$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa File: 1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa (raw, json) Hash identifier: SvafI6aZ++RdvGc9PPQ1TQFaEKtbB7+Jn7eG4OJmtCM= Subject key identifier: 5D:30:CA:E9:98:AB:18:65:2D:FB:A2:FA:D5:4B:DE:47:3B:34:70:A1 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EA5AA6AB980877B8C172FBE00 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 3756 IP address blocks: 199.109.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:6a:b9:80:87:7b:8c:17:2f:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=49ce96c1-61a4-456b-bac8-4aeeace675e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:7e:a1:41:f8:cf:fa:89:6a:d3:ed:ca:4a: ab:03:35:c5:eb:ae:d0:1d:1a:11:2c:02:a6:54:ba: 10:32:01:bb:7b:8f:fe:f9:96:fd:f5:f4:5f:96:83: 81:5a:c6:6a:11:31:08:a2:3b:18:47:c7:e4:d8:f9: 9e:2d:26:c9:a8:8a:47:98:63:f7:81:96:34:c4:fc: 9a:b7:37:4b:96:12:e8:ab:e3:f7:0b:7e:72:80:29: 82:f7:14:9d:ba:6b:11:ca:4f:65:5a:37:d8:df:7f: 79:12:29:64:2b:2e:3c:c8:e1:eb:eb:57:af:3b:9c: 13:17:6c:8b:f7:e4:a7:92:e5:80:ff:01:c6:d8:5c: 8f:5d:95:7f:52:26:7c:63:cb:67:85:cc:aa:49:c7: a3:d1:7d:82:f4:07:55:3f:31:52:7b:b6:7f:18:17: aa:08:0b:33:18:c4:cc:d1:d9:7e:fc:39:79:2e:45: e6:1d:28:b5:41:52:2b:35:80:3a:ed:87:36:51:90: 6a:60:f1:80:2a:51:61:91:bd:97:06:06:b1:51:34: dc:db:83:4c:71:69:07:e0:d5:db:98:a8:b4:37:2b: 4a:ca:b4:e5:09:f3:cb:f1:c1:c1:24:37:56:d4:5a: ac:58:7b:2f:e9:56:d4:e5:de:a1:33:75:77:1d:36: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:CA:E9:98:AB:18:65:2D:FB:A2:FA:D5:4B:DE:47:3B:34:70:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/1148204d-0c51-3060-80e2-cfaa96ea1e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:97:5a:fa:95:a9:b9:60:8b:b9:b9:fb:9a:c7:df:b1:59:fd: f4:b1:a1:3d:df:ff:2d:4d:0a:06:45:b0:5e:83:a2:0a:f4:9c: fc:c7:c0:75:91:95:e2:ae:86:4f:52:c3:cf:a2:ca:24:f0:c6: 56:84:d6:df:03:26:f7:03:b2:d4:4e:d4:94:ca:c1:4b:74:f3: 5f:55:7a:c9:c3:1e:50:d1:d4:56:c7:4b:68:bb:37:d8:44:10: cd:86:a8:07:2e:29:1b:c9:1d:41:38:9f:be:b6:28:8c:7c:e5: 6b:2c:7a:3c:f7:c7:cd:94:a3:d3:11:e7:5b:46:23:36:74:8e: b9:82:ea:fc:e4:f8:97:79:02:c2:54:5a:9b:48:72:84:57:21: dd:aa:cd:12:34:4e:d7:e4:74:80:79:23:52:d9:0a:1c:aa:6f: 78:99:0d:37:64:a8:2e:13:36:72:b7:ad:c5:32:d9:7d:0c:e1: 10:10:1b:26:a2:bf:b4:86:55:b6:c2:2b:df:79:c8:9c:d9:03: 26:04:dc:ad:95:c5:3d:28:aa:fc:95:9b:d0:9b:68:81:5f:8e: 2c:95:cf:af:9f:36:13:99:b1:eb:89:61:1c:b7:1b:98:31:75: 30:2f:a6:fa:20:64:f9:17:7c:25:08:62:d7:b4:65:2d:66:9c: e9:6d:51:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmq5gId7jBcvvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk NDljZTk2YzEtNjFhNC00NTZiLWJhYzgtNGFlZWFjZTY3NWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneB+oUH4z/qJatPtykqrAzXF667QHRoRLAKm VLoQMgG7e4/++Zb99fRfloOBWsZqETEIojsYR8fk2PmeLSbJqIpHmGP3gZY0xPya tzdLlhLoq+P3C35ygCmC9xSdumsRyk9lWjfY3395EilkKy48yOHr61evO5wTF2yL 9+SnkuWA/wHG2FyPXZV/UiZ8Y8tnhcyqScej0X2C9AdVPzFSe7Z/GBeqCAszGMTM 0dl+/Dl5LkXmHSi1QVIrNYA67Yc2UZBqYPGAKlFhkb2XBgaxUTTc24NMcWkH4NXb mKi0NytKyrTlCfPL8cHBJDdW1FqsWHsv6VbU5d6hM3V3HTY7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0wyumYqxhlLfui+tVL3kc7NHChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMTE0ODIwNGQtMGM1MS0z MDYwLTgwZTItY2ZhYTk2ZWExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaXWvqVqblgi7m5+5rH37FZ/fSxoT3f/y1NCgZFsF6Dogr0nPzHwHWR leKuhk9Sw8+iyiTwxlaE1t8DJvcDstRO1JTKwUt0819VesnDHlDR1FbHS2i7N9hE EM2GqAcuKRvJHUE4n762KIx85Wssejz3x82Uo9MR51tGIzZ0jrmC6vzk+Jd5AsJU WptIcoRXId2qzRI0TtfkdIB5I1LZChyqb3iZDTdkqC4TNnK3rcUy2X0M4RAQGyai v7SGVbbCK995yJzZAyYE3K2VxT0oqvyVm9CbaIFfjiyVz6+fNhOZseuJYRy3G5gx dTAvpvogZPkXfCUIYte0ZS1mnOltURY= -----END CERTIFICATE-----Generated at Wed Jul 29 05:46:08 2026 by rpki-client