzctOWZlZWVmOGIyNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU2NTdkOWYtMDQzYi00ODM4LTkw NzItZWYwOTA2YmI1NjdlLzQ1NjU3ZDlmLTA0M2ItNDgzOC05MDcyLWVmMDkwNmJi NTY3ZS5jcmwwHwYDVR0jBBgwFoAU2DW1wULrkV8G+8OZMWXoQiRj7mAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NTY1N2Q5Zi0wNDNiLTQ4MzgtOTA3Mi1lZjA5 MDZiYjU2N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeYRwaeY99+WZgxNdJYqxUmwccPcpVZVnAErwoehT+QFmFka9Ge8+hK v5bty1wSFpgwSqXToZWpf43QWkfk4JlR3O3uaWAHrsYMWyJOWPwbdCNMI67tcILE 6LUHCNNszPbBPiXNdBzOxIbKcxt2CP5J433hb7n9yMYyFlwzDZ6DJUfshzEba9+U GefKyLEvN8DWEfzTi1zWmrO6vZyfK1leU46/3qG1xt7T5kVxOHHZtaoROD0wKaki g0fGeIIYHtd73PxiRH4DvjlsmYZv1Dowub7t/P2EXHJNPLohKRIBNNjlXKnWuXuz yvJbnWW7qEFf33L84pTrsXW7uD9pAXQ= -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:44 2026 by rpki-client