$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f9c7429-a3d8-3a67-b6aa-b19987966624.roa File: 3f9c7429-a3d8-3a67-b6aa-b19987966624.roa (raw, json) Hash identifier: xmtmO8AaO+/uwnDhbdyvcZ3AieKp/QC2VQKmxXzzSwU= Subject key identifier: 20:3E:9B:7A:48:CD:04:AA:11:EF:D3:C8:F9:60:04:C9:03:50:F1:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D812860F1C9DFE3A44C657400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f9c7429-a3d8-3a67-b6aa-b19987966624.roa Signing time: Tue 14 Apr 2026 14:22:13 +0000 ROA not before: Tue 14 Apr 2026 14:22:13 +0000 ROA not after: Mon 13 Jul 2026 14:22:13 +0000 asID: 396581 IP address blocks: 199.7.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:60:f1:c9:df:e3:a4:4c:65:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:13 2026 GMT Not After : Jul 13 14:22:13 2026 GMT Subject: CN=8936c0e4-7472-4aad-8079-826b940e3855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:ef:5d:db:c6:ae:30:90:6a:66:0a:ea:a8: 4f:cb:de:30:ee:1c:e3:fc:58:17:be:67:a7:16:f5: 97:de:64:98:57:c5:57:04:e0:c7:3d:18:ef:f8:f5: 5a:b7:d1:28:60:5b:39:0c:ef:ed:12:e9:de:2f:17: 74:67:24:e3:13:da:c9:1a:4d:8f:36:09:93:fb:cb: 0e:79:d1:06:15:3a:7c:44:3f:aa:e8:a2:35:a4:8f: 68:a5:3f:ff:a2:64:2b:c2:3f:1f:8c:b4:43:cf:69: c5:2d:de:aa:7c:7a:7d:0d:14:ad:85:dd:13:a4:fc: 7a:9a:ec:53:fe:05:88:01:9a:04:f1:fc:28:7b:36: 14:9d:05:ab:b4:82:56:92:25:20:7e:ed:cf:a2:8e: 36:a2:02:ac:1e:2f:fa:ff:90:73:eb:f7:b6:0e:48: ef:71:d1:e1:35:b7:a7:bb:2f:1a:df:0b:1b:63:01: 4d:c5:20:17:81:6b:97:95:c6:43:66:3c:f7:f1:ac: 05:23:af:15:69:7f:1d:87:d5:2c:c8:ee:43:3e:ee: f7:3d:0a:7e:d3:16:e6:91:68:fc:82:32:ea:67:7b: a9:31:95:ec:bf:bc:a9:fe:37:05:e6:85:17:0f:a2: e6:ac:ac:27:4b:06:15:b2:fd:64:8a:17:6c:35:0c: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3E:9B:7A:48:CD:04:AA:11:EF:D3:C8:F9:60:04:C9:03:50:F1:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f9c7429-a3d8-3a67-b6aa-b19987966624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:03:fc:92:ba:a5:85:0d:9c:9f:04:98:62:32:91:62:57:95: 50:b0:2d:4e:f6:c8:de:c2:4d:11:ed:b5:03:72:75:84:02:87: db:cd:b8:3e:44:c5:3f:3f:6a:ec:16:18:4c:ec:3c:ba:0e:11: 48:c4:9e:f2:51:60:7b:de:5f:45:f8:59:df:64:dc:21:af:29: 74:89:82:ab:e9:84:cb:c2:1c:af:cd:42:0a:0b:99:f3:a5:5a: 4e:bf:07:33:8f:5c:da:b5:f5:f3:6d:c5:78:d6:bc:6f:e5:40: 5c:47:90:cc:e0:7e:a3:9b:b7:c8:68:6f:ef:cc:43:b8:2a:05: 23:9f:5e:57:55:53:ed:5d:42:73:50:f5:1c:b5:db:68:e0:82: b1:1d:4e:f1:d3:42:04:64:f0:24:62:c2:89:fc:84:97:b7:aa: d2:81:ce:dc:db:14:d3:a0:59:d0:ce:9c:56:a8:da:cd:69:65: 60:94:82:61:e4:f7:d9:b1:37:57:fe:73:1d:f7:b5:fb:47:35: 14:8f:b8:06:f1:43:27:81:92:5a:a7:e9:a5:0e:61:1e:c6:eb: 0e:e1:c4:72:33:de:56:9b:5f:51:57:06:07:62:53:88:8f:96: 57:6e:55:41:09:ec:97:d6:f4:67:1a:71:e1:8e:c3:bd:b1:60: c0:39:54:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BKGDxyd/jpExldAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxM1oXDTI2MDcxMzE0MjIxM1owLzEtMCsGA1UEAxMk ODkzNmMwZTQtNzQ3Mi00YWFkLTgwNzktODI2Yjk0MGUzODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM/vXdvGrjCQamYK6qhPy94w7hzj/FgXvmen FvWX3mSYV8VXBODHPRjv+PVat9EoYFs5DO/tEuneLxd0ZyTjE9rJGk2PNgmT+8sO edEGFTp8RD+q6KI1pI9opT//omQrwj8fjLRDz2nFLd6qfHp9DRSthd0TpPx6muxT /gWIAZoE8fwoezYUnQWrtIJWkiUgfu3Poo42ogKsHi/6/5Bz6/e2DkjvcdHhNben uy8a3wsbYwFNxSAXgWuXlcZDZjz38awFI68VaX8dh9UsyO5DPu73PQp+0xbmkWj8 gjLqZ3upMZXsv7yp/jcF5oUXD6LmrKwnSwYVsv1kihdsNQy6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA+m3pIzQSqEe/TyPlgBMkDUPGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y5Yzc0MjktYTNkOC0z YTY3LWI2YWEtYjE5OTg3OTY2NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsD/JK6pYUNnJ8EmGIykWJXlVCwLU72yN7CTRHttQNydYQCh9vNuD5E xT8/auwWGEzsPLoOEUjEnvJRYHveX0X4Wd9k3CGvKXSJgqvphMvCHK/NQgoLmfOl Wk6/BzOPXNq19fNtxXjWvG/lQFxHkMzgfqObt8hob+/MQ7gqBSOfXldVU+1dQnNQ 9Ry122jggrEdTvHTQgRk8CRiwon8hJe3qtKBztzbFNOgWdDOnFao2s1pZWCUgmHk 99mxN1f+cx33tftHNRSPuAbxQyeBklqn6aUOYR7G6w7hxHIz3labX1FXBgdiU4iP llduVUEJ7JfW9GcaceGOw72xYMA5VAs= -----END CERTIFICATE-----Generated at Fri Apr 17 14:52:18 2026 by rpki-client