$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/d05ecd53-1b3b-395a-974f-fa27910a42aa.roa File: d05ecd53-1b3b-395a-974f-fa27910a42aa.roa (raw, json) Hash identifier: 8aScsfq4kB/jYqovNLD/U/ugOEepNxjX/0e1jIKDFqA= Subject key identifier: 00:36:02:7F:FE:E5:35:93:3D:82:7D:81:8C:29:80:A5:76:3E:89:22 Certificate issuer: /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Certificate serial: 010D0C9F4328584EA79A4EA934EFB5D642660A40 Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/d05ecd53-1b3b-395a-974f-fa27910a42aa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10255 IP address blocks: 199.74.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:4e:a9:34:ef:b5:d6:42:66:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a2329361-56fe-451c-b74b-857c15036b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:9c:0b:74:3c:06:55:bd:fd:ce:33:32:d8: 4e:15:42:7c:20:5f:df:c6:39:7d:65:d1:32:b1:af: 60:f5:84:64:7b:fc:a4:ec:b8:16:03:72:aa:70:c5: 57:b7:fe:14:95:ea:8c:81:e9:a1:08:c9:50:0e:99: 1c:02:35:bc:d3:99:f3:22:89:ba:dc:47:8b:75:e9: ac:a4:0e:af:92:1b:76:58:3a:bd:f2:ae:d4:7e:62: 85:35:e5:e3:4d:3b:b2:78:28:e5:c0:f4:79:07:9e: b3:a8:f5:2a:84:81:71:db:f5:19:2a:9c:bc:df:69: 53:fa:fd:a5:55:ff:e4:2a:ca:83:e4:92:05:c0:86: 08:91:32:fb:32:0d:45:a8:f4:cd:b6:cb:44:08:2e: e2:99:a4:62:32:3f:44:53:06:4d:37:d5:cf:54:5a: 09:1a:c2:68:02:b2:6f:e0:94:ea:f1:c4:6f:89:75: d2:0f:31:65:ef:20:1f:73:44:81:81:dc:87:ef:bc: 24:b9:c4:d9:65:fd:05:ff:d0:dd:24:fb:cb:31:82: 77:1b:00:8d:be:eb:ad:22:14:fa:a3:5e:b7:da:5a: 8d:7e:49:cc:07:03:45:0f:8a:ef:6c:ee:7f:84:e0: dc:da:89:e4:10:d8:70:c3:1d:3e:f7:2a:d6:6e:f4: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:02:7F:FE:E5:35:93:3D:82:7D:81:8C:29:80:A5:76:3E:89:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/d05ecd53-1b3b-395a-974f-fa27910a42aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl X509v3 Authority Key Identifier: keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer sbgp-ipAddrBlock: critical IPv4: 199.74.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:33:9d:1b:fd:2a:f3:a8:c0:a4:63:84:52:e5:bd:ab:40:12: 97:46:a7:2f:6f:23:8d:0c:cf:a4:35:f5:13:8f:a6:34:47:70: 6d:2c:50:01:cd:97:f6:5f:5c:9b:e0:e2:0f:6a:98:9b:6d:06: b6:9e:98:f3:f7:b3:6e:5d:a2:40:20:12:2a:a7:36:72:ec:16: 47:2a:37:20:89:da:63:eb:14:c5:77:47:c0:17:cd:ff:fe:e5: 9e:66:7c:8b:89:d7:cd:b5:f6:0f:79:08:8c:5d:6b:d0:40:d6: 3b:fe:c9:ec:33:48:70:9f:dc:7a:d8:92:b7:12:f4:c2:4a:7b: 08:bf:15:45:53:e7:b5:9c:a3:a3:87:36:c4:56:b1:66:a2:3d: ed:16:47:78:ca:de:1a:92:b5:5d:fc:f4:9e:52:81:2b:82:8c: d9:38:b9:fe:9a:6a:7b:08:79:da:05:8d:d5:22:cf:3c:f3:46: 97:3d:06:49:f9:be:d9:e4:bc:29:9b:04:a1:f4:94:7f:72:f4: 4f:06:cc:9f:34:ff:be:7a:90:74:f8:7d:15:b6:87:99:09:88: 4d:eb:bf:8f:8c:12:a5:af:ee:ea:2f:ce:71:c6:18:b9:b7:97: 2e:54:92:be:25:4d:4b:09:53:35:4e:75:cb:44:10:96:1d:64: 92:9f:3d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmk6pNO+11kJmCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg1MTAwZjktM2IyOC00ZWY0LWIyYzItY2YzMjdkOTgz OWQ2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTIzMjkzNjEtNTZmZS00NTFjLWI3NGItODU3YzE1MDM2YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVOcC3Q8BlW9/c4zMthOFUJ8IF/fxjl9ZdEy sa9g9YRke/yk7LgWA3KqcMVXt/4UleqMgemhCMlQDpkcAjW805nzIom63EeLdems pA6vkht2WDq98q7UfmKFNeXjTTuyeCjlwPR5B56zqPUqhIFx2/UZKpy832lT+v2l Vf/kKsqD5JIFwIYIkTL7Mg1FqPTNtstECC7imaRiMj9EUwZNN9XPVFoJGsJoArJv 4JTq8cRviXXSDzFl7yAfc0SBgdyH77wkucTZZf0F/9DdJPvLMYJ3GwCNvuutIhT6 o1632lqNfknMBwNFD4rvbO5/hODc2onkENhwwx0+9yrWbvSJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA2An/+5TWTPYJ9gYwpgKV2PokiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ODUx MDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMyN2Q5ODM5ZDYvZDA1ZWNkNTMtMWIzYi0z OTVhLTk3NGYtZmEyNzkxMGE0MmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjg1MTAwZjktM2IyOC00ZWY0LWIy YzItY2YzMjdkOTgzOWQ2LzY4NTEwMGY5LTNiMjgtNGVmNC1iMmMyLWNmMzI3ZDk4 MzlkNi5jcmwwHwYDVR0jBBgwFoAUixKCgpxJcnhlLMRCbyeEoVgGCw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ODUxMDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMy N2Q5ODM5ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0r5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8znRv9KvOowKRjhFLlvatAEpdGpy9vI40Mz6Q19ROPpjRHcG0sUAHN l/ZfXJvg4g9qmJttBraemPP3s25dokAgEiqnNnLsFkcqNyCJ2mPrFMV3R8AXzf/+ 5Z5mfIuJ18219g95CIxda9BA1jv+yewzSHCf3HrYkrcS9MJKewi/FUVT57Wco6OH NsRWsWaiPe0WR3jK3hqStV389J5SgSuCjNk4uf6aansIedoFjdUizzzzRpc9Bkn5 vtnkvCmbBKH0lH9y9E8GzJ80/756kHT4fRW2h5kJiE3rv4+MEqWv7uovznHGGLm3 ly5Ukr4lTUsJUzVOdctEEJYdZJKfPQc= -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:45 2026 by rpki-client