$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa File: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (raw, json) Hash identifier: E3KJzrV+k+ktsofjPiXSIwqP7hxr2JPINmRl8TR6/r4= Subject key identifier: 10:E7:6D:CE:B3:85:96:CF:CB:0C:AA:93:35:09:8B:45:46:BD:5C:05 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584E6F3A2DA064A4199FEC45CF80 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 395644 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:2d:a0:64:a4:19:9f:ec:45:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=d346f661-5226-438b-83a6-c7c423247939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:73:e2:c6:16:0f:00:a3:5a:f4:41:c9:ba: 27:60:3f:a7:9a:ec:e6:4a:86:3e:d1:e4:5c:bd:0e: 2e:26:c5:16:ab:fc:a3:31:52:ba:7a:80:bd:5e:a3: f9:21:5b:ab:2a:9f:3f:3a:e7:ad:ba:97:79:8b:6f: 04:8f:0c:8d:e9:fa:b7:d2:4f:29:89:c9:7d:05:86: b9:73:ee:27:8f:9c:1a:4f:87:f9:32:c6:b3:91:9a: 34:da:ce:53:38:49:a3:6c:7e:b2:19:95:d4:94:cb: d5:85:89:ba:cc:2a:ba:a5:2c:06:08:07:c5:7f:d6: 36:f2:3c:f3:09:db:38:cf:30:ae:f0:04:9d:86:d3: fc:0b:08:e6:7c:f8:02:4b:a8:f3:65:ab:4a:4b:10: 81:1c:2b:88:7e:b8:a9:5f:ea:c8:f9:aa:48:e0:5c: 71:1b:a1:60:78:d3:a3:3d:ec:69:03:20:9e:6e:40: 54:8e:da:0e:a9:7d:57:f0:90:77:dd:8d:3d:3d:f5: 82:5f:da:bd:e1:93:ef:34:f9:2d:57:1f:a9:ec:4f: 23:92:17:b3:14:70:d8:a6:d3:04:c3:9f:d2:15:7a: a1:66:14:99:36:9f:04:7c:ae:56:4c:99:5e:bb:11: b4:7f:c0:00:d8:79:89:b1:02:88:70:46:10:32:de: bc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E7:6D:CE:B3:85:96:CF:CB:0C:AA:93:35:09:8B:45:46:BD:5C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8e:4c:de:b6:c6:bc:f8:01:85:f6:03:d0:6c:90:dc:02:f9: 3c:cf:8e:01:d6:04:72:45:66:77:4e:86:d7:a9:2e:ed:6f:c3: e6:26:f2:3e:c5:c1:b6:0b:2f:34:45:70:90:1a:36:ff:31:fa: c5:fa:3e:95:75:e7:dc:d5:fd:6f:fa:60:a2:8a:f9:49:ac:c9: 83:21:8f:90:85:08:7a:60:9b:ee:6a:d6:cf:c5:e7:3b:4d:bc: a4:20:b7:87:a8:c2:b5:ec:b5:a2:ff:25:b6:06:fa:a9:80:2e: 83:51:06:bf:af:0a:0d:fe:53:9c:2a:8b:ac:58:42:ca:d0:33: 73:40:5d:81:fd:4c:3e:31:91:f4:b8:75:50:a5:b5:00:5d:e6: 82:75:71:f7:dc:32:1b:ad:76:ff:f7:12:e6:1b:e5:32:55:e0: 2f:2c:59:dc:a3:f2:d9:03:d0:4a:c6:09:95:4b:33:29:1b:3f: aa:2a:51:8c:51:b5:57:29:4f:b1:32:80:ed:21:a5:9c:fb:3e: f1:44:3d:8b:17:8d:3e:85:14:3a:af:92:70:90:d9:b0:07:49: 01:e6:af:e3:f0:b7:8e:36:6e:cc:1c:0f:83:24:38:e9:2a:c4: 26:ef:91:11:0b:59:d3:ee:b8:9c:4b:21:61:8b:11:03:d9:ba: fa:c6:62:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOi2gZKQZn+xFz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDM0NmY2NjEtNTIyNi00MzhiLTgzYTYtYzdjNDIzMjQ3OTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhFz4sYWDwCjWvRBybonYD+nmuzmSoY+0eRc vQ4uJsUWq/yjMVK6eoC9XqP5IVurKp8/Ouetupd5i28EjwyN6fq30k8picl9BYa5 c+4nj5waT4f5MsazkZo02s5TOEmjbH6yGZXUlMvVhYm6zCq6pSwGCAfFf9Y28jzz Cds4zzCu8ASdhtP8CwjmfPgCS6jzZatKSxCBHCuIfripX+rI+apI4FxxG6FgeNOj PexpAyCebkBUjtoOqX1X8JB33Y09PfWCX9q94ZPvNPktVx+p7E8jkhezFHDYptME w5/SFXqhZhSZNp8EfK5WTJleuxG0f8AA2HmJsQKIcEYQMt68ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDnbc6zhZbPywyqkzUJi0VGvVwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMWY1ZmFiMjQtNmFlMy0z NjlhLTg0NWItMmI1ODc5NDg5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGOTN62xrz4AYX2A9BskNwC+TzPjgHWBHJFZndOhtepLu1vw+Ym8j7F wbYLLzRFcJAaNv8x+sX6PpV159zV/W/6YKKK+UmsyYMhj5CFCHpgm+5q1s/F5ztN vKQgt4eowrXstaL/JbYG+qmALoNRBr+vCg3+U5wqi6xYQsrQM3NAXYH9TD4xkfS4 dVCltQBd5oJ1cffcMhutdv/3EuYb5TJV4C8sWdyj8tkD0ErGCZVLMykbP6oqUYxR tVcpT7EygO0hpZz7PvFEPYsXjT6FFDqvknCQ2bAHSQHmr+Pwt442bswcD4MkOOkq xCbvkRELWdPuuJxLIWGLEQPZuvrGYt4= -----END CERTIFICATE-----Generated at Thu Jul 23 21:44:03 2026 by rpki-client