$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json) Hash identifier: L2YZd0AodBFaBBAaDBvRF84+H37uIjvHW1x3ogcS7U4= Subject key identifier: 15:8D:BE:6C:13:67:E7:02:F8:17:7C:B9:ED:72:B2:AA:D3:D0:D7:71 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F4328584E7634DC41984E2FBCF179D160 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 8987 IP address blocks: 198.38.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:dc:41:98:4e:2f:bc:f1:79:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=d8affad8-0b5a-4ed6-8b46-0ce75440532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:13:f2:c8:9a:94:35:b9:4b:38:89:5e:55:78: 3f:7b:48:44:6f:b1:1e:f8:27:6f:36:12:3b:24:25: f4:c4:52:ca:78:8d:d1:05:e4:ba:d2:1d:b9:45:95: 3e:50:41:ad:c3:34:9a:97:8d:c9:af:e4:34:6c:64: f5:8a:5f:36:08:05:28:38:ab:d4:4d:15:2e:73:22: 8d:22:14:b4:8a:62:26:bf:e5:02:2e:b1:7e:cb:18: dc:45:c2:8b:2c:ff:98:da:e8:b6:40:c5:62:7d:53: b9:3a:49:63:26:02:81:92:dc:d1:14:21:91:09:d8: 1e:13:30:b6:c4:77:f7:01:64:69:1b:6b:af:a2:0b: 1b:62:00:00:2b:c3:51:b0:ef:ce:37:e0:08:22:2d: b7:15:04:3a:4a:01:1c:6c:66:58:a2:fa:b1:80:5b: df:e7:a4:5d:97:ad:6e:fa:85:41:12:5e:5e:61:e0: 95:09:71:b9:05:5c:be:d6:88:04:7e:02:99:70:16: 08:09:75:1c:a7:68:72:1c:cf:a3:3b:76:df:7b:82: 5d:24:e4:ce:a8:ca:c0:0b:ab:6c:7b:23:0d:08:80: 0b:83:3a:b3:60:6e:41:43:10:25:9d:e9:a6:99:c7: 1a:a0:69:4b:86:10:7c:ef:71:40:d0:95:56:2a:90: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8D:BE:6C:13:67:E7:02:F8:17:7C:B9:ED:72:B2:AA:D3:D0:D7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: 198.38.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f0:57:d2:c6:fc:8e:99:95:9c:ea:ee:e8:2b:92:03:c1:c0: 99:6e:d5:11:d7:4e:1b:c4:f5:64:51:6d:b4:f2:41:77:e9:fa: 44:af:8f:7e:3f:71:e6:19:67:b8:38:67:9a:66:1f:3e:80:71: d0:ac:21:3a:27:78:a4:0c:91:2c:65:9f:14:1b:0b:72:17:0a: a1:7e:66:0a:27:98:99:fe:59:9e:f8:f0:7c:e4:43:aa:af:ee: 9e:0c:40:9b:3b:48:ff:06:ff:b8:7d:d5:27:0a:c0:6e:b4:54: 7e:4d:cd:8a:82:31:3e:30:d2:30:e5:90:4d:93:51:93:df:79: 96:64:3c:28:ca:ad:e3:9d:a0:6c:f6:91:8b:8e:4a:e2:77:39: 57:7a:93:df:9c:d2:dc:9c:66:2b:4a:8b:1c:61:b7:a8:0a:b8: 85:20:05:17:98:5b:3c:82:1b:bb:b4:e0:fb:7d:55:ec:bf:2f: 1e:15:45:f4:84:95:2f:70:d4:d6:a4:fb:ad:d3:a6:ba:13:9d: 29:b9:99:85:4f:dc:e8:05:91:7c:b2:38:ae:b5:dd:ea:e6:54: 81:cb:dc:74:e6:b9:70:2f:1a:53:32:ff:dd:61:50:0d:43:0d: eb:0d:a9:8e:12:c2:ff:04:c3:64:ba:6b:55:0c:35:ef:9e:2f: 67:6e:a1:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNxBmE4vvPF50WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDhhZmZhZDgtMGI1YS00ZWQ2LThiNDYtMGNlNzU0NDA1MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBPyyJqUNblLOIleVXg/e0hEb7Ee+CdvNhI7 JCX0xFLKeI3RBeS60h25RZU+UEGtwzSal43Jr+Q0bGT1il82CAUoOKvUTRUucyKN IhS0imImv+UCLrF+yxjcRcKLLP+Y2ui2QMVifVO5OkljJgKBktzRFCGRCdgeEzC2 xHf3AWRpG2uvogsbYgAAK8NRsO/ON+AIIi23FQQ6SgEcbGZYovqxgFvf56Rdl61u +oVBEl5eYeCVCXG5BVy+1ogEfgKZcBYICXUcp2hyHM+jO3bfe4JdJOTOqMrAC6ts eyMNCIALgzqzYG5BQxAlnemmmccaoGlLhhB873FA0JVWKpCkOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWNvmwTZ+cC+Bd8ue1ysqrT0NdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvMTlhYThlMDItYjlkOC0z NTNmLWI2NjEtNGRiZjRlNzNjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDwV9LG/I6ZlZzq7ugrkgPBwJlu1RHXThvE9WRRbbTyQXfp+kSvj34/ ceYZZ7g4Z5pmHz6AcdCsIToneKQMkSxlnxQbC3IXCqF+ZgonmJn+WZ748HzkQ6qv 7p4MQJs7SP8G/7h91ScKwG60VH5NzYqCMT4w0jDlkE2TUZPfeZZkPCjKreOdoGz2 kYuOSuJ3OVd6k9+c0tycZitKixxht6gKuIUgBReYWzyCG7u04Pt9Vey/Lx4VRfSE lS9w1Nak+63TproTnSm5mYVP3OgFkXyyOK613ermVIHL3HTmuXAvGlMy/91hUA1D DesNqY4Swv8Ew2S6a1UMNe+eL2duoa8= -----END CERTIFICATE-----Generated at Thu Jul 23 23:00:22 2026 by rpki-client