$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa File: 03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa (raw, json) Hash identifier: o5uO5KOGHHUh3U4QNxQ8ElTUkOwTqblzuLgY1dQPe9w= Subject key identifier: F3:AD:FF:CE:2B:19:E7:76:0C:4E:E3:12:F7:88:77:0E:67:2B:53:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF18216968E88AE142098DB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 25485 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:16:96:8e:88:ae:14:20:98:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=386712c0-c516-45c0-b60c-7c580f1139cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:70:90:00:56:89:5a:8e:04:da:b1:e7:61: 3f:d0:de:dc:2d:c8:c4:a9:0a:16:58:7e:e3:93:78: d6:d5:e9:cc:95:8a:bd:7b:10:7a:fb:c5:aa:af:84: 09:ac:19:2e:96:fb:96:09:b8:d3:42:a0:97:06:d7: 37:9f:d4:50:5d:64:19:10:39:ba:b8:27:42:3a:30: 8e:50:aa:22:7b:8d:fa:0f:a1:3b:a5:68:8d:0f:d1: 8d:39:38:35:72:75:fe:0d:82:42:0b:c5:d1:ac:8e: 7b:b6:f0:3d:9a:23:9b:ad:57:d9:62:75:93:34:da: d9:df:e3:6e:56:10:87:d4:6a:d3:18:19:90:58:e7: 6e:75:20:df:19:a1:9a:72:c7:d0:1f:67:87:7b:1f: ff:e5:8a:4e:3e:c2:7e:e0:de:7a:72:d1:05:d8:0a: 61:37:06:22:47:73:e6:37:21:4e:c0:d0:32:7a:e5: 3e:51:63:cb:d7:d6:b4:73:fb:64:c0:1b:50:81:a4: a1:6a:45:5b:51:bc:b0:66:bb:cd:50:04:78:27:01: ac:dc:8c:86:52:b8:7a:88:99:71:df:e6:42:04:83: 30:03:e7:d5:60:c6:04:46:04:fe:aa:4d:85:6d:ae: 72:26:fb:1d:a0:57:76:52:04:57:44:15:d5:91:c0: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:FF:CE:2B:19:E7:76:0C:4E:E3:12:F7:88:77:0E:67:2B:53:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b7:a7:61:b2:fa:e5:f1:3d:6f:e6:ea:18:43:c9:6d:29:2e: eb:de:e4:d7:e5:61:65:26:b0:5e:c5:c2:e4:1a:4f:c9:33:f4: d8:13:44:8e:42:a9:8b:06:2a:10:c7:d6:3c:cd:9e:45:e2:cd: 37:99:e9:1c:ab:51:9d:50:e0:88:32:f0:f8:d3:07:22:97:96: ad:44:3a:9b:7e:fe:f1:7d:db:8e:2d:ee:16:92:c4:9c:15:9c: 75:e7:13:70:dc:d1:f2:e6:73:10:3a:b8:6d:d7:17:21:09:88: c9:8c:ad:4c:de:84:71:8f:62:20:cb:83:b5:ae:76:92:e2:f4: 63:fa:af:eb:e7:5e:0b:87:8e:59:7f:05:f2:71:fd:3f:96:6f: 13:3a:ed:30:dc:02:30:08:f9:a6:c3:8c:02:2b:a3:19:26:4a: a2:93:ee:53:47:dd:8e:0b:31:2a:e5:87:ee:b5:9b:4d:11:0d: cd:59:94:9e:ee:88:24:50:99:5e:c3:02:81:5b:94:87:70:78: fa:a5:e3:f2:ce:bb:5f:43:04:13:e0:54:c1:71:b6:a8:5e:57: 05:89:ee:3f:06:a9:56:21:64:93:c1:d6:1d:c5:a4:d1:ee:29: a9:e8:60:bf:0f:8f:7b:94:52:76:bf:33:5b:30:e3:34:07:9d: 3a:6a:a2:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xghaWjoiuFCCY2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk Mzg2NzEyYzAtYzUxNi00NWMwLWI2MGMtN2M1ODBmMTEzOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2dwkABWiVqOBNqx52E/0N7cLcjEqQoWWH7j k3jW1enMlYq9exB6+8Wqr4QJrBkulvuWCbjTQqCXBtc3n9RQXWQZEDm6uCdCOjCO UKoie436D6E7pWiND9GNOTg1cnX+DYJCC8XRrI57tvA9miObrVfZYnWTNNrZ3+Nu VhCH1GrTGBmQWOdudSDfGaGacsfQH2eHex//5YpOPsJ+4N56ctEF2AphNwYiR3Pm NyFOwNAyeuU+UWPL19a0c/tkwBtQgaShakVbUbywZrvNUAR4JwGs3IyGUrh6iJlx 3+ZCBIMwA+fVYMYERgT+qk2Fba5yJvsdoFd2UgRXRBXVkcALrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOt/84rGed2DE7jEveIdw5nK1PoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDNjZjQ2OGQtYzllOC0z OTIxLTg2YTctYWMyOGU1ZTk3MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi3p2Gy+uXxPW/m6hhDyW0pLuve5NflYWUmsF7FwuQaT8kz9NgTRI5C qYsGKhDH1jzNnkXizTeZ6RyrUZ1Q4Igy8PjTByKXlq1EOpt+/vF9244t7haSxJwV nHXnE3Dc0fLmcxA6uG3XFyEJiMmMrUzehHGPYiDLg7WudpLi9GP6r+vnXguHjll/ BfJx/T+WbxM67TDcAjAI+abDjAIroxkmSqKT7lNH3Y4LMSrlh+61m00RDc1ZlJ7u iCRQmV7DAoFblIdwePql4/LOu19DBBPgVMFxtqheVwWJ7j8GqVYhZJPB1h3FpNHu KanoYL8Pj3uUUna/M1sw4zQHnTpqohc= -----END CERTIFICATE-----Generated at Tue Sep 22 21:08:52 2026 by rpki-client