$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17313bdf-e270-3611-b041-cbca942ee5f3.roa File: 17313bdf-e270-3611-b041-cbca942ee5f3.roa (raw, json) Hash identifier: tlqV7TIMZptpWvxYrd9Z+29xuQnJue71gggU2JPF0lc= Subject key identifier: 65:99:E5:FA:90:60:B5:B3:84:6F:5F:C8:81:45:13:14:70:7B:C1:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81286F40BAE077159EDE66E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17313bdf-e270-3611-b041-cbca942ee5f3.roa Signing time: Tue 14 Apr 2026 14:22:19 +0000 ROA not before: Tue 14 Apr 2026 14:22:19 +0000 ROA not after: Mon 13 Jul 2026 14:22:19 +0000 asID: 396610 IP address blocks: 199.7.76.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:6f:40:ba:e0:77:15:9e:de:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:19 2026 GMT Not After : Jul 13 14:22:19 2026 GMT Subject: CN=13f67b41-b9f2-49eb-8ff1-3c046e70cfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:41:f9:d2:0f:6e:d6:71:09:f2:52:c3:b9: 40:47:94:d4:b5:35:02:a3:5f:c3:20:67:44:81:97: 50:5e:50:32:93:5a:05:a6:6c:c9:f5:ab:19:48:65: a8:ce:95:1b:51:c9:8c:9a:49:ef:ed:05:1a:32:27: 0a:7b:74:f6:cd:d8:5c:83:f9:c2:b0:b5:a5:38:ac: 34:93:f7:db:bf:64:27:b4:64:bc:b4:24:2c:31:97: d7:e0:84:6f:d9:d7:e8:16:27:17:ee:8d:86:32:21: 03:b8:32:40:4d:c6:07:67:1c:b3:f8:d3:dc:7a:b5: 16:5d:81:ec:92:f7:91:bc:0e:6f:06:45:bc:10:bc: dc:28:38:1d:69:62:33:d1:9d:ca:5c:86:38:50:47: 0b:90:55:f7:ae:fd:dd:ad:28:21:fa:c1:f3:d8:90: 93:19:2c:aa:24:dc:5c:35:1c:bb:1f:cc:44:3b:c0: a2:a3:da:52:45:1f:2d:a5:94:3d:ec:13:aa:64:bf: 58:3a:32:61:5e:75:94:9e:ac:e2:6d:6e:a8:d5:0e: 1f:93:79:cd:50:23:9c:6d:2e:e0:59:c8:9d:f6:46: e2:75:46:81:c2:dd:cd:2d:45:8b:33:80:58:22:68: 22:e1:79:4f:df:06:2a:67:41:16:53:21:c9:d8:19: 0a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:99:E5:FA:90:60:B5:B3:84:6F:5F:C8:81:45:13:14:70:7B:C1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17313bdf-e270-3611-b041-cbca942ee5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:54:4f:53:34:e1:2b:27:e1:71:45:4a:6b:ea:da:63:9c:d1: ba:00:2b:f7:c7:15:2c:3a:2f:6a:73:fd:95:07:0a:c8:43:2f: 9a:58:0b:ee:87:48:b4:af:07:0a:95:19:1a:18:64:79:c9:57: 00:ef:48:bc:15:4d:f2:a8:cf:97:ed:d9:d7:3d:78:31:e8:df: 4a:52:17:74:27:19:c9:7b:1c:4b:ba:82:79:df:cb:16:61:30: 9b:55:14:95:11:47:df:2d:75:1f:87:cf:a2:14:f3:0f:7a:09: 1e:88:df:57:63:10:75:50:ed:cb:7a:e4:66:d3:5a:f4:f7:b6: 1c:7c:c6:95:63:d7:7c:a3:c9:59:a8:87:65:e4:2b:a6:5a:6f: 29:31:48:2b:ed:9c:6a:eb:57:97:98:b0:78:9e:9a:62:c0:ea: 1c:8e:30:50:e2:0d:e6:76:0f:f3:1c:c1:db:db:ff:f2:ae:61: b4:8d:d9:f8:d0:0e:2c:c2:d1:36:19:3f:ee:18:da:da:73:72: 4b:3b:07:10:50:fb:2d:f2:2a:d0:36:37:78:dc:79:f1:8e:d3: 6d:a5:67:99:36:92:fc:33:4e:a5:0a:c1:bb:c5:5d:bf:35:83: 97:7c:43:17:27:5b:24:f7:f9:e7:54:45:fc:96:98:a3:26:32: cf:d3:ff:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKG9AuuB3FZ7eZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxOVoXDTI2MDcxMzE0MjIxOVowLzEtMCsGA1UEAxMk MTNmNjdiNDEtYjlmMi00OWViLThmZjEtM2MwNDZlNzBjZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoxB+dIPbtZxCfJSw7lAR5TUtTUCo1/DIGdE gZdQXlAyk1oFpmzJ9asZSGWozpUbUcmMmknv7QUaMicKe3T2zdhcg/nCsLWlOKw0 k/fbv2QntGS8tCQsMZfX4IRv2dfoFicX7o2GMiEDuDJATcYHZxyz+NPcerUWXYHs kveRvA5vBkW8ELzcKDgdaWIz0Z3KXIY4UEcLkFX3rv3drSgh+sHz2JCTGSyqJNxc NRy7H8xEO8Cio9pSRR8tpZQ97BOqZL9YOjJhXnWUnqzibW6o1Q4fk3nNUCOcbS7g Wcid9kbidUaBwt3NLUWLM4BYImgi4XlP3wYqZ0EWUyHJ2BkKXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGWZ5fqQYLWzhG9fyIFFExRwe8F5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTczMTNiZGYtZTI3MC0z NjExLWIwNDEtY2JjYTk0MmVlNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqVE9TNOErJ+FxRUpr6tpjnNG6ACv3xxUsOi9qc/2VBwrIQy+aWAvu h0i0rwcKlRkaGGR5yVcA70i8FU3yqM+X7dnXPXgx6N9KUhd0JxnJexxLuoJ538sW YTCbVRSVEUffLXUfh8+iFPMPegkeiN9XYxB1UO3LeuRm01r097YcfMaVY9d8o8lZ qIdl5CumWm8pMUgr7Zxq61eXmLB4nppiwOocjjBQ4g3mdg/zHMHb2//yrmG0jdn4 0A4swtE2GT/uGNrac3JLOwcQUPst8irQNjd43HnxjtNtpWeZNpL8M06lCsG7xV2/ NYOXfEMXJ1sk9/nnVEX8lpijJjLP0/9P -----END CERTIFICATE-----Generated at Fri Apr 17 10:17:32 2026 by rpki-client