$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa File: 3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa (raw, json) Hash identifier: aY9SCB5S1V7Jzf/5SFqwi30US/7sW/w+eL7WuMsoMFU= Subject key identifier: 81:78:43:F5:D3:E1:19:51:8A:9B:5F:32:EF:57:BE:ED:52:F9:0D:C5 Certificate issuer: /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Certificate serial: 010D0C9F4328584E89BF8EAE7EEF5F5EA9FB7584 Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 4150 IP address blocks: 199.91.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:8e:ae:7e:ef:5f:5e:a9:fb:75:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2 Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=9b33913f-22bd-40fc-b9f3-b9a0d1c4711b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:90:0f:1c:e8:18:0f:57:2c:66:7d:28:69: 2b:76:14:46:06:f2:7d:f7:37:7a:d9:ee:7b:bc:d5: 78:04:dc:b5:10:09:76:1a:c5:1b:b2:9e:90:14:0e: c7:f6:b5:0d:fc:97:cd:63:11:80:c2:cb:55:a2:58: 97:d9:3b:ab:76:a7:43:f9:1d:0b:d4:99:1d:cb:bc: 13:66:af:20:e7:9e:12:45:fd:dc:59:59:1a:2b:9f: 89:25:58:3e:75:71:a1:85:84:fb:95:6b:40:60:bc: cb:7c:f2:4f:7c:c4:6a:06:71:2f:c0:35:69:4a:c7: 00:95:f7:22:91:b1:a6:08:63:2a:27:d8:ef:f1:a4: d2:0a:9c:83:60:b9:f4:99:ed:7b:da:cd:f0:87:9a: 2d:f6:7b:ef:73:cb:66:70:3a:27:00:9b:6e:a7:7f: af:36:25:7c:d5:2c:56:08:49:9c:fe:d0:c8:d8:3e: 2b:a6:a0:fe:92:6a:57:71:99:97:e5:d0:20:6b:3a: df:38:8e:49:60:c7:05:b1:b7:29:fe:08:82:bd:06: 27:af:51:50:8d:a5:a3:cf:af:26:48:39:5e:62:38: 9b:ca:2b:7b:41:95:78:14:f8:72:1c:84:45:83:cd: 7d:d7:1e:2b:0f:fd:7e:f4:2e:2a:b9:d6:32:d4:f3: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:78:43:F5:D3:E1:19:51:8A:9B:5F:32:EF:57:BE:ED:52:F9:0D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl X509v3 Authority Key Identifier: keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer sbgp-ipAddrBlock: critical IPv4: 199.91.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4c:34:6b:1c:40:36:f0:87:3c:de:f8:eb:76:52:9a:f3:75: 10:0f:36:fc:2a:3c:4f:34:71:90:86:fc:5d:0a:40:d5:42:7f: f2:8a:28:f7:17:1b:d9:9e:8a:59:01:d2:9a:9d:bb:6c:f1:a9: 16:bf:1b:f8:e0:b0:92:4b:82:62:52:44:63:a7:d7:da:af:84: fb:69:c8:fa:17:9e:74:b3:1d:94:7d:18:40:e4:92:87:74:13: 17:f6:18:3a:d3:47:9f:ab:f1:17:ab:da:f6:37:b0:67:ab:f9: da:37:7c:dd:dd:7b:5a:dd:1d:6e:14:ae:49:db:e2:de:3f:68: a0:f2:34:fc:8d:74:dc:68:f5:ef:98:ac:38:70:ab:2f:47:59: 23:d1:cd:52:cb:1f:d5:00:bb:7e:ad:94:00:d2:90:95:0a:ea: 23:9f:3e:a3:d0:17:68:2a:73:c6:94:10:e9:01:54:c3:8f:d3: a6:b7:ea:37:18:8e:02:60:06:dd:71:92:0c:85:4f:10:02:1a: cc:93:f8:79:2c:1f:5d:11:11:69:95:56:c5:a8:79:27:c4:27: 0b:ff:67:08:fa:99:d7:fa:f1:79:53:c8:32:dd:f5:ff:79:a3: e7:1f:ae:ec:fe:c5:ca:c7:48:ea:7c:45:c0:15:1f:ce:f4:36: 17:c4:18:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Jv46ufu9fXqn7dYQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0NzllMTMtNTVhMS00YTVkLWEwMDItMTE3MGEwZmY1 ZmQyMB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk OWIzMzkxM2YtMjJiZC00MGZjLWI5ZjMtYjlhMGQxYzQ3MTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAGQDxzoGA9XLGZ9KGkrdhRGBvJ99zd62e57 vNV4BNy1EAl2GsUbsp6QFA7H9rUN/JfNYxGAwstVoliX2TurdqdD+R0L1Jkdy7wT Zq8g554SRf3cWVkaK5+JJVg+dXGhhYT7lWtAYLzLfPJPfMRqBnEvwDVpSscAlfci kbGmCGMqJ9jv8aTSCpyDYLn0me172s3wh5ot9nvvc8tmcDonAJtup3+vNiV81SxW CEmc/tDI2D4rpqD+kmpXcZmX5dAgazrfOI5JYMcFsbcp/giCvQYnr1FQjaWjz68m SDleYjibyit7QZV4FPhyHIRFg8191x4rD/1+9C4qudYy1PNdFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIF4Q/XT4RlRiptfMu9Xvu1S+Q3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3 OWUxMy01NWExLTRhNWQtYTAwMi0xMTcwYTBmZjVmZDIvM2Y5YjZhZjUtODZlYS0z M2ZlLWE1YjYtNDk5NDBiMjAxYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWY0NzllMTMtNTVhMS00YTVkLWEw MDItMTE3MGEwZmY1ZmQyLzFmNDc5ZTEzLTU1YTEtNGE1ZC1hMDAyLTExNzBhMGZm NWZkMi5jcmwwHwYDVR0jBBgwFoAUqLXSOrVPs0AvMi4sLER4Y/pWWLAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZjQ3OWUxMy01NWExLTRhNWQtYTAwMi0xMTcw YTBmZjVmZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1MNGscQDbwhzze+Ot2UprzdRAPNvwqPE80cZCG/F0KQNVCf/KKKPcX G9meilkB0pqdu2zxqRa/G/jgsJJLgmJSRGOn19qvhPtpyPoXnnSzHZR9GEDkkod0 Exf2GDrTR5+r8Rer2vY3sGer+do3fN3de1rdHW4Urknb4t4/aKDyNPyNdNxo9e+Y rDhwqy9HWSPRzVLLH9UAu36tlADSkJUK6iOfPqPQF2gqc8aUEOkBVMOP06a36jcY jgJgBt1xkgyFTxACGsyT+HksH10REWmVVsWoeSfEJwv/Zwj6mdf68XlTyDLd9f95 o+cfruz+xcrHSOp8RcAVH870NhfEGHI= -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:54 2026 by rpki-client