$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa File: dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa (raw, json) Hash identifier: zgOpibj2bN2XuOWxIj/S8dX95YZT/kr7TGrqePXLm8k= Subject key identifier: 65:2C:49:97:EB:6A:87:38:42:30:D5:3D:CB:92:B9:1C:89:81:A7:EA Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584E640F78CC573D74BCB1B5D800 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 17055 IP address blocks: 204.99.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:78:cc:57:3d:74:bc:b1:b5:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=28317f3f-50cb-4bbc-b741-486b110feb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:bb:fd:7f:3c:06:76:0c:c2:91:3d:98:f9: 17:3f:26:b0:99:8d:8d:95:83:ea:ae:59:8a:7b:af: 2f:0d:a2:eb:ae:aa:5b:12:ed:72:93:d5:4c:70:80: a2:5a:42:4b:d0:c3:41:6d:8b:7a:80:db:b8:be:a1: ab:aa:2c:87:04:bd:e4:92:b4:37:d8:7d:fc:0c:3a: d0:a6:7c:9e:2d:dc:f3:e5:94:c6:ad:2c:68:17:b3: ba:8c:9b:34:a5:3b:59:b8:01:d7:4b:f9:84:a6:15: 40:84:8a:66:f8:f2:57:30:b8:ba:63:47:20:d0:f9: 04:a7:c3:22:e6:e2:2a:21:2a:ac:14:80:ed:c8:66: 57:1e:99:d1:a7:5d:b5:1b:64:48:38:92:6a:81:94: ab:5b:f4:e5:8b:92:88:41:7f:79:a6:18:43:0f:1d: 91:38:cd:2f:dc:9e:a4:df:a1:b0:2a:74:78:49:e2: 1d:f7:c9:de:e9:d9:06:da:01:bb:e4:01:42:d1:0c: cb:dd:b6:54:75:41:a4:eb:ce:3d:d0:66:bd:2e:bc: 1f:66:03:61:a2:5a:18:d5:aa:af:7e:2e:43:06:d3: 5b:32:20:b0:55:ec:8c:07:02:70:cd:b8:69:0c:d0: 2b:f9:26:85:71:29:e8:df:85:6e:d0:90:9b:89:9a: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:49:97:EB:6A:87:38:42:30:D5:3D:CB:92:B9:1C:89:81:A7:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 204.99.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ba:70:c8:33:66:60:2e:11:50:74:8d:b3:c9:95:89:6d:3d: bb:cd:68:c5:fe:97:a2:ed:26:27:03:c1:f4:7b:1b:ac:65:b6: 4c:e4:bf:38:21:4d:6d:78:58:2b:bc:dd:94:de:9d:e5:2c:52: 79:e4:99:26:45:ce:29:d9:a0:ff:29:71:90:5f:aa:64:27:ab: 97:61:0f:7e:16:56:73:29:15:2e:74:e6:03:d5:9d:c2:02:01: 5e:91:33:95:b5:12:44:e8:d1:8e:76:da:50:ba:8f:9d:15:b5: 01:9b:68:61:a9:a9:ac:17:de:b0:9b:87:2e:d3:37:42:56:66: 3d:b6:29:5b:ee:ee:e0:02:56:f5:80:3e:83:ac:02:10:eb:a6: 0e:b8:92:4a:1a:58:78:45:0f:8f:c0:51:9c:b1:20:86:8f:3d: 42:eb:0e:85:d0:41:28:61:19:62:24:b2:52:57:d8:0a:02:6f: fc:31:b0:86:ee:0e:41:89:c6:a4:18:2d:e8:07:c6:c9:ea:89: 7d:ea:09:1d:53:53:5c:2d:0f:11:cc:b3:5b:ad:fc:8c:37:c8: b3:4b:8a:2a:ec:75:7f:a1:5a:7c:27:f1:bf:39:84:48:ef:43: 87:bd:b8:a6:96:63:e2:4f:aa:25:a3:dd:bc:69:43:07:b2:d3: a4:f7:db:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD3jMVz10vLG12AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MjgzMTdmM2YtNTBjYi00YmJjLWI3NDEtNDg2YjExMGZlYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TK7/X88BnYMwpE9mPkXPyawmY2NlYPqrlmK e68vDaLrrqpbEu1yk9VMcICiWkJL0MNBbYt6gNu4vqGrqiyHBL3kkrQ32H38DDrQ pnyeLdzz5ZTGrSxoF7O6jJs0pTtZuAHXS/mEphVAhIpm+PJXMLi6Y0cg0PkEp8Mi 5uIqISqsFIDtyGZXHpnRp121G2RIOJJqgZSrW/Tli5KIQX95phhDDx2ROM0v3J6k 36GwKnR4SeId98ne6dkG2gG75AFC0QzL3bZUdUGk68490Ga9LrwfZgNholoY1aqv fi5DBtNbMiCwVeyMBwJwzbhpDNAr+SaFcSno34Vu0JCbiZqVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUsSZfraoc4QjDVPcuSuRyJgafqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvZGZiODlkMzYtZTgzMS0z ZmNlLWFhZTAtY2ZmMzg0MmExYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG6cMgzZmAuEVB0jbPJlYltPbvNaMX+l6LtJicDwfR7G6xltkzkvzgh TW14WCu83ZTeneUsUnnkmSZFzinZoP8pcZBfqmQnq5dhD34WVnMpFS505gPVncIC AV6RM5W1EkTo0Y522lC6j50VtQGbaGGpqawX3rCbhy7TN0JWZj22KVvu7uACVvWA PoOsAhDrpg64kkoaWHhFD4/AUZyxIIaPPULrDoXQQShhGWIkslJX2AoCb/wxsIbu DkGJxqQYLegHxsnqiX3qCR1TU1wtDxHMs1ut/Iw3yLNLiirsdX+hWnwn8b85hEjv Q4e9uKaWY+JPqiWj3bxpQwey06T32/E= -----END CERTIFICATE-----Generated at Fri Jul 24 18:40:55 2026 by rpki-client