$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/288e5888-701b-3c69-befc-6939fe024b3b.roa File: 288e5888-701b-3c69-befc-6939fe024b3b.roa (raw, json) Hash identifier: v+7ATDLivMcTKTktK3Q7/H7Bl7dK6Q59NqhEJo25zjA= Subject key identifier: 72:3A:A8:C1:94:59:87:E9:58:52:A4:94:C5:35:9E:5A:A0:0B:A2:94 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8128724428F853E2937C2800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/288e5888-701b-3c69-befc-6939fe024b3b.roa Signing time: Tue 14 Apr 2026 14:22:21 +0000 ROA not before: Tue 14 Apr 2026 14:22:21 +0000 ROA not after: Mon 13 Jul 2026 14:22:21 +0000 asID: 397202 IP address blocks: 199.7.76.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:72:44:28:f8:53:e2:93:7c:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:21 2026 GMT Not After : Jul 13 14:22:21 2026 GMT Subject: CN=4cf483a2-904d-4ef6-b280-74e2d233e390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:26:6b:bf:79:e5:0d:d0:1a:48:9e:e7:44: 00:b9:32:f9:f6:43:7f:4e:e9:4c:43:64:0c:48:21: 2d:34:27:7e:7c:c8:9d:c4:b2:a5:cf:35:d8:0a:a5: 1b:b5:24:cf:4d:ec:20:3a:5b:ad:21:1f:ec:f6:1e: 58:c9:4d:d8:6b:1b:04:34:1a:49:cd:16:e9:2b:28: e0:47:e9:4a:ac:93:fc:aa:0f:13:06:78:53:98:8c: 02:3e:50:bf:9e:22:7e:26:fa:d5:0c:78:fc:63:7e: 27:8b:f5:dd:39:9a:1e:df:e6:fb:8b:cd:65:9a:e8: 4e:7d:57:d4:38:5d:1b:1b:42:8a:48:95:1d:70:4d: a7:28:53:f9:c4:ed:2d:ee:2a:12:c6:04:e1:e5:40: 49:bc:f1:19:09:26:9f:f6:81:9a:b7:f7:d0:f7:ba: 8c:99:5f:0d:f3:b0:44:12:d3:8d:53:c6:47:09:98: d3:6b:c0:c3:20:d8:35:d4:17:e1:df:67:17:85:30: 8c:8c:58:88:ea:db:c1:44:c9:71:82:03:e1:1e:28: 89:59:8b:7c:1b:3f:1c:fd:10:9a:f5:4f:1d:5f:3c: 25:d8:cc:8b:42:a9:c5:57:09:12:55:7d:80:c3:81: 0f:bb:70:17:26:c8:49:4c:01:40:78:9f:c0:60:34: d3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3A:A8:C1:94:59:87:E9:58:52:A4:94:C5:35:9E:5A:A0:0B:A2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/288e5888-701b-3c69-befc-6939fe024b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7e:49:80:0e:97:53:55:a6:9a:f6:d0:33:7c:f8:09:13:f7: d9:ef:9b:3f:9e:6c:89:20:be:41:e4:57:02:4b:1e:2c:36:bd: 9b:4c:46:6f:41:68:8f:b2:8c:42:75:c5:99:9c:87:59:a6:08: 14:cd:e0:a5:a1:ce:79:c5:73:e7:6f:c8:1f:79:cd:4c:38:40: 7f:f2:c6:33:08:2d:fc:a5:cf:68:5f:58:30:ed:aa:6c:43:ac: af:a7:81:5a:aa:e3:06:f6:1b:b9:11:63:41:43:fa:46:5c:e1: 4d:b3:18:bf:bc:f4:f2:89:51:2b:e3:ca:39:b2:73:44:9c:2d: 83:34:5b:05:3f:c9:3c:cc:4b:59:ea:9a:79:db:00:28:1d:85: e4:98:6a:11:5d:c2:57:53:85:55:81:ec:ef:1b:54:6a:ec:7b: 3c:93:71:fb:8a:66:ad:50:c0:69:f6:9a:81:b1:0b:f2:96:74: 02:5a:76:c1:ce:47:bf:31:22:15:f3:74:99:40:92:2c:b1:3c: d4:06:cc:ff:97:43:7f:c6:76:31:2b:4a:0c:eb:e6:36:a8:1a: 83:55:e1:b0:20:a1:f8:2c:29:01:57:b1:05:f5:74:8e:8a:4f: 14:ea:0d:d5:a7:d5:dd:5d:7d:40:fc:3a:f4:75:69:a1:bf:36: 56:24:23:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKHJEKPhT4pN8KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIyMVoXDTI2MDcxMzE0MjIyMVowLzEtMCsGA1UEAxMk NGNmNDgzYTItOTA0ZC00ZWY2LWIyODAtNzRlMmQyMzNlMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDAma7955Q3QGkie50QAuTL59kN/TulMQ2QM SCEtNCd+fMidxLKlzzXYCqUbtSTPTewgOlutIR/s9h5YyU3YaxsENBpJzRbpKyjg R+lKrJP8qg8TBnhTmIwCPlC/niJ+JvrVDHj8Y34ni/XdOZoe3+b7i81lmuhOfVfU OF0bG0KKSJUdcE2nKFP5xO0t7ioSxgTh5UBJvPEZCSaf9oGat/fQ97qMmV8N87BE EtONU8ZHCZjTa8DDINg11Bfh32cXhTCMjFiI6tvBRMlxggPhHiiJWYt8Gz8c/RCa 9U8dXzwl2MyLQqnFVwkSVX2Aw4EPu3AXJshJTAFAeJ/AYDTTpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHI6qMGUWYfpWFKklMU1nlqgC6KUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg4ZTU4ODgtNzAxYi0z YzY5LWJlZmMtNjkzOWZlMDI0YjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6fkmADpdTVaaa9tAzfPgJE/fZ75s/nmyJIL5B5FcCSx4sNr2bTEZv QWiPsoxCdcWZnIdZpggUzeCloc55xXPnb8gfec1MOEB/8sYzCC38pc9oX1gw7aps Q6yvp4FaquMG9hu5EWNBQ/pGXOFNsxi/vPTyiVEr48o5snNEnC2DNFsFP8k8zEtZ 6pp52wAoHYXkmGoRXcJXU4VVgezvG1Rq7Hs8k3H7imatUMBp9pqBsQvylnQCWnbB zke/MSIV83SZQJIssTzUBsz/l0N/xnYxK0oM6+Y2qBqDVeGwIKH4LCkBV7EF9XSO ik8U6g3Vp9XdXX1A/Dr0dWmhvzZWJCOV -----END CERTIFICATE-----Generated at Fri Apr 17 03:55:28 2026 by rpki-client