$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa File: 7722da27-45e1-3732-a4d4-8186e8994e5d.roa (raw, json) Hash identifier: 0H2EBoKUzStd7ATMnl/k0H1lhxe46duhWjmy2xqKde0= Subject key identifier: B7:18:7C:C2:5C:1E:BD:95:AF:BF:D9:D7:18:35:98:0B:BE:D4:3A:A9 Certificate issuer: /CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Certificate serial: 010D0C9F4328584E5619F483FC98B25E36582920 Authority key identifier: 99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 22748 IP address blocks: 199.38.96.0/24 maxlen: 24 199.38.97.0/24 maxlen: 24 199.38.98.0/24 maxlen: 24 199.38.99.0/24 maxlen: 24 199.38.100.0/24 maxlen: 24 199.38.101.0/24 maxlen: 24 199.38.102.0/24 maxlen: 24 199.38.103.0/24 maxlen: 24 2607:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:f4:83:fc:98:b2:5e:36:58:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=43f68ad1-d097-415d-b7a0-b85e63c076b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:d1:ca:4c:09:4e:35:06:fe:f1:ac:0d:75: 13:9b:a5:88:e7:06:33:08:db:6a:3f:cc:91:01:36: e0:7c:81:9a:6f:16:0e:66:d5:ba:0d:65:f8:b3:16: 4c:26:e9:34:9f:0e:bf:cf:45:66:5e:b3:79:32:3f: 5e:7a:2e:aa:43:da:89:95:36:da:dd:bd:cb:4f:98: d9:76:35:13:5a:1e:77:b8:9d:8c:23:73:37:b8:f3: e5:17:13:79:fc:88:e7:a6:62:2e:11:d4:d7:f9:96: 3f:73:18:03:21:0a:d7:ee:46:9d:f5:83:8a:c5:6a: 81:e8:be:76:c1:ab:59:7b:81:0b:24:87:7a:33:27: ae:c5:2d:37:2c:3b:58:f8:f5:9f:c3:a1:ff:3c:0b: 40:1c:94:50:eb:9b:68:05:1a:e2:3b:a3:b1:c0:8f: 58:3d:5a:3a:61:bd:dc:e4:5d:b2:3f:c8:88:2f:43: 96:58:d0:06:03:d3:39:2e:c1:9c:8d:68:0b:95:9e: 2c:9a:88:33:55:6b:df:3a:f8:5f:da:d8:bc:30:a4: 81:7d:80:2a:7e:a1:87:51:82:2c:cf:b1:fd:c6:92: 79:f5:ae:c8:ed:73:c7:09:f5:0f:9e:39:2d:45:ad: 6f:b9:e7:0d:6d:44:b9:c7:96:d2:a4:51:eb:a8:74: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:18:7C:C2:5C:1E:BD:95:AF:BF:D9:D7:18:35:98:0B:BE:D4:3A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/7722da27-45e1-3732-a4d4-8186e8994e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl X509v3 Authority Key Identifier: keyid:99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.96.0/21 IPv6: 2607:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2e:87:b5:a9:3e:0f:a9:2c:4f:9f:38:8b:db:92:c1:22:ac: 0d:3d:f9:b9:b9:1c:2c:12:12:d9:ca:65:e6:b2:c2:31:81:cf: 23:b2:28:0e:4a:b4:72:27:9b:ac:1a:8e:66:56:8b:ba:c1:85: 19:d5:11:58:bc:65:68:ed:64:9a:18:e8:3b:2d:20:7d:c5:9b: 3d:ec:98:d7:3e:1b:01:64:f1:04:47:b9:c1:d4:fa:8c:82:5e: 1e:da:59:30:e1:05:cb:5a:aa:48:c1:f8:5e:18:ee:72:54:6a: 21:be:4f:0e:4a:b4:ae:32:f7:fb:12:8a:77:62:8f:e2:7a:63: b1:c5:45:3c:b8:1f:74:cf:56:de:a5:6a:18:fa:cd:30:ea:72: 79:7e:4b:00:84:f7:c9:a3:a3:24:2a:17:84:6a:d2:e0:76:0c: 3b:93:83:97:41:eb:dd:97:3d:ba:aa:dc:91:08:17:04:71:17: bb:b1:38:e9:45:e9:af:4e:7d:f9:99:6d:4f:02:8e:ed:39:02: be:86:a7:ce:84:55:c7:a2:09:0f:97:3c:5f:f3:4e:de:78:53: f6:46:9c:cc:4c:8b:e7:fa:a1:0b:19:0c:d8:7d:90:ab:88:ca: c9:25:de:45:ab:ab:bf:5a:1e:04:c5:3c:91:95:b9:35:29:73: 93:bd:16:c9 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE5WGfSD/JiyXjZYKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmMzBkYTYtMDJiYS00NWNlLTk0ZTctMDMxYzQ1Mzc0 Y2Q4MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk NDNmNjhhZDEtZDA5Ny00MTVkLWI3YTAtYjg1ZTYzYzA3NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCjRykwJTjUG/vGsDXUTm6WI5wYzCNtqP8yR ATbgfIGabxYOZtW6DWX4sxZMJuk0nw6/z0VmXrN5Mj9eei6qQ9qJlTba3b3LT5jZ djUTWh53uJ2MI3M3uPPlFxN5/IjnpmIuEdTX+ZY/cxgDIQrX7kad9YOKxWqB6L52 watZe4ELJId6MyeuxS03LDtY+PWfw6H/PAtAHJRQ65toBRriO6OxwI9YPVo6Yb3c 5F2yP8iIL0OWWNAGA9M5LsGcjWgLlZ4smogzVWvfOvhf2ti8MKSBfYAqfqGHUYIs z7H9xpJ59a7I7XPHCfUPnjktRa1vuecNbUS5x5bSpFHrqHQzkQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLcYfMJcHr2Vr7/Z1xg1mAu+1DqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YmYz MGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFjNDUzNzRjZDgvNzcyMmRhMjctNDVlMS0z NzMyLWE0ZDQtODE4NmU4OTk0ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWJmMzBkYTYtMDJiYS00NWNlLTk0 ZTctMDMxYzQ1Mzc0Y2Q4LzliZjMwZGE2LTAyYmEtNDVjZS05NGU3LTAzMWM0NTM3 NGNkOC5jcmwwHwYDVR0jBBgwFoAUmciCkEmwGVn9tYDtw2KU6hqLRR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YmYzMGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFj NDUzNzRjZDguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxyZgMA0E AgACMAcDBQAmBzhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFEuh7WpPg+pLE+fOIvbksEirA09+bm5HCwS EtnKZeaywjGBzyOyKA5KtHInm6wajmZWi7rBhRnVEVi8ZWjtZJoY6DstIH3Fmz3s mNc+GwFk8QRHucHU+oyCXh7aWTDhBctaqkjB+F4Y7nJUaiG+Tw5KtK4y9/sSindi j+J6Y7HFRTy4H3TPVt6lahj6zTDqcnl+SwCE98mjoyQqF4Rq0uB2DDuTg5dB692X Pbqq3JEIFwRxF7uxOOlF6a9OffmZbU8Cju05Ar6Gp86EVceiCQ+XPF/zTt54U/ZG nMxMi+f6oQsZDNh9kKuIyskl3kWrq79aHgTFPJGVuTUpc5O9Fsk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:27:08 2026 by rpki-client