$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa File: 7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa (raw, json) Hash identifier: wWneMbjtXHstmhnXdk+JtnJ7D5FP2Tb4zJa7WXvvBSE= Subject key identifier: 98:66:EC:CD:90:25:1B:86:CE:9A:25:93:0B:6D:85:FC:99:11:6C:72 Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584E640F73D40727B621340ACC80 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 125 IP address blocks: 199.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:73:d4:07:27:b6:21:34:0a:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=dbafbee9-e993-45d6-a47c-9b80b5cd410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:88:da:51:5e:90:27:57:05:5f:33:c7:1c: f1:60:14:ce:0e:bc:1b:86:a7:d7:a7:94:17:75:19: fb:07:bb:f5:05:bf:77:fb:d8:20:68:bc:e1:56:8d: b2:3d:1a:3f:f6:e5:55:ed:97:0d:a9:b6:5a:bf:9a: 4a:4a:bb:00:85:13:8e:e6:84:86:65:6c:bb:6c:06: 2d:12:e9:08:4a:2b:f9:2d:4e:1a:92:94:dc:bb:7e: ae:3d:92:09:9a:62:98:ea:eb:2d:30:39:2a:b3:f8: bb:77:0b:c5:54:a8:43:fa:b8:2a:83:66:62:c2:21: 4f:58:a8:5a:b4:0a:11:45:bd:62:ee:12:48:51:9c: 1e:e6:2b:49:73:a3:96:84:32:a5:41:69:b7:a0:1f: 7c:6c:38:72:79:e0:58:25:98:0f:3c:ee:1f:04:92: 13:e9:78:d5:ee:92:15:6c:c2:86:87:78:64:22:ac: 67:bb:32:c9:0e:85:9e:6c:45:f9:3e:ab:94:71:5a: 2f:df:40:ad:47:3f:f3:e7:15:53:e1:73:23:cc:29: a6:51:de:71:50:f5:7f:0c:44:84:4d:16:91:05:5b: cc:48:bc:38:76:dd:f6:cf:a6:74:e4:5c:2b:69:e5: cb:c2:98:b8:42:11:4d:22:fe:13:8c:b4:af:80:68: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:66:EC:CD:90:25:1B:86:CE:9A:25:93:0B:6D:85:FC:99:11:6C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7d010d70-9e3e-3e5c-8465-11e63242f7c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c8:f5:1c:a1:85:e6:18:60:76:d1:b9:3a:7e:11:d6:8c:91: 77:4e:83:c4:a8:3d:5a:b1:9f:8a:76:c2:5d:00:5d:b3:d7:87: 65:4e:dd:42:a9:2b:d6:f9:c4:db:5e:65:2e:19:51:af:57:e2: b1:59:4b:59:ac:5e:b5:0c:97:e7:77:0f:00:ad:2b:92:66:ac: 26:0f:ee:3e:8d:c8:f4:c2:a9:0d:2b:48:d4:6b:04:11:da:cb: 0e:5d:3d:23:da:1f:0d:67:40:f5:2f:b0:dc:f8:85:ed:68:5d: a6:53:3e:dd:ad:91:2c:9c:f3:44:87:06:87:f9:e1:7e:f6:e3: e8:4e:50:d0:7e:d1:8d:04:79:82:de:89:77:1c:02:2f:c0:46: 36:5e:be:82:85:15:0e:82:9c:3d:dd:6e:d0:c2:3a:93:f3:48: 7f:e5:cd:21:b6:b1:f7:8c:66:05:11:2a:ef:68:22:60:6e:d5: b5:c7:77:3e:6c:cd:05:67:89:4f:15:ad:dd:cd:08:4d:d8:79: f8:66:c6:e9:00:e8:ef:f3:98:b9:19:a9:de:eb:7c:4a:38:dd: 33:19:fa:b6:8f:db:07:60:eb:2b:51:f1:93:07:cc:98:57:2e: 15:3d:20:2e:b1:73:2c:4d:04:52:c8:74:fe:ab:78:9c:11:a0: 82:90:36:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD3PUBye2ITQKzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZGJhZmJlZTktZTk5My00NWQ2LWE0N2MtOWI4MGI1Y2Q0MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTmI2lFekCdXBV8zxxzxYBTODrwbhqfXp5QX dRn7B7v1Bb93+9ggaLzhVo2yPRo/9uVV7ZcNqbZav5pKSrsAhROO5oSGZWy7bAYt EukISiv5LU4akpTcu36uPZIJmmKY6ustMDkqs/i7dwvFVKhD+rgqg2ZiwiFPWKha tAoRRb1i7hJIUZwe5itJc6OWhDKlQWm3oB98bDhyeeBYJZgPPO4fBJIT6XjV7pIV bMKGh3hkIqxnuzLJDoWebEX5PquUcVov30CtRz/z5xVT4XMjzCmmUd5xUPV/DESE TRaRBVvMSLw4dt32z6Z05FwraeXLwpi4QhFNIv4TjLSvgGgFZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhm7M2QJRuGzpolkwtthfyZEWxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvN2QwMTBkNzAtOWUzZS0z ZTVjLTg0NjUtMTFlNjMyNDJmN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0AJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHI9RyhheYYYHbRuTp+EdaMkXdOg8SoPVqxn4p2wl0AXbPXh2VO3UKp K9b5xNteZS4ZUa9X4rFZS1msXrUMl+d3DwCtK5JmrCYP7j6NyPTCqQ0rSNRrBBHa yw5dPSPaHw1nQPUvsNz4he1oXaZTPt2tkSyc80SHBof54X724+hOUNB+0Y0EeYLe iXccAi/ARjZevoKFFQ6CnD3dbtDCOpPzSH/lzSG2sfeMZgURKu9oImBu1bXHdz5s zQVniU8Vrd3NCE3YefhmxukA6O/zmLkZqd7rfEo43TMZ+raP2wdg6ytR8ZMHzJhX LhU9IC6xcyxNBFLIdP6reJwRoIKQNiA= -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:27 2026 by rpki-client