$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa File: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (raw, json) Hash identifier: ENV/w5IcH3uyCoxlf+R4nDsL35llO9LjGwMcHDb/Dtw= Subject key identifier: 27:64:94:65:C3:55:19:27:D3:FF:4C:AE:06:F5:BD:38:56:B8:41:7B Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Certificate serial: 010D0C9F4328584EA79C463CA992331B5C311380 Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 395839 IP address blocks: 199.5.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:46:3c:a9:92:33:1b:5c:31:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a4312f09-cebf-4365-9cae-8676d557ca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:fb:84:9b:8c:27:c9:d4:9e:6f:c8:cf:c5: 12:3c:4d:75:6a:ba:5d:3b:6c:af:6e:30:c9:ac:98: 55:3c:c5:e6:60:be:72:d1:75:f9:0b:4d:ff:5d:18: ba:3f:b5:74:38:da:ff:d1:1e:bd:e1:85:2f:57:1c: d6:10:f4:a6:8f:22:38:ed:48:74:1c:9f:b2:b1:43: af:a2:50:c8:65:c6:8e:39:f2:d9:d0:da:4a:92:a7: 52:9d:c3:d2:aa:b2:d9:73:e8:21:df:28:68:2e:f8: 4e:4b:ea:4b:eb:e9:ce:37:38:9a:e4:85:b5:82:aa: e9:da:80:76:c3:67:c2:ce:20:c2:50:5a:61:95:ee: dd:d1:79:2d:31:4b:99:81:ca:ea:33:33:b6:a4:45: d1:28:de:dc:6c:f5:74:af:27:e3:2b:e1:ee:fe:8b: bd:44:0d:61:1e:7b:60:72:29:cc:eb:ef:28:a8:42: 19:44:92:57:37:cf:3c:f5:6c:e1:ac:a7:52:fa:58: 19:d4:21:73:fa:4f:6a:cb:82:f3:3c:e0:26:09:e2: 3a:12:d6:f6:df:35:f8:37:1d:05:70:13:4e:50:13: 5b:00:20:af:78:cb:b6:80:76:20:ec:21:79:ea:4d: 5e:35:e6:bc:a2:8a:8f:9f:32:8b:cf:b6:9d:fb:74: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:64:94:65:C3:55:19:27:D3:FF:4C:AE:06:F5:BD:38:56:B8:41:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl X509v3 Authority Key Identifier: keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer sbgp-ipAddrBlock: critical IPv4: 199.5.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5f:f3:04:44:ca:2c:f3:a7:c4:99:73:b9:7b:6d:81:1d:ef: 76:18:4c:64:3b:ec:e8:2d:fd:8c:12:12:da:82:56:a4:14:2c: 03:67:72:c2:01:28:cb:39:4c:99:44:db:8c:c2:a8:8b:2f:37: a3:46:2b:4d:89:5f:f4:91:59:2c:09:c2:d9:6c:f3:33:8c:63: d3:d7:ee:34:a9:f5:23:e6:66:d6:5d:b1:dd:68:ac:5b:a9:8d: 2b:d3:59:cb:47:3e:53:ed:66:12:84:45:96:c1:b5:3e:0e:21: cc:a3:e4:6e:34:31:86:e5:88:3d:c6:da:89:56:b8:aa:53:7b: 4d:dd:f4:98:c2:91:f8:f6:bd:58:90:27:13:05:b6:10:1b:44: d5:4c:f1:0d:1c:ff:23:3a:57:57:1d:96:ed:f1:3b:51:7c:ab: fd:76:0b:50:63:76:ff:5f:b8:20:4d:42:1c:2e:08:7d:ee:c0: a1:c8:35:56:9d:91:ec:a8:a3:9e:e3:a7:03:19:18:d8:20:2a: d6:79:da:35:89:18:e6:07:86:45:54:7c:c2:1b:23:4d:37:95: 29:b4:62:32:fd:cc:e8:03:a1:cb:6c:44:79:a2:57:0a:ce:28: 11:7e:cf:e2:19:d3:fb:e0:ab:55:13:2d:06:e2:05:f4:3a:9a: 46:75:b2:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnEY8qZIzG1wxE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZiMzUxMWItZjFiNi00NGFkLTljMzYtZjY1NzZhNTQw MGRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTQzMTJmMDktY2ViZi00MzY1LTljYWUtODY3NmQ1NTdjYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo37hJuMJ8nUnm/Iz8USPE11arpdO2yvbjDJ rJhVPMXmYL5y0XX5C03/XRi6P7V0ONr/0R694YUvVxzWEPSmjyI47Uh0HJ+ysUOv olDIZcaOOfLZ0NpKkqdSncPSqrLZc+gh3yhoLvhOS+pL6+nONzia5IW1gqrp2oB2 w2fCziDCUFphle7d0XktMUuZgcrqMzO2pEXRKN7cbPV0ryfjK+Hu/ou9RA1hHntg cinM6+8oqEIZRJJXN8889WzhrKdS+lgZ1CFz+k9qy4LzPOAmCeI6Etb23zX4Nx0F cBNOUBNbACCveMu2gHYg7CF56k1eNea8ooqPnzKLz7ad+3Rk0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdklGXDVRkn0/9Mrgb1vThWuEF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIz NTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3NmE1NDAwZGYvMGVhNjJlN2UtMDU0Yy0z MWQ1LWJiOGQtMTAwNWJjYWM1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZiMzUxMWItZjFiNi00NGFkLTlj MzYtZjY1NzZhNTQwMGRmL2FmYjM1MTFiLWYxYjYtNDRhZC05YzM2LWY2NTc2YTU0 MDBkZi5jcmwwHwYDVR0jBBgwFoAUnm70BRwLxtsIR1eoo3p9WSmu0DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIzNTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3 NmE1NDAwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwWjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1f8wREyizzp8SZc7l7bYEd73YYTGQ77Ogt/YwSEtqCVqQULANncsIB KMs5TJlE24zCqIsvN6NGK02JX/SRWSwJwtls8zOMY9PX7jSp9SPmZtZdsd1orFup jSvTWctHPlPtZhKERZbBtT4OIcyj5G40MYbliD3G2olWuKpTe03d9JjCkfj2vViQ JxMFthAbRNVM8Q0c/yM6V1cdlu3xO1F8q/12C1Bjdv9fuCBNQhwuCH3uwKHINVad keyoo57jpwMZGNggKtZ52jWJGOYHhkVUfMIbI003lSm0YjL9zOgDoctsRHmiVwrO KBF+z+IZ0/vgq1UTLQbiBfQ6mkZ1smA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:52:43 2026 by rpki-client