$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa File: aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa (raw, json) Hash identifier: 28F+thrPJnanbpUjIzsu6rAITLgBY7teHqt7XXYnUF0= Subject key identifier: FB:28:AE:BD:5D:C6:05:31:52:E0:22:7D:F0:4B:5D:2D:2D:DD:5B:99 Certificate issuer: /CN=327601a5-bd55-430e-ba09-d1da1ebfc6b8 Certificate serial: 010D0C9F4328584E97B503AC50C0B73D965D9D60 Authority key identifier: 81:B4:C8:5E:6F:68:E3:19:E1:D3:27:60:47:81:6D:4B:F1:D1:CC:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 26304 IP address blocks: 199.202.114.0/24 maxlen: 24 199.202.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:03:ac:50:c0:b7:3d:96:5d:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327601a5-bd55-430e-ba09-d1da1ebfc6b8 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=3b3e5d51-8c7f-4d3a-9940-c793b0ee051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:85:93:2e:40:b7:14:59:14:79:99:0b:f4: 4f:1d:5e:23:42:2f:3c:d1:cd:ce:df:0c:86:8e:01: e0:24:9a:fd:f2:e5:4e:0b:3c:64:fa:96:fa:32:27: bf:3d:c1:1c:51:a5:c2:52:3d:33:4c:d0:c3:d8:4d: 59:f9:69:19:cb:2e:d4:ae:7e:93:11:08:ae:bd:8d: 4c:f0:b4:f0:1f:7c:0b:5b:f9:c8:eb:88:3c:0c:cb: 9a:84:41:c8:98:ee:36:46:d5:87:70:85:55:29:2d: d9:f7:9b:89:0e:0b:b3:42:50:75:3e:9f:39:6e:c0: c9:66:2f:b7:7c:09:aa:55:d3:3b:56:36:0f:9b:e6: 5a:6f:77:f1:fa:d8:fb:6a:1c:dd:98:66:78:49:02: cf:18:a5:42:bd:aa:58:b4:b7:2e:8d:1a:72:6a:31: 3e:62:80:95:fe:e6:fc:19:81:6c:6c:34:d3:6d:87: 04:31:f8:f5:e2:a2:91:c5:3d:a5:d3:e2:c8:e9:b4: fa:68:34:9b:1e:7a:7f:bd:77:32:70:fb:ca:ad:e5: 85:9f:f0:98:60:44:df:42:2d:81:96:9f:c3:a7:13: 2e:13:77:1b:12:b4:c5:89:3b:0b:e4:03:91:44:df: eb:f0:e2:99:ae:31:d4:c0:bf:2c:88:b0:0c:17:75: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:28:AE:BD:5D:C6:05:31:52:E0:22:7D:F0:4B:5D:2D:2D:DD:5B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/aaa10ded-a966-32a4-bdf1-b675d451d0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8/327601a5-bd55-430e-ba09-d1da1ebfc6b8.crl X509v3 Authority Key Identifier: keyid:81:B4:C8:5E:6F:68:E3:19:E1:D3:27:60:47:81:6D:4B:F1:D1:CC:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/327601a5-bd55-430e-ba09-d1da1ebfc6b8.cer sbgp-ipAddrBlock: critical IPv4: 199.202.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:62:c1:88:6c:97:76:a2:f1:ea:ab:3d:a5:e7:ad:36:bb:57: 39:e4:77:d2:b3:7a:13:16:ec:9d:22:dd:4f:38:41:2f:35:15: 24:f5:64:79:f2:31:c1:a9:36:e4:db:b6:b2:29:1b:48:72:01: 5a:7f:1a:d1:b4:83:e3:63:e8:a8:9c:48:9d:fb:68:9c:a6:2a: f8:96:3c:fe:79:e6:0c:cd:94:a1:aa:7a:65:9d:7f:23:09:98: 85:d6:2a:f9:cd:06:9e:e5:72:a3:be:6a:0b:a8:67:3e:25:6f: 11:f4:3e:cd:4b:64:7e:51:b9:30:5f:d2:21:82:51:a5:da:b6: 0d:09:8e:18:b4:ec:9d:d7:e8:46:39:7e:ca:f3:01:d0:ca:92: 15:b0:a1:32:db:cc:3f:2f:d1:ca:79:5f:3a:4b:cc:2e:86:10: 3c:8f:55:b0:58:73:77:65:36:12:c0:40:ca:a7:51:53:a0:ec: 4b:e2:77:a8:4e:14:19:da:6b:fd:4f:07:f1:c7:f0:16:88:5b: 98:12:88:af:d5:6b:d5:06:71:cc:12:16:63:7f:1d:1e:d8:dc: c9:e2:55:af:d7:14:ba:58:8d:3f:a7:d3:d3:01:8f:5f:00:0b: 55:ff:93:d1:19:3a:57:9d:5f:df:91:4a:96:f3:59:78:0c:ea: 31:a2:8e:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQOsUMC3PZZdnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3NjAxYTUtYmQ1NS00MzBlLWJhMDktZDFkYTFlYmZj NmI4MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk M2IzZTVkNTEtOGM3Zi00ZDNhLTk5NDAtYzc5M2IwZWUwNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0WFky5AtxRZFHmZC/RPHV4jQi880c3O3wyG jgHgJJr98uVOCzxk+pb6Mie/PcEcUaXCUj0zTNDD2E1Z+WkZyy7Urn6TEQiuvY1M 8LTwH3wLW/nI64g8DMuahEHImO42RtWHcIVVKS3Z95uJDguzQlB1Pp85bsDJZi+3 fAmqVdM7VjYPm+Zab3fx+tj7ahzdmGZ4SQLPGKVCvapYtLcujRpyajE+YoCV/ub8 GYFsbDTTbYcEMfj14qKRxT2l0+LI6bT6aDSbHnp/vXcycPvKreWFn/CYYETfQi2B lp/DpxMuE3cbErTFiTsL5AORRN/r8OKZrjHUwL8siLAMF3XfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsorr1dxgUxUuAiffBLXS0t3VuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc2 MDFhNS1iZDU1LTQzMGUtYmEwOS1kMWRhMWViZmM2YjgvYWFhMTBkZWQtYTk2Ni0z MmE0LWJkZjEtYjY3NWQ0NTFkMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3NjAxYTUtYmQ1NS00MzBlLWJh MDktZDFkYTFlYmZjNmI4LzMyNzYwMWE1LWJkNTUtNDMwZS1iYTA5LWQxZGExZWJm YzZiOC5jcmwwHwYDVR0jBBgwFoAUgbTIXm9o4xnh0ydgR4FtS/HRzCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc2MDFhNS1iZDU1LTQzMGUtYmEwOS1kMWRh MWViZmM2YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8pyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNiwYhsl3ai8eqrPaXnrTa7Vznkd9KzehMW7J0i3U84QS81FST1ZHny McGpNuTbtrIpG0hyAVp/GtG0g+Nj6KicSJ37aJymKviWPP555gzNlKGqemWdfyMJ mIXWKvnNBp7lcqO+aguoZz4lbxH0Ps1LZH5RuTBf0iGCUaXatg0Jjhi07J3X6EY5 fsrzAdDKkhWwoTLbzD8v0cp5XzpLzC6GEDyPVbBYc3dlNhLAQMqnUVOg7Evid6hO FBnaa/1PB/HH8BaIW5gSiK/Va9UGccwSFmN/HR7Y3MniVa/XFLpYjT+n09MBj18A C1X/k9EZOledX9+RSpbzWXgM6jGijmY= -----END CERTIFICATE-----Generated at Fri Jul 24 09:25:41 2026 by rpki-client