$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa File: afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa (raw, json) Hash identifier: 21cO1rupWUjeHp7ElpYA3yQa0dlH5AUiYG34/8EhWgo= Subject key identifier: FE:19:05:72:91:82:32:E6:EC:7A:B1:46:00:33:A6:25:82:AC:EA:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6EDA82BDB97E1339802F5B60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 396544 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:82:bd:b9:7e:13:39:80:2f:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=e1dd429a-8cdc-4774-82c2-041edb61d9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d8:92:05:38:84:5c:97:46:bc:03:e0:f1:98: fe:27:de:93:87:3e:93:8f:53:f8:3f:c2:99:01:c5: 01:0b:8a:34:61:45:3e:dd:26:88:65:3e:66:dd:a8: 6a:4a:2d:10:f6:ea:2c:fe:a1:73:19:d6:11:85:7d: f0:db:11:ca:96:37:c3:ca:db:74:9c:b3:a6:fb:a8: 6b:8e:20:99:ae:47:99:09:00:1b:f1:28:3d:1a:c3: f3:02:02:97:61:f6:dd:d3:6f:14:d9:9f:3e:de:5f: fe:43:09:ca:9a:d7:ed:3f:ab:0b:45:97:3b:01:6c: fb:73:cc:06:23:40:1a:46:fa:1a:79:5a:b7:d5:76: 52:20:cc:6d:c9:fe:01:07:11:da:a9:a9:a9:4e:6a: 2c:89:0e:1e:0f:d8:65:47:a4:8b:fd:3b:b2:2d:39: 54:8c:e7:74:5e:7d:3d:56:b3:c2:16:bb:e0:4f:37: b0:25:ed:d7:f7:34:9e:1c:2d:b2:13:00:ff:db:dd: ac:42:80:f4:90:e9:53:70:bf:f7:14:bf:d6:0f:6e: 90:99:9d:1d:77:0d:b4:59:22:74:c3:ca:e2:9a:5e: 8d:7f:17:db:b3:5f:89:fb:2d:60:70:bc:ef:ae:95: ab:22:2b:51:3f:e2:3e:d0:5a:2d:00:16:0a:fb:6a: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:05:72:91:82:32:E6:EC:7A:B1:46:00:33:A6:25:82:AC:EA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:39:01:16:d8:6d:56:cf:8b:08:60:c1:35:be:26:71:d7:a5: e0:47:87:f7:e6:d0:2d:ce:33:fe:d3:f9:6c:7e:f7:96:95:ee: b9:26:91:f4:9a:2b:d7:ef:6d:79:c9:cb:81:d6:15:3b:09:f8: 77:41:3f:ae:4b:07:15:6b:f3:1a:bd:97:9e:fb:f8:f7:73:cd: 57:89:13:e2:4a:91:93:36:36:a1:de:be:42:d0:f1:52:30:1f: 50:35:3f:64:8d:b8:df:49:fc:ca:e3:df:79:76:16:4c:4f:85: b5:42:37:f5:f9:5e:91:e1:72:73:52:4e:bd:97:04:94:fe:66: 3e:d5:f8:87:4d:e0:61:25:67:0a:54:4d:b6:f8:62:7e:22:e4: f9:f1:f0:db:81:8f:90:7d:7d:25:0d:44:3d:f2:1c:40:93:80: 70:f8:60:9d:4c:b8:08:1a:c6:7b:ee:37:fb:a1:11:24:bc:2b: 54:05:4d:6e:52:fd:a6:3c:cd:64:72:0f:b8:af:91:83:2e:b8: 2b:0c:b5:04:1b:83:af:6d:33:4b:2a:e7:3f:db:54:af:8a:a3: 73:48:a6:db:bc:ff:81:6f:d8:fc:3d:3b:92:9a:8d:8b:92:6e: e9:1f:05:41:e4:b9:54:bb:7e:f8:f1:28:91:00:e7:16:5c:f5: a4:a0:31:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2oK9uX4TOYAvW2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTFkZDQyOWEtOGNkYy00Nzc0LTgyYzItMDQxZWRiNjFkOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNiSBTiEXJdGvAPg8Zj+J96Thz6Tj1P4P8KZ AcUBC4o0YUU+3SaIZT5m3ahqSi0Q9uos/qFzGdYRhX3w2xHKljfDytt0nLOm+6hr jiCZrkeZCQAb8Sg9GsPzAgKXYfbd028U2Z8+3l/+QwnKmtftP6sLRZc7AWz7c8wG I0AaRvoaeVq31XZSIMxtyf4BBxHaqampTmosiQ4eD9hlR6SL/TuyLTlUjOd0Xn09 VrPCFrvgTzewJe3X9zSeHC2yEwD/292sQoD0kOlTcL/3FL/WD26QmZ0ddw20WSJ0 w8riml6Nfxfbs1+J+y1gcLzvrpWrIitRP+I+0FotABYK+2o9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4ZBXKRgjLm7HqxRgAzpiWCrOoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZkNGYyYTQtY2I4OC0z NTcxLTlkYjUtMDgzN2FjMzI0YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo5ARbYbVbPiwhgwTW+JnHXpeBHh/fm0C3OM/7T+Wx+95aV7rkmkfSa K9fvbXnJy4HWFTsJ+HdBP65LBxVr8xq9l577+PdzzVeJE+JKkZM2NqHevkLQ8VIw H1A1P2SNuN9J/Mrj33l2FkxPhbVCN/X5XpHhcnNSTr2XBJT+Zj7V+IdN4GElZwpU Tbb4Yn4i5Pnx8NuBj5B9fSUNRD3yHECTgHD4YJ1MuAgaxnvuN/uhESS8K1QFTW5S /aY8zWRyD7ivkYMuuCsMtQQbg69tM0sq5z/bVK+Ko3NIptu8/4Fv2Pw9O5KajYuS bukfBUHkuVS7fvjxKJEA5xZc9aSgMcM= -----END CERTIFICATE-----Generated at Fri Apr 17 20:40:36 2026 by rpki-client