$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68a7bdfa-a579-3047-a05d-80d0c4b96027.roa File: 68a7bdfa-a579-3047-a05d-80d0c4b96027.roa (raw, json) Hash identifier: YR2zd61zbLIahLnG/yeEszhf65FqWj4PMOF+dVwuGlQ= Subject key identifier: C0:44:7F:25:CE:69:F4:80:F5:A3:E7:1D:70:FE:1A:07:30:43:0B:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF1821FAE506313547EDC5040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68a7bdfa-a579-3047-a05d-80d0c4b96027.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 396553 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:1f:ae:50:63:13:54:7e:dc:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=236f8b4c-c2be-45c2-9170-9c0d63385177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:b1:84:dc:17:cb:10:c7:76:e9:15:49:20: 3d:68:ba:05:5f:ac:b1:71:de:f9:d9:ba:2d:db:69: 42:64:aa:ef:be:f4:d0:74:7c:ef:b1:e4:71:c2:0c: b5:52:13:8c:85:b4:a2:3d:15:79:88:d7:fe:24:07: f7:08:81:89:d9:2b:46:f9:21:5e:e4:6b:99:39:90: 10:f4:78:77:fb:21:87:08:3b:fb:79:14:c5:ab:a7: a1:5b:c4:2b:82:75:29:99:dc:e6:f0:f9:44:05:50: 1a:d8:d1:6e:d3:61:3a:14:0d:f0:97:11:d5:88:e8: 4f:ca:f5:da:49:c3:bf:75:b3:e7:7e:c5:3b:f1:4f: aa:7c:54:8b:f0:56:34:cc:7e:80:31:64:73:50:6c: df:ed:b0:00:13:3c:be:38:3c:7a:9e:48:19:4a:99: 8d:cb:9c:6f:f4:23:6f:ff:10:99:e7:ba:56:d8:13: 28:77:d4:a4:7c:fb:2b:27:30:6d:ee:be:ab:7b:70: 98:76:a3:75:fa:d4:97:cf:0c:1e:70:b1:a1:91:92: 58:2b:d1:7b:d4:bc:1d:08:3c:b2:69:00:a3:6e:6d: 4a:44:7e:f0:9e:19:87:db:1d:12:da:88:2a:c5:8a: 42:32:7e:fa:1e:f8:f4:93:4b:0a:fc:18:3b:83:d5: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:44:7F:25:CE:69:F4:80:F5:A3:E7:1D:70:FE:1A:07:30:43:0B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68a7bdfa-a579-3047-a05d-80d0c4b96027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:81:d0:92:0b:b0:3c:09:cf:39:33:a1:7a:04:f6:c3:f8:c8: 4f:4b:79:24:6b:b1:23:64:26:85:89:b1:42:83:81:c9:da:bc: b8:9d:ba:58:76:a7:bd:59:ad:53:55:38:55:b6:1b:4e:68:d3: ce:f3:6e:2c:c6:f1:82:ef:ca:0d:ed:a2:d8:3e:3c:a6:73:92: 20:77:ff:2d:26:23:b3:94:6c:20:eb:f6:25:93:c6:88:c1:6d: 44:fe:81:b8:b8:46:ac:4d:ed:45:8e:56:c6:11:78:1c:e2:c1: be:c4:7b:cb:9c:7b:72:d9:51:f6:fa:b1:5c:5d:34:a1:bb:59: 0d:e7:b0:b0:da:3f:8c:da:87:96:22:d3:04:b7:c1:4d:6e:c8: 2b:51:66:87:4c:ae:74:23:2f:1c:f0:35:01:65:ed:8d:fe:c6: b6:f1:2b:01:83:90:bf:4f:d8:64:05:f3:16:a4:55:b1:3b:aa: ee:94:28:b1:f2:4e:ca:62:06:98:6f:43:d3:c6:12:bf:22:5d: 16:a0:30:36:80:2b:8c:ea:b2:af:91:b5:88:d8:b5:6c:18:c1: fa:d2:26:05:b2:fb:50:41:e0:93:a5:81:ce:10:63:63:69:ec: c2:9a:f9:72:b7:81:09:cf:af:b8:9d:c4:bd:2d:17:1c:54:48: 53:1c:3d:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7xgh+uUGMTVH7cUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MjM2ZjhiNGMtYzJiZS00NWMyLTkxNzAtOWMwZDYzMzg1MTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXqxhNwXyxDHdukVSSA9aLoFX6yxcd752bot 22lCZKrvvvTQdHzvseRxwgy1UhOMhbSiPRV5iNf+JAf3CIGJ2StG+SFe5GuZOZAQ 9Hh3+yGHCDv7eRTFq6ehW8QrgnUpmdzm8PlEBVAa2NFu02E6FA3wlxHViOhPyvXa ScO/dbPnfsU78U+qfFSL8FY0zH6AMWRzUGzf7bAAEzy+ODx6nkgZSpmNy5xv9CNv /xCZ57pW2BMod9SkfPsrJzBt7r6re3CYdqN1+tSXzwwecLGhkZJYK9F71LwdCDyy aQCjbm1KRH7wnhmH2x0S2ogqxYpCMn76Hvj0k0sK/Bg7g9VCVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMBEfyXOafSA9aPnHXD+GgcwQwvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjhhN2JkZmEtYTU3OS0z MDQ3LWEwNWQtODBkMGM0Yjk2MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCzgdCSC7A8Cc85M6F6BPbD+MhPS3kka7EjZCaFibFCg4HJ2ry4nbpY dqe9Wa1TVThVthtOaNPO824sxvGC78oN7aLYPjymc5Igd/8tJiOzlGwg6/Ylk8aI wW1E/oG4uEasTe1FjlbGEXgc4sG+xHvLnHty2VH2+rFcXTShu1kN57Cw2j+M2oeW ItMEt8FNbsgrUWaHTK50Iy8c8DUBZe2N/sa28SsBg5C/T9hkBfMWpFWxO6rulCix 8k7KYgaYb0PTxhK/Il0WoDA2gCuM6rKvkbWI2LVsGMH60iYFsvtQQeCTpYHOEGNj aezCmvlyt4EJz6+4ncS9LRccVEhTHD0h -----END CERTIFICATE-----Generated at Mon Sep 21 19:25:20 2026 by rpki-client