$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7df17a0-f1d7-3584-a2fa-69b9cc40fe10.roa File: b7df17a0-f1d7-3584-a2fa-69b9cc40fe10.roa (raw, json) Hash identifier: Xe3Nia0TKpH0so4IL8toTS2hAORsh8QrdsfXM4uq6yc= Subject key identifier: 4D:16:3F:E9:4E:42:E1:66:E5:4E:FA:FD:C2:60:38:C8:C2:EC:26:0A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A76F3E0AC0FFF09434A000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7df17a0-f1d7-3584-a2fa-69b9cc40fe10.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396565 IP address blocks: 199.7.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:6f:3e:0a:c0:ff:f0:94:34:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=b8a7abd0-0f6e-48e2-b1bb-02fd2cd9a736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:99:93:88:ad:90:54:23:fd:90:39:ad:af: 3c:b1:c2:0a:47:ea:9c:22:91:e5:40:24:33:46:52: 17:8f:f2:e6:1e:a6:9d:42:e7:18:cc:d2:13:f5:83: 17:2e:86:80:3e:a4:30:cd:94:93:08:8a:48:a9:1a: 0e:99:0a:c1:c7:33:5e:cf:22:26:cc:d2:5c:b1:7d: 70:d5:aa:9a:a5:88:3a:84:ec:d7:fe:44:41:25:b8: 08:d7:ce:4a:f0:b4:96:77:bf:fa:c3:d7:eb:4b:e7: 0d:f4:5d:8b:0b:73:2c:51:50:c1:b0:81:fb:3b:9d: e1:40:9d:66:df:cc:38:41:2c:ea:2e:4d:3a:cf:64: 6d:b2:8d:d6:fc:8b:2b:16:46:74:27:1c:45:d2:47: 35:97:a5:ac:23:3f:a4:46:3a:23:72:aa:41:8f:79: 68:cc:99:d9:0c:cb:c7:07:ec:87:0e:a3:b6:cc:df: 69:1a:e7:55:ce:35:a2:d6:5c:fe:f9:7d:d7:d7:25: 54:e2:5a:ed:d6:3a:9d:b5:19:91:6c:76:e5:bb:34: 4c:1d:57:ea:df:d5:d4:57:69:fc:e2:c5:6d:a0:61: 04:2f:45:6d:90:fa:fd:9a:75:d5:a3:f9:ea:d0:a5: 7d:62:94:d9:47:cc:05:72:bb:6b:e9:df:1a:da:f3: d7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:16:3F:E9:4E:42:E1:66:E5:4E:FA:FD:C2:60:38:C8:C2:EC:26:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7df17a0-f1d7-3584-a2fa-69b9cc40fe10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f9:56:e9:56:c3:6e:80:74:07:09:ef:49:1c:d9:d7:f4:5f: 5f:28:b9:e2:0d:24:25:01:41:44:1f:cb:e5:26:c1:d2:f8:fb: 02:d5:9b:c4:11:8a:49:4d:46:c1:02:88:fd:57:b8:31:f2:ca: 21:8c:41:e0:92:08:ac:78:12:80:0b:41:1f:7f:8f:7e:b3:f4: df:ce:43:e7:df:8d:3f:b1:87:bd:78:78:27:a3:ef:dc:99:f4: 54:5f:54:a1:93:df:c4:6f:e0:b3:93:f4:01:07:28:22:18:b8: 21:51:c8:2c:08:08:5f:77:e8:7e:c0:93:e0:bc:a6:1e:5c:ee: f4:94:35:e1:db:b0:e3:e6:f6:7e:8c:c0:a6:75:0b:86:01:8f: b1:6c:81:41:a3:07:38:b2:76:6b:bd:31:9f:48:98:80:98:65: c3:c5:ca:a7:92:23:bf:bc:45:7a:4b:f5:75:30:72:01:01:e0: c8:d1:40:ab:d5:5a:cc:25:0c:03:32:c1:9b:6c:fe:2a:35:35: 6a:c9:20:cb:07:b3:ee:c6:39:cf:39:e8:0e:5b:8e:64:c1:d3: fb:47:95:7d:36:bc:50:30:81:ff:b3:d6:fd:05:8a:86:bb:9b: 6b:0a:06:5e:a8:fb:2b:70:b7:40:fc:bd:0f:fa:db:d1:80:c1: 5d:1f:88:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp28+CsD/8JQ0oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YjhhN2FiZDAtMGY2ZS00OGUyLWIxYmItMDJmZDJjZDlhNzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40GZk4itkFQj/ZA5ra88scIKR+qcIpHlQCQz RlIXj/LmHqadQucYzNIT9YMXLoaAPqQwzZSTCIpIqRoOmQrBxzNezyImzNJcsX1w 1aqapYg6hOzX/kRBJbgI185K8LSWd7/6w9frS+cN9F2LC3MsUVDBsIH7O53hQJ1m 38w4QSzqLk06z2Rtso3W/IsrFkZ0JxxF0kc1l6WsIz+kRjojcqpBj3lozJnZDMvH B+yHDqO2zN9pGudVzjWi1lz++X3X1yVU4lrt1jqdtRmRbHbluzRMHVfq39XUV2n8 4sVtoGEEL0VtkPr9mnXVo/nq0KV9YpTZR8wFcrtr6d8a2vPXeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0WP+lOQuFm5U76/cJgOMjC7CYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjdkZjE3YTAtZjFkNy0z NTg0LWEyZmEtNjliOWNjNDBmZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT5VulWw26AdAcJ70kc2df0X18oueINJCUBQUQfy+UmwdL4+wLVm8QR iklNRsECiP1XuDHyyiGMQeCSCKx4EoALQR9/j36z9N/OQ+ffjT+xh714eCej79yZ 9FRfVKGT38Rv4LOT9AEHKCIYuCFRyCwICF936H7Ak+C8ph5c7vSUNeHbsOPm9n6M wKZ1C4YBj7FsgUGjBziydmu9MZ9ImICYZcPFyqeSI7+8RXpL9XUwcgEB4MjRQKvV WswlDAMywZts/io1NWrJIMsHs+7GOc856A5bjmTB0/tHlX02vFAwgf+z1v0Fioa7 m2sKBl6o+ytwt0D8vQ/629GAwV0fiCI= -----END CERTIFICATE-----Generated at Mon Sep 21 17:22:53 2026 by rpki-client