$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa File: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (raw, json) Hash identifier: iJIfzL2ny5reAp+To9hDa3Npz22M85cmdP7YkL7l+hk= Subject key identifier: 9F:75:43:05:44:39:69:7B:E4:68:7B:E2:8A:23:75:B7:E6:26:C3:8E Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Certificate serial: 010D0C9F4328584E89BF91AF364C835453AA77C0 Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 14497 IP address blocks: 199.168.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:91:af:36:4c:83:54:53:aa:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=50d2e246-954d-4a82-9b23-f91cba7085bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:26:15:2b:f3:46:66:b3:55:d4:31:ba:fa: 5f:03:44:53:46:ea:3f:6f:5a:2a:d2:11:2f:9f:c8: 87:f1:36:bc:67:c1:09:3b:87:02:67:f7:4e:bb:28: c3:02:86:d1:cf:59:82:4a:2c:fb:f8:c5:e0:50:4f: 4b:cf:ec:0c:74:70:14:19:83:18:1c:f8:7a:61:dd: 8e:c8:f2:36:1b:0d:a6:a4:96:57:a0:5c:93:16:0b: df:0a:8d:4d:14:7a:f6:7e:e9:a2:80:ea:ca:78:39: ba:a1:ce:4b:63:09:19:3d:60:43:02:d5:88:1b:1f: 45:ba:d7:ad:cb:38:f4:bf:51:4a:b0:47:dc:07:fe: 57:c0:ca:32:9f:00:da:5a:11:7e:a3:17:03:1c:33: 3d:60:a3:b3:c6:fe:86:24:01:ce:2a:0a:4e:8a:f6: 07:91:26:f6:fd:2b:4d:1b:86:d3:88:3d:65:0d:4e: 06:46:e9:b1:38:ae:d5:f8:38:5c:4f:54:2a:05:7a: ce:7c:0c:ce:1c:ba:14:e8:e2:43:0d:06:fd:2e:1f: ff:8b:20:fd:e1:d8:0d:d6:d5:6c:01:ac:9f:a5:ae: 90:b9:98:cc:02:d4:63:d5:91:57:50:3b:b8:8c:27: 30:9f:93:79:c6:43:d7:82:ab:65:45:72:e5:b7:1e: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:75:43:05:44:39:69:7B:E4:68:7B:E2:8A:23:75:B7:E6:26:C3:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl X509v3 Authority Key Identifier: keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer sbgp-ipAddrBlock: critical IPv4: 199.168.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:23:1d:ff:3f:bf:17:23:b6:ae:d3:8a:6f:3e:0f:c4:4d:d1: 7d:db:8a:89:de:00:12:f9:e8:91:0c:93:0a:1d:87:4e:2b:aa: c3:a1:12:f4:51:0a:37:75:ad:11:76:70:5e:77:59:64:be:86: db:ff:f5:24:85:2b:77:ff:eb:dd:cc:b0:06:a7:c7:f4:1a:4d: 8b:99:a4:48:52:9e:77:ac:d3:c1:e0:d9:58:3a:0a:85:f3:4e: 6b:0c:f1:d4:07:18:a9:54:d0:9d:9b:6e:27:66:24:25:9e:b0: 90:b3:69:81:be:3c:65:07:65:f5:39:b2:1a:2e:eb:b7:a0:97: 35:b6:3d:c7:c6:5b:dc:0d:42:4b:8c:10:a2:71:d3:d0:1f:04: 32:9d:2d:8e:49:83:0b:99:fb:8f:15:8d:fb:08:f8:fd:2a:c1: 4c:10:0a:67:eb:50:7f:c4:a4:04:77:08:d3:b5:bd:4a:9e:71: 30:2c:6e:8a:39:9d:c0:f8:ae:cb:60:93:e2:cb:93:48:30:10: 35:8f:a8:31:8b:ae:7c:83:e2:6a:eb:c7:66:cc:b2:34:2f:a2: 5f:28:75:55:73:58:2a:c6:e2:88:3d:38:dd:38:d2:be:c6:48: 06:a8:34:e5:36:4d:96:8c:2d:8b:ae:24:50:7e:3d:3c:34:13: e2:1b:fd:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Jv5GvNkyDVFOqd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl MDg3MB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk NTBkMmUyNDYtOTU0ZC00YTgyLTliMjMtZjkxY2JhNzA4NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1AmFSvzRmazVdQxuvpfA0RTRuo/b1oq0hEv n8iH8Ta8Z8EJO4cCZ/dOuyjDAobRz1mCSiz7+MXgUE9Lz+wMdHAUGYMYHPh6Yd2O yPI2Gw2mpJZXoFyTFgvfCo1NFHr2fumigOrKeDm6oc5LYwkZPWBDAtWIGx9Futet yzj0v1FKsEfcB/5XwMoynwDaWhF+oxcDHDM9YKOzxv6GJAHOKgpOivYHkSb2/StN G4bTiD1lDU4GRumxOK7V+DhcT1QqBXrOfAzOHLoU6OJDDQb9Lh//iyD94dgN1tVs Aayfpa6QuZjMAtRj1ZFXUDu4jCcwn5N5xkPXgqtlRXLltx6YmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ91QwVEOWl75Gh74oojdbfmJsOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvOWZkODEwODYtZDJhYi0z YjY5LTg3M2YtYzA0M2Q1ZjExMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0 ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj Y2M4NGUwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6gcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEjHf8/vxcjtq7Tim8+D8RN0X3bioneABL56JEMkwodh04rqsOhEvRR Cjd1rRF2cF53WWS+htv/9SSFK3f/693MsAanx/QaTYuZpEhSnnes08Hg2Vg6CoXz TmsM8dQHGKlU0J2bbidmJCWesJCzaYG+PGUHZfU5shou67eglzW2PcfGW9wNQkuM EKJx09AfBDKdLY5JgwuZ+48VjfsI+P0qwUwQCmfrUH/EpAR3CNO1vUqecTAsboo5 ncD4rstgk+LLk0gwEDWPqDGLrnyD4mrrx2bMsjQvol8odVVzWCrG4og9ON040r7G SAaoNOU2TZaMLYuuJFB+PTw0E+Ib/ZU= -----END CERTIFICATE-----Generated at Fri Jul 24 09:06:36 2026 by rpki-client