$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4d4c82-7804-332c-9584-a990b4d5321e.roa File: 3c4d4c82-7804-332c-9584-a990b4d5321e.roa (raw, json) Hash identifier: TxLZDIDJiTpnH5DQU5ppJIoULpZXbeI3awHvI+lynok= Subject key identifier: 3A:A9:A7:FC:9D:A4:3D:84:02:82:12:87:7F:D3:18:42:55:B2:DE:D9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF18225E44F0F287473588D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4d4c82-7804-332c-9584-a990b4d5321e.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 396590 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:25:e4:4f:0f:28:74:73:58:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=8c351c80-d987-4789-91c3-9590280358ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:ef:15:15:2b:a2:e7:ce:ea:d1:d6:11:43: 66:01:52:93:2d:0d:a6:22:69:d4:1b:f7:2e:81:68: d7:2c:4c:cd:e2:69:7f:0a:83:20:cf:0e:05:4c:d3: 4b:4f:54:62:9c:c8:c2:a4:ff:f7:90:ef:d7:bb:e4: 47:f7:f2:05:75:10:4d:b9:92:1a:93:41:87:e8:77: 62:51:47:1d:f9:48:54:07:54:3a:83:2f:77:88:51: 02:4e:c3:36:08:86:ac:a8:c1:c2:d1:9f:81:a9:d6: ec:57:8e:2b:dc:6e:b9:14:95:35:68:5d:93:7b:c5: 76:44:40:90:0b:70:d4:a9:a9:27:c9:30:4f:2b:db: f5:64:0b:a8:20:8d:85:07:4c:50:d8:28:7d:c8:7e: f4:8e:01:df:ff:cf:2f:85:36:5e:c8:bd:67:f9:a8: 3b:c8:58:f1:1c:53:fe:b8:32:da:a1:f7:de:9e:ae: f4:46:9b:8e:08:79:7c:1c:d7:d2:d7:f9:66:41:e2: 4c:53:9f:3b:f6:52:93:44:38:15:0d:24:06:d1:33: 51:ee:4a:37:9f:7e:c8:ce:6c:a3:9f:51:af:42:b0: ec:30:84:ad:83:00:0e:b0:17:aa:ed:4e:f5:10:da: fd:10:c9:51:70:2b:6a:29:14:53:a8:82:6e:8f:64: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:A7:FC:9D:A4:3D:84:02:82:12:87:7F:D3:18:42:55:B2:DE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4d4c82-7804-332c-9584-a990b4d5321e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:93:1f:33:46:9c:91:87:e4:43:1a:88:bf:2f:80:5f:25:f2: d9:0d:34:d7:4f:12:62:87:71:9c:36:af:5c:2a:ff:c1:f5:e4: 31:19:be:61:14:33:6f:23:10:d9:bf:15:64:a1:b1:e7:d1:55: fc:33:9e:72:80:02:c8:6c:04:e9:39:4e:df:72:80:c4:ff:18: 18:96:f0:25:19:3e:e8:7a:5f:8d:05:27:42:3e:65:02:c8:9a: cc:44:42:82:27:e1:9e:97:91:e2:22:7a:1a:d9:22:4a:7e:aa: f3:cb:11:c9:be:00:e2:5a:e7:e1:f9:bb:27:e8:36:cf:1d:a6: b9:66:e5:38:58:39:74:9a:b9:59:3c:3d:18:a6:3b:0b:ac:76: 12:ef:1b:c5:b5:2d:8b:63:a2:1a:5e:40:ee:5d:ad:99:bb:eb: 8f:8f:c4:2d:17:a3:f1:19:f1:bd:93:f8:03:ff:48:30:91:ec: a1:4a:0d:4e:2f:a6:88:70:fb:9b:98:99:3d:2b:89:e6:86:b1: d8:31:88:5b:db:40:3c:cd:42:c7:e4:6e:bf:15:9c:7c:62:39: d2:91:d8:3e:89:41:b4:75:bd:cf:5d:fe:de:3d:9e:f6:81:42: 2f:e7:82:fe:70:0f:d7:33:42:1f:f8:ff:94:e4:45:ad:7f:53: 90:ff:fe:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgiXkTw8odHNYjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OGMzNTFjODAtZDk4Ny00Nzg5LTkxYzMtOTU5MDI4MDM1OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30nvFRUroufO6tHWEUNmAVKTLQ2mImnUG/cu gWjXLEzN4ml/CoMgzw4FTNNLT1RinMjCpP/3kO/Xu+RH9/IFdRBNuZIak0GH6Hdi UUcd+UhUB1Q6gy93iFECTsM2CIasqMHC0Z+BqdbsV44r3G65FJU1aF2Te8V2RECQ C3DUqaknyTBPK9v1ZAuoII2FB0xQ2Ch9yH70jgHf/88vhTZeyL1n+ag7yFjxHFP+ uDLaoffenq70RpuOCHl8HNfS1/lmQeJMU5879lKTRDgVDSQG0TNR7ko3n37Izmyj n1GvQrDsMIStgwAOsBeq7U71ENr9EMlRcCtqKRRTqIJuj2T6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqpp/ydpD2EAoISh3/TGEJVst7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M0ZDRjODItNzgwNC0z MzJjLTk1ODQtYTk5MGI0ZDUzMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCTHzNGnJGH5EMaiL8vgF8l8tkNNNdPEmKHcZw2r1wq/8H15DEZvmEU M28jENm/FWShsefRVfwznnKAAshsBOk5Tt9ygMT/GBiW8CUZPuh6X40FJ0I+ZQLI msxEQoIn4Z6XkeIiehrZIkp+qvPLEcm+AOJa5+H5uyfoNs8dprlm5ThYOXSauVk8 PRimOwusdhLvG8W1LYtjohpeQO5drZm764+PxC0Xo/EZ8b2T+AP/SDCR7KFKDU4v pohw+5uYmT0rieaGsdgxiFvbQDzNQsfkbr8VnHxiOdKR2D6JQbR1vc9d/t49nvaB Qi/ngv5wD9czQh/4/5TkRa1/U5D//rk= -----END CERTIFICATE-----Generated at Mon Sep 21 13:13:34 2026 by rpki-client