$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e3d8e87a-518e-352d-8ca2-3149415f1d00.roa File: e3d8e87a-518e-352d-8ca2-3149415f1d00.roa (raw, json) Hash identifier: qkOzZvoZbDKF1oA9dS9UMPs+H1ULcSz02aL5+d4JQBw= Subject key identifier: 50:D9:C8:DA:81:C2:A0:A4:9E:AE:0B:AF:1A:85:A1:AD:36:E6:FE:75 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584EA788C3B478637C6A4D1D1DE0 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e3d8e87a-518e-352d-8ca2-3149415f1d00.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23280 IP address blocks: 199.45.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:c3:b4:78:63:7c:6a:4d:1d:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5faac619-e36f-4e1c-b7f1-6f0837d92603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:99:7b:35:71:69:11:b7:f9:61:89:78:2a: 9c:37:a6:ae:3e:f1:b5:cf:fe:56:be:f7:d3:28:0e: e8:6b:e0:cf:f2:84:59:b9:45:dc:04:37:96:a5:b6: f5:71:a9:8c:76:45:a5:ac:53:8c:35:97:c9:e9:28: 9c:25:40:07:35:8e:91:94:7c:e6:19:f6:81:c3:c2: 25:6b:dd:d3:71:5a:5f:78:2f:62:f4:67:11:99:68: e3:05:78:93:02:a6:95:2d:2b:37:8c:82:0e:17:da: 10:53:ea:2e:aa:32:5b:d2:e9:20:7e:76:9f:14:22: 64:6a:de:f1:a7:f6:d0:dd:3a:05:d8:28:62:6f:4a: 98:5f:09:13:d5:63:ad:d9:5b:ab:48:50:07:7d:ea: ce:01:b9:39:49:15:dd:fb:8a:ce:9f:5c:44:0a:74: 7d:01:ce:23:4a:71:0c:a7:d4:88:26:bc:37:98:9a: 18:c3:2b:33:a9:e6:86:fd:b5:25:28:b6:c7:3a:1f: 4a:ef:bb:10:dd:d0:c3:48:ee:bd:00:9a:6a:46:87: ed:1d:d0:61:39:eb:57:65:e8:0f:eb:41:cf:38:5f: 35:6e:90:6a:ad:4d:34:76:02:1b:4d:0b:3d:ce:8f: 58:7a:d8:a2:b0:f7:f9:b8:40:3b:a7:31:28:af:10: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D9:C8:DA:81:C2:A0:A4:9E:AE:0B:AF:1A:85:A1:AD:36:E6:FE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e3d8e87a-518e-352d-8ca2-3149415f1d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 199.45.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f8:3b:47:48:ba:b1:f6:48:66:a9:eb:8b:c3:4e:7d:24:1b: 7e:c1:75:35:49:02:16:e1:f3:2f:63:a7:04:aa:5d:9c:78:cd: e7:30:0e:c8:48:20:2d:9b:96:63:1d:b6:02:cf:0e:52:45:98: ef:23:10:b3:21:d8:b1:ca:a8:bf:67:37:6e:62:b5:a7:f1:60: 32:ef:53:55:06:44:97:b4:90:e7:7e:38:65:25:62:5d:eb:83: 33:dd:ae:c0:db:ed:98:2e:53:8e:46:e6:a6:93:7a:17:d9:2d: 56:e5:d4:a7:27:ae:ff:08:2a:95:3d:fa:c1:61:b4:72:0b:aa: 77:a9:10:bb:b6:a3:79:10:10:98:00:79:f0:3e:0d:80:6a:f1: fb:e5:b2:0c:ef:44:3b:17:65:21:f1:78:0b:8b:e9:6f:b3:e2: c1:92:63:eb:c0:41:e8:63:d6:70:5b:db:1a:cb:80:b6:16:9f: 51:65:45:f3:24:70:2f:01:13:e1:d6:1e:11:fe:5c:62:1d:e5: 24:61:5d:13:cc:8a:52:cc:2a:36:81:be:e3:27:7b:f1:67:ab: 0e:40:de:85:6b:b1:9c:92:69:28:2f:1a:a7:c0:72:5f:2f:c3: 30:84:8d:24:2a:81:c3:af:21:f1:fa:3a:b1:87:da:43:80:9c: f7:be:70:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niMO0eGN8ak0dHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWZhYWM2MTktZTM2Zi00ZTFjLWI3ZjEtNmYwODM3ZDkyNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNSZezVxaRG3+WGJeCqcN6auPvG1z/5WvvfT KA7oa+DP8oRZuUXcBDeWpbb1camMdkWlrFOMNZfJ6SicJUAHNY6RlHzmGfaBw8Il a93TcVpfeC9i9GcRmWjjBXiTAqaVLSs3jIIOF9oQU+ouqjJb0ukgfnafFCJkat7x p/bQ3ToF2Chib0qYXwkT1WOt2VurSFAHferOAbk5SRXd+4rOn1xECnR9Ac4jSnEM p9SIJrw3mJoYwyszqeaG/bUlKLbHOh9K77sQ3dDDSO69AJpqRoftHdBhOetXZegP 60HPOF81bpBqrU00dgIbTQs9zo9YetiisPf5uEA7pzEorxDZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDZyNqBwqCknq4LrxqFoa025v51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvZTNkOGU4N2EtNTE4ZS0z NTJkLThjYTItMzE0OTQxNWYxZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL4O0dIurH2SGap64vDTn0kG37BdTVJAhbh8y9jpwSqXZx4zecwDshI IC2blmMdtgLPDlJFmO8jELMh2LHKqL9nN25itafxYDLvU1UGRJe0kOd+OGUlYl3r gzPdrsDb7ZguU45G5qaTehfZLVbl1Kcnrv8IKpU9+sFhtHILqnepELu2o3kQEJgA efA+DYBq8fvlsgzvRDsXZSHxeAuL6W+z4sGSY+vAQehj1nBb2xrLgLYWn1FlRfMk cC8BE+HWHhH+XGId5SRhXRPMilLMKjaBvuMne/Fnqw5A3oVrsZySaSgvGqfAcl8v wzCEjSQqgcOvIfH6OrGH2kOAnPe+cFQ= -----END CERTIFICATE-----Generated at Wed Jul 29 05:53:38 2026 by rpki-client