$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa File: aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa (raw, json) Hash identifier: 7gOaWWRKGm/6XTOKyfZgfISWGmnEwloYwRmowU8lE4w= Subject key identifier: FB:06:53:98:B2:04:8F:5C:27:65:3A:C7:70:11:CE:15:D8:E1:3B:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A775B3FD6AD2EDC24D4A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 36632 IP address blocks: 199.7.76.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:75:b3:fd:6a:d2:ed:c2:4d:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=bdd60318-cb59-470d-af0f-f435b6460a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:44:33:71:01:7e:ad:82:2b:b1:c9:e7:55: df:21:3b:60:97:ce:fc:e0:6b:e4:a6:3e:bc:33:ef: f8:26:c9:d9:03:c3:dd:84:2e:7a:a0:d9:9e:22:7e: 54:c0:25:53:bf:76:cd:ce:0e:e3:ca:1a:e1:33:7c: 45:5d:0a:72:37:e6:99:99:a8:eb:a6:98:56:81:d3: 71:45:9f:80:79:f4:ae:da:82:57:4e:e3:ae:49:1c: 94:ac:03:d4:0c:2d:bd:4a:e8:b7:d8:51:d5:91:8b: fa:4d:24:05:b2:f7:e1:6a:9b:f6:25:0c:91:33:25: 43:65:65:dc:84:8e:4e:4c:ab:e8:3a:c8:9f:55:00: 37:cf:03:71:a6:5b:5a:1f:27:50:a9:d1:00:48:02: 3c:73:59:02:6a:61:d6:f1:aa:f3:2c:fd:b5:e4:18: 59:33:16:6f:93:a4:c2:09:6e:93:76:ed:d1:68:58: 57:b2:ee:68:28:b0:6b:a3:ef:c3:e4:5d:d5:bc:11: 5d:31:00:aa:97:28:af:e1:2f:e0:b0:0d:36:69:43: d5:03:f0:9d:6a:45:ec:09:94:e7:68:0e:00:1b:14: 56:d3:3f:24:49:78:bb:cc:ea:e2:09:dd:fb:59:db: 98:9b:39:f8:72:96:05:45:5e:92:31:7b:0b:8f:55: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:53:98:B2:04:8F:5C:27:65:3A:C7:70:11:CE:15:D8:E1:3B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3d:a5:14:83:df:8f:9e:fa:56:aa:67:53:3e:31:9f:0a:45: db:f3:72:25:9a:73:c4:32:4c:51:27:d5:fe:71:a9:29:fd:46: e9:33:c6:df:c5:bc:02:3e:37:e2:19:a3:ea:25:06:d4:5f:19: 65:d7:4c:d5:6a:f9:3d:a7:92:ee:16:ec:34:c3:77:c6:29:f3: 0c:e5:c9:62:4e:84:44:76:72:51:0d:24:e5:24:1a:40:32:37: 25:af:8e:fe:41:df:2c:8a:35:13:c8:a9:b8:e1:fc:23:e1:38: ea:15:79:84:a1:3d:0b:36:8b:19:67:8b:6d:42:f5:76:66:05: 0c:8d:89:4e:42:18:9b:02:cb:90:97:ce:b8:d4:38:af:f8:75: c5:1b:2e:ee:db:8c:fd:32:d8:c1:4c:48:44:c7:a0:c3:13:e4: c6:e2:e8:33:de:44:d1:1c:f4:c5:5c:97:b1:41:39:ae:e4:3d: 76:4a:1f:d9:3b:bf:30:f3:4a:20:f9:26:7b:d7:5c:5b:f7:3c: c8:dd:79:bd:92:0f:15:5b:d3:2e:6d:1b:d1:e2:9a:0a:e1:92: da:53:3c:28:8a:65:03:83:02:8f:0f:dc:28:22:0a:d0:b5:c6: 00:40:d6:1c:7b:6e:35:1d:b3:08:ad:39:fb:3c:87:e9:56:3f: d5:96:af:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp3Wz/WrS7cJNSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YmRkNjAzMTgtY2I1OS00NzBkLWFmMGYtZjQzNWI2NDYwYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGNEM3EBfq2CK7HJ51XfITtgl8784Gvkpj68 M+/4JsnZA8PdhC56oNmeIn5UwCVTv3bNzg7jyhrhM3xFXQpyN+aZmajrpphWgdNx RZ+AefSu2oJXTuOuSRyUrAPUDC29Sui32FHVkYv6TSQFsvfhapv2JQyRMyVDZWXc hI5OTKvoOsifVQA3zwNxpltaHydQqdEASAI8c1kCamHW8arzLP215BhZMxZvk6TC CW6Tdu3RaFhXsu5oKLBro+/D5F3VvBFdMQCqlyiv4S/gsA02aUPVA/CdakXsCZTn aA4AGxRW0z8kSXi7zOriCd37WduYmzn4cpYFRV6SMXsLj1VuSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPsGU5iyBI9cJ2U6x3ARzhXY4Ts8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEzY2ZkNjEtYmY0OC0z YzBhLWFhOWMtNWMxNWE1ODlkZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0PaUUg9+PnvpWqmdTPjGfCkXb83IlmnPEMkxRJ9X+cakp/UbpM8bf xbwCPjfiGaPqJQbUXxll10zVavk9p5LuFuw0w3fGKfMM5cliToREdnJRDSTlJBpA Mjclr47+Qd8sijUTyKm44fwj4TjqFXmEoT0LNosZZ4ttQvV2ZgUMjYlOQhibAsuQ l8641Div+HXFGy7u24z9MtjBTEhEx6DDE+TG4ugz3kTRHPTFXJexQTmu5D12Sh/Z O78w80og+SZ711xb9zzI3Xm9kg8VW9MubRvR4poK4ZLaUzwoimUDgwKPD9woIgrQ tcYAQNYce241HbMIrTn7PIfpVj/Vlq+U -----END CERTIFICATE-----Generated at Mon Sep 21 19:10:17 2026 by rpki-client