$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa File: a98d5494-4572-385b-afc9-1ffafc221b11.roa (raw, json) Hash identifier: jH5Dq4E8qm1fPa2RDDqlZcfrjlW0TvfvRrAOrhca0Y8= Subject key identifier: 49:95:20:92:AA:AA:93:64:4A:A3:14:C2:DC:2C:10:21:AD:3E:3D:B3 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584E6F3A1AA4FFF16624A0AF4480 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 396954 IP address blocks: 192.88.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:1a:a4:ff:f1:66:24:a0:af:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=b6538ec8-a13d-412a-8038-6a70048594a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:52:f3:be:45:c1:b9:25:04:ae:dc:4d:1f:8f: de:9c:3b:1f:22:b2:fc:ab:56:e3:d9:98:e5:bf:62: e3:82:dd:9e:49:1c:b5:10:c9:0d:eb:e5:f8:4b:89: 9d:4d:47:3e:ef:09:b5:00:12:3b:65:f9:d7:3e:b5: 03:1c:70:c1:bd:5f:32:d3:64:6e:a5:27:fe:2c:8d: 84:57:b0:a8:93:1f:f1:c7:70:46:47:46:a7:89:e8: 12:0c:34:2a:6a:4b:22:53:7b:d5:60:2e:38:1f:13: b7:a3:3f:21:70:3d:1e:4f:4e:29:a7:5b:5a:b0:6d: 2a:09:b9:ee:08:93:57:1e:fc:d3:39:e9:b3:1c:ae: 16:72:43:6a:66:00:8c:a7:43:38:fa:8a:b7:c0:4a: 02:b3:33:6a:64:4b:1e:d7:05:71:42:5b:c1:57:19: f0:ed:07:c6:6e:2d:9b:8c:ed:e2:47:2c:86:a2:9e: 4c:46:30:26:7e:e7:cd:76:a7:d8:0d:0f:1c:4f:cc: 39:0b:f9:38:1b:ef:f5:53:b8:29:22:79:4d:4c:fb: c8:54:e5:f8:ac:58:bc:1c:e1:43:22:52:87:19:b8: dd:e4:72:69:b6:7a:6b:24:19:61:71:01:28:52:31: 7a:df:a7:28:c6:f0:c1:b3:9c:7e:e2:40:23:d9:5f: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:95:20:92:AA:AA:93:64:4A:A3:14:C2:DC:2C:10:21:AD:3E:3D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 192.88.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cf:44:89:0d:e0:78:4d:fb:30:68:c8:49:9b:a1:f2:51:d9: f6:39:48:59:49:f9:82:b4:6b:b5:57:83:02:5c:32:23:00:c4: fe:67:4f:43:f6:17:9f:ba:68:96:70:f8:72:ec:e6:a4:79:c8: 47:9a:dc:86:d1:2d:1e:b5:6d:d3:35:b5:b6:3b:e9:1c:f7:c6: 8b:5e:a2:09:74:c3:36:ba:a5:39:44:f1:f4:12:4a:85:5e:13: 3e:1c:2f:98:2f:9d:99:76:95:83:65:7f:a8:a7:80:10:c5:93: d2:0b:ab:e3:e4:31:58:84:00:03:7e:f9:67:4c:8c:33:c3:b6: e8:09:7d:1d:f8:d6:b3:60:68:5e:1d:b3:99:1b:6f:68:fa:20: 2d:55:d3:6e:41:f3:dc:a4:be:9a:3f:b7:1c:06:79:89:3a:76: 9f:0b:9c:05:93:fc:49:fb:50:b8:b1:f3:d3:c5:4f:56:93:ff: 49:79:65:bf:d9:8d:af:39:f1:da:2a:23:e2:7f:c2:f6:eb:36: b6:76:ae:e9:a6:50:7a:16:8f:11:9c:b3:e3:07:35:6f:f3:32: 47:9c:dd:c1:86:e3:06:bd:3e:0d:a6:91:63:58:59:42:1f:02: 7c:18:1e:11:7f:96:9f:69:2e:54:a6:a7:23:47:41:85:03:e3: 62:88:1f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOhqk//FmJKCvRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YjY1MzhlYzgtYTEzZC00MTJhLTgwMzgtNmE3MDA0ODU5NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81LzvkXBuSUErtxNH4/enDsfIrL8q1bj2Zjl v2Ljgt2eSRy1EMkN6+X4S4mdTUc+7wm1ABI7ZfnXPrUDHHDBvV8y02RupSf+LI2E V7Cokx/xx3BGR0aniegSDDQqaksiU3vVYC44HxO3oz8hcD0eT04pp1tasG0qCbnu CJNXHvzTOemzHK4WckNqZgCMp0M4+oq3wEoCszNqZEse1wVxQlvBVxnw7QfGbi2b jO3iRyyGop5MRjAmfufNdqfYDQ8cT8w5C/k4G+/1U7gpInlNTPvIVOX4rFi8HOFD IlKHGbjd5HJptnprJBlhcQEoUjF636coxvDBs5x+4kAj2V9CmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmVIJKqqpNkSqMUwtwsECGtPj2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvYTk4ZDU0OTQtNDU3Mi0z ODViLWFmYzktMWZmYWZjMjIxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7PRIkN4HhN+zBoyEmbofJR2fY5SFlJ+YK0a7VXgwJcMiMAxP5nT0P2 F5+6aJZw+HLs5qR5yEea3IbRLR61bdM1tbY76Rz3xoteogl0wza6pTlE8fQSSoVe Ez4cL5gvnZl2lYNlf6ingBDFk9ILq+PkMViEAAN++WdMjDPDtugJfR341rNgaF4d s5kbb2j6IC1V025B89ykvpo/txwGeYk6dp8LnAWT/En7ULix89PFT1aT/0l5Zb/Z ja858doqI+J/wvbrNrZ2rummUHoWjxGcs+MHNW/zMkec3cGG4wa9Pg2mkWNYWUIf AnwYHhF/lp9pLlSmpyNHQYUD42KIH7c= -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:10 2026 by rpki-client