$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa File: 0a495132-7cda-3198-aa84-524b4588371a.roa (raw, json) Hash identifier: 2YNz5+/mO/k4mifdm5RHshbZRchO8dIXHmIc9k8lUgo= Subject key identifier: 8E:E1:60:1D:72:D3:22:3C:B3:D0:FD:2A:2A:F9:D7:75:96:B0:83:FD Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584E3E5F2581BEFFAA78A1078100 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 21766 IP address blocks: 199.217.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:25:81:be:ff:aa:78:a1:07:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=d4730be3-f4a1-4f9f-9775-3a7a816fb508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b3:74:80:c8:63:f9:9a:a7:58:78:2b:4f:52: bc:86:e6:7a:3b:43:af:3e:dc:05:37:39:ea:15:93: 67:b3:94:6d:91:fb:62:d7:ec:cf:ae:53:fb:90:3d: 16:5c:36:de:30:62:74:86:95:9c:e1:d0:ca:be:1f: f6:b2:77:10:f0:33:85:59:70:f6:88:c5:02:2a:37: 5f:4f:a0:45:87:d8:90:64:2d:a0:25:03:c4:f3:43: 13:fd:0c:63:ca:cc:86:bc:82:94:1b:b1:c4:62:13: bf:13:1e:43:0c:14:77:76:c5:4d:fb:09:c5:4a:70: da:bd:89:f4:8c:a2:c2:0e:3d:87:00:a9:07:01:c9: 24:0b:3f:a7:cc:d0:f2:72:0a:eb:c5:e6:dc:e2:97: 9d:d5:cb:91:95:7c:46:58:a5:02:b5:95:4a:6c:7d: 1a:0a:a8:6c:0b:e5:ad:49:23:8a:49:75:28:35:d9: 73:51:8e:05:3b:f5:50:01:e9:32:c3:08:37:c1:b1: c2:6e:9e:ac:1d:8e:21:d1:e8:e8:5e:ed:f8:90:d7: 40:11:a5:d0:da:3f:e9:22:ac:1c:96:02:5e:89:e8: 6d:8d:a0:d6:26:fb:41:4a:27:37:a6:d0:97:3d:4a: 34:87:48:3e:42:9b:8c:35:8a:56:00:d1:03:63:b0: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E1:60:1D:72:D3:22:3C:B3:D0:FD:2A:2A:F9:D7:75:96:B0:83:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.217.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:23:9b:ce:f4:47:62:4d:5a:75:07:55:11:6e:9a:87:cb:e9: 9b:df:74:fd:41:de:1c:6b:b5:57:ea:0a:5e:7e:f1:32:41:4e: 00:ec:58:58:92:d2:a0:7f:f4:9a:b2:84:47:e8:7f:f3:d7:7f: 4f:fd:95:39:12:2a:47:75:81:58:00:15:0c:fc:2b:70:69:cd: 72:59:e3:7d:53:74:6f:25:e7:db:c7:71:d1:c6:64:90:bb:a9: eb:47:ed:15:ba:4f:2e:31:7b:43:15:a9:48:86:44:5e:df:df: 57:f4:d0:cb:79:6f:cd:75:4d:35:cb:b0:df:40:40:2f:b8:0a: 00:e2:39:80:3e:72:b5:53:68:de:26:50:68:e2:c0:bd:18:62: f2:42:8f:57:47:5c:ac:b2:4d:9f:b3:af:28:e3:df:92:0b:7c: 99:ea:d3:7e:90:3f:d5:4b:21:99:dc:fb:ef:96:8c:36:73:80: a5:8c:ce:e3:81:93:8d:dd:2a:a9:66:4c:43:b5:c9:72:76:7e: d5:1b:f3:92:f1:6b:1f:8a:c8:f6:26:2a:0f:4d:84:28:05:f6: b5:81:ed:f6:08:00:53:09:ab:59:3f:fa:c4:ef:18:e1:3d:ea: 91:5d:8b:60:2b:4d:d3:bf:5c:f4:46:45:41:06:81:8a:c7:cd: 99:ea:85:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XyWBvv+qeKEHgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDQ3MzBiZTMtZjRhMS00ZjlmLTk3NzUtM2E3YTgxNmZiNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLN0gMhj+ZqnWHgrT1K8huZ6O0OvPtwFNznq FZNns5Rtkfti1+zPrlP7kD0WXDbeMGJ0hpWc4dDKvh/2sncQ8DOFWXD2iMUCKjdf T6BFh9iQZC2gJQPE80MT/QxjysyGvIKUG7HEYhO/Ex5DDBR3dsVN+wnFSnDavYn0 jKLCDj2HAKkHAckkCz+nzNDycgrrxebc4ped1cuRlXxGWKUCtZVKbH0aCqhsC+Wt SSOKSXUoNdlzUY4FO/VQAekywwg3wbHCbp6sHY4h0ejoXu34kNdAEaXQ2j/pIqwc lgJeiehtjaDWJvtBSic3ptCXPUo0h0g+QpuMNYpWANEDY7AvaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7hYB1y0yI8s9D9Kir513WWsIP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMGE0OTUxMzItN2NkYS0z MTk4LWFhODQtNTI0YjQ1ODgzNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkjm870R2JNWnUHVRFumofL6ZvfdP1B3hxrtVfqCl5+8TJBTgDsWFiS 0qB/9JqyhEfof/PXf0/9lTkSKkd1gVgAFQz8K3BpzXJZ431TdG8l59vHcdHGZJC7 qetH7RW6Ty4xe0MVqUiGRF7f31f00Mt5b811TTXLsN9AQC+4CgDiOYA+crVTaN4m UGjiwL0YYvJCj1dHXKyyTZ+zryjj35ILfJnq036QP9VLIZnc+++WjDZzgKWMzuOB k43dKqlmTEO1yXJ2ftUb85Lxax+KyPYmKg9NhCgF9rWB7fYIAFMJq1k/+sTvGOE9 6pFdi2ArTdO/XPRGRUEGgYrHzZnqhS4= -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:28 2026 by rpki-client