$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8731bf22-4260-32aa-a589-db0dff4e97a7.roa File: 8731bf22-4260-32aa-a589-db0dff4e97a7.roa (raw, json) Hash identifier: gmNRn8VZbs0eXs8pZ92oo0kHxxNOaunByVD0912aEOA= Subject key identifier: 44:60:96:07:EC:49:D3:A3:42:31:97:90:4D:52:2D:D3:17:B1:11:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF182176B0EFF27C88F22CD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8731bf22-4260-32aa-a589-db0dff4e97a7.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 396617 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:17:6b:0e:ff:27:c8:8f:22:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=b9c05ee2-d111-4f52-9439-2cc0f843820e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b5:e5:f4:de:96:9c:c8:79:0b:d5:1d:b8:82: e3:b6:ec:4d:c2:48:4d:5d:75:22:ac:25:3b:8a:c7: 75:0b:7c:f8:41:79:91:64:79:25:87:7b:04:03:92: 91:9d:ba:15:bb:c4:80:98:99:bb:c6:c8:5f:7f:cf: 64:08:8c:2f:48:42:a2:7e:78:ed:7b:bc:96:be:f5: 01:51:fd:96:01:72:c8:6e:a5:fa:cc:f2:e9:ec:28: d3:44:60:d7:b1:86:ba:c9:95:51:be:3c:99:73:bf: 3a:bc:35:f0:97:c8:6b:3b:84:43:54:d3:ab:ae:35: 96:6c:2d:47:93:94:39:4b:0b:15:ae:ba:e9:65:0e: f6:63:1d:fa:2c:d2:8e:c2:f7:6f:fa:40:4c:72:93: d1:78:4d:0c:7e:d3:f8:40:4d:e7:a0:bb:1d:8c:e6: 39:8e:df:0b:87:ef:23:f1:1c:0f:ea:1c:d9:25:23: 78:0b:55:c6:6d:f3:e9:2f:8c:e5:38:d1:98:a2:46: 0b:88:96:87:f0:9b:3a:d9:99:3c:96:6f:15:6f:9e: 2d:ac:81:37:0e:88:50:ed:5f:5c:a4:96:28:5c:39: 38:fa:bf:3b:b4:3e:f2:6b:45:2a:03:19:69:90:5d: fa:fe:62:79:e1:5a:de:7f:a1:bf:5a:34:44:eb:5f: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:60:96:07:EC:49:D3:A3:42:31:97:90:4D:52:2D:D3:17:B1:11:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8731bf22-4260-32aa-a589-db0dff4e97a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:af:55:5c:5d:1c:b7:64:6e:d6:a6:6d:7a:b1:98:f2:64:27: aa:c0:03:e1:dc:27:2d:a1:37:4e:00:fa:1b:67:15:5d:ce:c1: 9e:56:42:e0:6a:9e:ef:84:00:86:ea:cc:58:f8:23:e4:78:90: c1:3a:ae:db:04:ff:e1:ce:67:fd:a9:b7:5a:59:80:90:11:a9: 63:dc:28:d8:78:78:ea:f2:19:29:05:59:04:e3:89:5a:8c:43: 69:be:f6:02:25:9e:9c:5b:c9:51:a0:bd:b5:7d:85:00:eb:d7: 36:2e:49:36:d7:ec:fe:b3:b9:e8:4d:20:69:d6:f9:bf:3b:d9: 0c:c2:4d:f2:cf:65:c5:b4:2b:20:01:8d:b5:61:18:76:11:36: ff:31:59:83:42:86:f3:ec:7f:0d:68:db:27:5f:05:9c:61:8c: ee:b5:72:e0:ab:b2:51:22:4e:28:84:09:79:02:2f:dd:5d:6f: 80:cc:a1:6f:5f:48:41:f8:dc:b3:04:60:5a:1e:d5:63:0a:90: d2:72:79:12:20:8c:50:e1:f2:d5:74:7a:13:ad:f0:49:09:0d: a6:98:ec:dc:2d:97:0d:d1:99:12:f8:96:7c:22:92:ec:78:0c: e1:e1:93:b4:eb:47:ec:1e:78:99:bf:9e:63:92:e4:e2:a6:2e: b7:71:50:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xghdrDv8nyI8izQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YjljMDVlZTItZDExMS00ZjUyLTk0MzktMmNjMGY4NDM4MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLXl9N6WnMh5C9UduILjtuxNwkhNXXUirCU7 isd1C3z4QXmRZHklh3sEA5KRnboVu8SAmJm7xshff89kCIwvSEKifnjte7yWvvUB Uf2WAXLIbqX6zPLp7CjTRGDXsYa6yZVRvjyZc786vDXwl8hrO4RDVNOrrjWWbC1H k5Q5SwsVrrrpZQ72Yx36LNKOwvdv+kBMcpPReE0MftP4QE3noLsdjOY5jt8Lh+8j 8RwP6hzZJSN4C1XGbfPpL4zlONGYokYLiJaH8Js62Zk8lm8Vb54trIE3DohQ7V9c pJYoXDk4+r87tD7ya0UqAxlpkF36/mJ54Vref6G/WjRE61/7awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERglgfsSdOjQjGXkE1SLdMXsRH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODczMWJmMjItNDI2MC0z MmFhLWE1ODktZGIwZGZmNGU5N2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCvVVxdHLdkbtambXqxmPJkJ6rAA+HcJy2hN04A+htnFV3OwZ5WQuBq nu+EAIbqzFj4I+R4kME6rtsE/+HOZ/2pt1pZgJARqWPcKNh4eOryGSkFWQTjiVqM Q2m+9gIlnpxbyVGgvbV9hQDr1zYuSTbX7P6zuehNIGnW+b872QzCTfLPZcW0KyAB jbVhGHYRNv8xWYNChvPsfw1o2ydfBZxhjO61cuCrslEiTiiECXkCL91db4DMoW9f SEH43LMEYFoe1WMKkNJyeRIgjFDh8tV0ehOt8EkJDaaY7Nwtlw3RmRL4lnwikux4 DOHhk7TrR+weeJm/nmOS5OKmLrdxUJM= -----END CERTIFICATE-----Generated at Tue Sep 22 14:48:04 2026 by rpki-client