$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67695a91-fa96-36eb-bb4d-73e4778580d6.roa File: 67695a91-fa96-36eb-bb4d-73e4778580d6.roa (raw, json) Hash identifier: /zbCalnLO9adbujIK9zrWaDjwoOEE9bK909LSRCv9xs= Subject key identifier: 76:44:A7:05:6A:76:92:AA:7B:36:AA:6B:81:E7:83:BF:15:A1:85:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6EDA82104207DC4C7C22CDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67695a91-fa96-36eb-bb4d-73e4778580d6.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 36629 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:82:10:42:07:dc:4c:7c:22:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=2f3cd339-649c-4773-9ca5-90f6bef28b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:44:08:2b:1b:d0:24:9b:9a:32:35:ed:43:b0: ac:42:33:19:48:1b:de:f9:14:5d:f3:9a:8b:05:0f: 72:55:3d:6d:a3:eb:c6:0a:1c:49:00:f1:4e:a8:1b: 6c:02:aa:e2:7d:9a:7d:61:c5:b9:a6:d6:25:79:50: 85:98:21:6d:7f:65:9b:90:d0:94:4f:ee:15:7c:62: 87:a3:2b:db:23:fe:44:aa:bf:2b:e5:a2:76:72:05: 72:ba:bd:97:df:e6:82:9e:e3:24:35:71:48:85:a7: db:d4:05:86:50:1b:b7:0d:18:25:4a:59:c6:c2:af: f5:c2:0f:84:32:0e:65:46:ce:8e:64:7b:6b:6e:1c: bd:39:e4:6a:68:02:3b:11:b8:01:38:c1:7a:53:36: 0e:58:48:d8:5a:b1:9c:7f:c2:3b:3f:b6:e1:04:cf: b1:0f:80:46:80:b9:11:71:59:ce:ef:fe:5c:c4:64: 77:a1:dc:18:36:7c:2e:cc:14:16:5f:b7:41:50:67: 7b:3e:d0:10:d4:f0:9d:6e:e1:21:81:aa:85:1a:ed: 47:20:da:72:c4:fd:f1:ee:aa:00:ee:31:74:8f:02: 3c:eb:06:cf:31:8c:b8:c6:35:1b:44:0c:1e:b2:d5: 9f:0f:f1:a7:5d:f7:7c:3a:04:10:f4:8e:81:ce:65: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:44:A7:05:6A:76:92:AA:7B:36:AA:6B:81:E7:83:BF:15:A1:85:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67695a91-fa96-36eb-bb4d-73e4778580d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a9:5b:9c:5b:3a:d6:cf:8c:04:6f:59:ca:b5:4c:bd:38:ba: f7:ba:22:63:4b:66:9d:4d:01:b5:96:e4:81:51:c3:1d:d1:44: 2f:b5:00:e7:21:89:db:96:95:d4:44:6b:ca:45:19:e1:7a:d6: 49:cb:40:67:95:0f:55:87:33:d4:12:52:d8:c9:dc:bf:a7:9b: fa:87:05:7e:28:08:c8:a5:84:85:41:0d:71:43:cb:2d:64:47: f2:fa:23:72:78:21:b7:09:5a:86:bd:cd:bc:51:f7:77:70:c3: bf:89:b1:28:ee:87:fc:6c:9d:31:73:1d:5c:25:21:d2:d6:8e: ea:eb:ac:b1:63:bf:f0:b5:a9:d7:f5:9a:1b:32:f0:1b:7b:ee: d8:a1:6b:32:11:82:be:21:68:ba:de:85:72:71:43:d1:ce:90: 1e:b0:b4:68:91:0a:41:79:5b:2d:80:c8:69:39:d9:52:ac:0b: 24:b6:ed:1f:e3:b5:05:76:0c:8c:ff:46:d0:7e:8e:46:e9:06: d6:e2:c9:59:a8:ca:f2:17:cd:45:ee:35:0b:0c:49:87:eb:7e: 6f:fc:50:1e:85:2b:e1:65:7e:2e:96:7b:e5:88:00:da:45:38: f6:fe:43:d4:49:c6:9b:3d:12:d9:1f:c8:28:67:5a:05:de:1b: 9a:a0:8c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2oIQQgfcTHwizcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MmYzY2QzMzktNjQ5Yy00NzczLTljYTUtOTBmNmJlZjI4YjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUQIKxvQJJuaMjXtQ7CsQjMZSBve+RRd85qL BQ9yVT1to+vGChxJAPFOqBtsAqrifZp9YcW5ptYleVCFmCFtf2WbkNCUT+4VfGKH oyvbI/5Eqr8r5aJ2cgVyur2X3+aCnuMkNXFIhafb1AWGUBu3DRglSlnGwq/1wg+E Mg5lRs6OZHtrbhy9OeRqaAI7EbgBOMF6UzYOWEjYWrGcf8I7P7bhBM+xD4BGgLkR cVnO7/5cxGR3odwYNnwuzBQWX7dBUGd7PtAQ1PCdbuEhgaqFGu1HINpyxP3x7qoA 7jF0jwI86wbPMYy4xjUbRAwestWfD/GnXfd8OgQQ9I6BzmUlbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZEpwVqdpKqezaqa4Hng78VoYVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjc2OTVhOTEtZmE5Ni0z NmViLWJiNGQtNzNlNDc3ODU4MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKpW5xbOtbPjARvWcq1TL04uve6ImNLZp1NAbWW5IFRwx3RRC+1AOch iduWldREa8pFGeF61knLQGeVD1WHM9QSUtjJ3L+nm/qHBX4oCMilhIVBDXFDyy1k R/L6I3J4IbcJWoa9zbxR93dww7+JsSjuh/xsnTFzHVwlIdLWjurrrLFjv/C1qdf1 mhsy8Bt77tihazIRgr4haLrehXJxQ9HOkB6wtGiRCkF5Wy2AyGk52VKsCyS27R/j tQV2DIz/RtB+jkbpBtbiyVmoyvIXzUXuNQsMSYfrfm/8UB6FK+Flfi6We+WIANpF OPb+Q9RJxps9EtkfyChnWgXeG5qgjKc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:19:13 2026 by rpki-client