$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303518b-e7ad-365f-87bb-41815e34af4a.roa File: a303518b-e7ad-365f-87bb-41815e34af4a.roa (raw, json) Hash identifier: QL8cu45pt+MGCQUGq/gNd2lFEeYl8cF299zR7jDXF54= Subject key identifier: A6:8D:9E:49:04:75:1D:CD:27:E4:84:52:21:C1:28:3E:5A:D0:A3:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF1821AB095885DF88AA67240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303518b-e7ad-365f-87bb-41815e34af4a.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 396550 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:1a:b0:95:88:5d:f8:8a:a6:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=db4275a8-5215-4689-bea0-663aceb8e80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:57:e7:67:02:77:5c:dd:bf:e9:26:c0:99: 71:ee:d6:c4:a0:a3:c0:0b:11:b9:e1:e4:47:1a:04: 1a:1b:85:32:e6:5f:a9:94:30:89:06:0e:aa:56:e3: ec:01:1c:37:6f:f8:f7:af:7a:77:56:12:7f:a9:8b: aa:5c:65:58:49:8e:9c:8a:8b:53:89:6c:2b:9a:ce: d6:0a:3f:3e:2f:48:91:bc:32:ca:d4:79:ae:30:44: 72:9f:0d:0a:87:81:d9:51:57:b5:14:1b:57:37:c1: 24:8c:4a:25:a6:70:33:9c:44:33:fc:34:da:88:10: 4f:a8:93:7a:ac:0f:a8:de:d8:4b:71:db:be:4a:1a: 8f:7b:28:4f:5a:d3:a3:4e:90:9f:ca:e3:66:fe:c6: 58:7b:54:9a:cb:4c:4e:c9:5a:43:16:85:ed:5f:10: 2a:81:20:85:01:07:53:ed:f7:97:41:68:88:fc:bc: 43:d9:54:6a:91:66:0a:c9:96:0f:96:0f:29:c8:e4: 5f:62:5c:aa:9c:32:1c:0e:d7:52:a7:9e:65:ef:c6: 99:a6:f6:eb:ea:56:2e:bc:22:73:d7:8b:74:b0:00: ff:87:09:50:cd:70:06:03:23:66:00:8a:8c:0c:b1: 72:48:3c:a1:aa:02:fb:34:55:7e:26:6d:d9:ee:34: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8D:9E:49:04:75:1D:CD:27:E4:84:52:21:C1:28:3E:5A:D0:A3:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303518b-e7ad-365f-87bb-41815e34af4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:86:34:1c:d9:4b:60:72:f4:07:a0:27:8f:60:03:53:4a:e3: 4b:8d:ac:58:9a:bb:20:8e:c0:74:18:07:fc:2d:39:f9:ec:0f: 83:96:c7:2c:f5:6b:6f:04:66:d2:2f:7b:d6:01:6d:6f:59:5c: 1a:fc:fa:0b:db:46:0c:5e:3d:fa:07:4f:2c:96:cc:dc:73:9c: 24:db:20:35:62:63:06:00:6e:4c:6c:0f:a9:b4:f4:87:af:54: 2f:fb:ef:da:8d:3c:7c:b1:94:82:16:01:3e:31:ef:9a:cf:b2: 44:1a:eb:9c:66:7e:d2:a1:49:f2:00:01:3a:9f:9a:bd:1b:8f: 9e:3b:1d:f9:1e:24:e9:ab:7d:94:53:1e:18:e6:2a:92:fd:3e: b8:61:d9:d7:05:01:a7:c1:cc:83:60:aa:84:c8:b6:5b:07:bd: b5:ff:79:4e:73:9e:d6:c2:a5:bd:ba:1b:75:42:25:77:d8:b6: dc:c4:cc:67:c9:43:90:5d:98:ae:1f:79:5c:5c:96:c4:45:25: 01:bc:4d:9f:92:fc:f9:80:12:27:34:86:32:f5:e6:17:74:70: 22:ee:66:76:24:a5:99:23:18:37:e8:7d:25:41:00:65:54:63: 3f:7c:0b:4a:be:c6:a8:a5:af:1f:c3:3a:53:75:62:5f:63:1b: 89:32:f7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xghqwlYhd+IqmckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZGI0Mjc1YTgtNTIxNS00Njg5LWJlYTAtNjYzYWNlYjhlODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AtX52cCd1zdv+kmwJlx7tbEoKPACxG54eRH GgQaG4Uy5l+plDCJBg6qVuPsARw3b/j3r3p3VhJ/qYuqXGVYSY6ciotTiWwrms7W Cj8+L0iRvDLK1HmuMERynw0Kh4HZUVe1FBtXN8EkjEolpnAznEQz/DTaiBBPqJN6 rA+o3thLcdu+ShqPeyhPWtOjTpCfyuNm/sZYe1Say0xOyVpDFoXtXxAqgSCFAQdT 7feXQWiI/LxD2VRqkWYKyZYPlg8pyORfYlyqnDIcDtdSp55l78aZpvbr6lYuvCJz 14t0sAD/hwlQzXAGAyNmAIqMDLFySDyhqgL7NFV+Jm3Z7jRxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaNnkkEdR3NJ+SEUiHBKD5a0KPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMwMzUxOGItZTdhZC0z NjVmLTg3YmItNDE4MTVlMzRhZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOGNBzZS2By9AegJ49gA1NK40uNrFiauyCOwHQYB/wtOfnsD4OWxyz1 a28EZtIve9YBbW9ZXBr8+gvbRgxePfoHTyyWzNxznCTbIDViYwYAbkxsD6m09Iev VC/779qNPHyxlIIWAT4x75rPskQa65xmftKhSfIAATqfmr0bj547HfkeJOmrfZRT HhjmKpL9Prhh2dcFAafBzINgqoTItlsHvbX/eU5zntbCpb26G3VCJXfYttzEzGfJ Q5BdmK4feVxclsRFJQG8TZ+S/PmAEic0hjL15hd0cCLuZnYkpZkjGDfofSVBAGVU Yz98C0q+xqilrx/DOlN1Yl9jG4ky92c= -----END CERTIFICATE-----Generated at Tue Sep 22 21:10:51 2026 by rpki-client