$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cf9feb4-0d06-3f08-b835-425f470b5390.roa File: 4cf9feb4-0d06-3f08-b835-425f470b5390.roa (raw, json) Hash identifier: 4RoABc+822zpPtKYIFkNsLVz+3yIEbnN3KDj88Thlk0= Subject key identifier: 2F:AB:17:63:1A:17:C4:A8:6F:A4:37:0C:36:E5:B1:DB:5F:76:B2:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF18216BADBBFDD43C47C16C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cf9feb4-0d06-3f08-b835-425f470b5390.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 396552 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:16:ba:db:bf:dd:43:c4:7c:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=b6dc2fb4-1a8f-430e-9ac8-005211f44497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:33:96:72:44:bc:5f:26:bc:77:99:78:8a:b6: 75:35:fe:58:9b:7b:79:5b:7a:a8:02:50:a2:f0:39: c7:45:a4:13:2b:27:6e:fd:fd:18:bc:85:4c:a2:3c: 54:6f:a9:58:62:73:7e:0d:34:84:33:e7:01:11:d5: 52:c7:c2:96:97:d6:aa:b9:5e:71:48:15:45:cf:6d: 7e:37:1a:d4:be:91:7b:f3:76:76:98:c1:9c:7c:31: d2:60:f3:61:1e:b8:fe:d4:71:3d:d8:e7:e8:16:53: c6:0a:6e:03:cd:aa:45:71:9b:96:ef:41:70:dd:e2: 68:9c:5d:93:80:09:84:87:55:d0:e9:16:6c:b3:36: 31:7b:e8:25:29:3e:f2:87:e8:94:1b:94:e9:d9:a0: 92:8a:fc:45:18:dd:59:25:5c:1e:be:7d:f7:c7:86: 8a:c0:e9:88:f5:36:60:87:cb:dc:6c:f9:4a:82:ab: bd:2b:38:1a:4d:50:02:ac:32:98:c0:0b:6f:ea:88: 3e:0c:c1:36:8f:65:17:5b:dc:a3:39:d7:cf:2a:ea: 95:38:10:16:98:10:a8:99:bb:e1:45:81:2e:4d:c6: e7:b7:d0:6b:e5:d3:6d:82:37:24:28:1a:35:ee:19: 79:7e:f0:62:2a:36:84:e1:45:10:eb:ef:23:44:28: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AB:17:63:1A:17:C4:A8:6F:A4:37:0C:36:E5:B1:DB:5F:76:B2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cf9feb4-0d06-3f08-b835-425f470b5390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1b:e1:36:11:30:fe:66:2e:72:1d:72:7b:37:45:54:7b:f1: 2e:3d:94:35:dc:a4:94:69:ba:a1:33:2e:29:f9:c5:28:a4:02: 4b:86:6b:d5:25:0b:68:96:3f:21:84:74:21:0d:df:58:f3:f4: 92:d7:ae:74:d8:1a:5e:27:69:45:01:5a:3b:c0:c1:a5:d8:66: 33:69:70:8d:2b:a7:d0:86:cf:d3:81:ea:72:19:f1:68:ca:33: 5d:25:a0:06:b0:3a:5d:99:fe:26:a3:54:20:67:3d:2c:4a:fe: a5:ba:2c:32:b6:23:01:06:b2:a6:80:5c:7f:eb:fb:58:29:9c: c8:f8:c5:e0:4c:5a:62:d2:32:b0:bc:a8:46:35:b7:a8:ef:c1: e4:22:ae:98:3a:42:95:46:c1:7e:7f:98:7c:d1:fa:6c:e6:e0: 3f:b5:50:05:68:8d:e3:59:11:6a:fd:9c:af:2a:23:77:17:35: da:03:a6:8e:14:67:bf:e9:25:65:ed:aa:f5:01:06:d1:ec:43: 44:7e:01:48:f7:1a:2d:4b:9b:31:27:3e:83:e9:be:2a:dd:9f: 79:c0:f7:54:11:0e:7f:85:64:ba:72:fa:57:e9:82:b5:54:26: 95:d0:8d:8a:67:8d:05:d4:ee:4b:7d:e3:8b:59:1c:24:dc:1c: 6c:b4:09:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7xgha627/dQ8R8FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YjZkYzJmYjQtMWE4Zi00MzBlLTlhYzgtMDA1MjExZjQ0NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTOWckS8Xya8d5l4irZ1Nf5Ym3t5W3qoAlCi 8DnHRaQTKydu/f0YvIVMojxUb6lYYnN+DTSEM+cBEdVSx8KWl9aquV5xSBVFz21+ NxrUvpF783Z2mMGcfDHSYPNhHrj+1HE92OfoFlPGCm4DzapFcZuW70Fw3eJonF2T gAmEh1XQ6RZsszYxe+glKT7yh+iUG5Tp2aCSivxFGN1ZJVwevn33x4aKwOmI9TZg h8vcbPlKgqu9KzgaTVACrDKYwAtv6og+DME2j2UXW9yjOdfPKuqVOBAWmBCombvh RYEuTcbnt9Br5dNtgjckKBo17hl5fvBiKjaE4UUQ6+8jRChnHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC+rF2MaF8Sob6Q3DDblsdtfdrJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNmOWZlYjQtMGQwNi0z ZjA4LWI4MzUtNDI1ZjQ3MGI1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+G+E2ETD+Zi5yHXJ7N0VUe/EuPZQ13KSUabqhMy4p+cUopAJLhmvV JQtolj8hhHQhDd9Y8/SS16502BpeJ2lFAVo7wMGl2GYzaXCNK6fQhs/TgepyGfFo yjNdJaAGsDpdmf4mo1QgZz0sSv6luiwytiMBBrKmgFx/6/tYKZzI+MXgTFpi0jKw vKhGNbeo78HkIq6YOkKVRsF+f5h80fps5uA/tVAFaI3jWRFq/ZyvKiN3FzXaA6aO FGe/6SVl7ar1AQbR7ENEfgFI9xotS5sxJz6D6b4q3Z95wPdUEQ5/hWS6cvpX6YK1 VCaV0I2KZ40F1O5LfeOLWRwk3BxstAkv -----END CERTIFICATE-----Generated at Sat Sep 26 16:30:15 2026 by rpki-client