$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/4d1835db-d866-3a89-85fd-caf73e74c409.roa File: 4d1835db-d866-3a89-85fd-caf73e74c409.roa (raw, json) Hash identifier: VbKzjVnj42KTJIWpyKdW0xJAmoMu2mF33aoXF2uGq5Y= Subject key identifier: D3:5F:0C:C2:FC:BE:3A:DE:B5:2C:4D:DB:AB:02:CF:D3:FC:67:FC:CC Certificate issuer: /CN=020f2bc0-10b9-4714-a437-b2a865c14304 Certificate serial: 010D0C9F4328584EEBEC9FCCA6DAAEBA81FA8E00 Authority key identifier: 82:56:F3:EB:F5:CD:05:30:CF:B7:D5:0D:A5:28:26:FB:02:E3:4A:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/4d1835db-d866-3a89-85fd-caf73e74c409.roa Signing time: Sat 22 Aug 2026 13:00:12 +0000 ROA not before: Sat 22 Aug 2026 13:00:12 +0000 ROA not after: Fri 20 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 199.204.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/020f2bc0-10b9-4714-a437-b2a865c14304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/020f2bc0-10b9-4714-a437-b2a865c14304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:ec:9f:cc:a6:da:ae:ba:81:fa:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020f2bc0-10b9-4714-a437-b2a865c14304 Validity Not Before: Aug 22 13:00:12 2026 GMT Not After : Nov 20 14:00:12 2026 GMT Subject: CN=97f97bd9-8dea-40d7-aed7-6800bb09464d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:46:8c:0f:fb:b3:a3:85:b9:95:ad:41:9a: c8:e0:7f:fe:e4:5a:e7:81:75:4a:34:ed:5a:96:34: 20:d8:ba:a3:02:39:11:9a:03:e9:ec:5c:db:21:34: db:cd:ab:76:2b:9b:8f:0a:81:38:2b:2e:01:81:e4: be:31:88:fc:b4:cb:a7:41:78:88:6d:a9:f7:0f:97: d8:61:34:0b:d1:1d:ed:20:e3:4e:f8:a8:d8:07:e4: 77:1f:69:bf:8f:fa:7e:77:9c:aa:19:04:4e:d4:83: b1:39:7b:80:27:79:ac:c1:cb:ff:9c:34:3d:00:b5: e4:09:67:89:80:d7:fe:69:95:47:5d:e6:0e:5f:ae: 66:83:10:75:94:ef:5f:91:cf:3a:44:9f:3a:10:f1: c0:6e:ac:00:0b:fc:21:0d:46:a5:5f:18:3f:3a:3e: f4:46:2d:8a:82:78:a2:c9:a5:24:62:2b:50:61:b5: 6f:cf:37:46:21:78:ef:63:1f:41:fa:70:49:8c:8d: 51:66:97:52:a0:c7:6f:10:04:68:9b:0a:3f:e4:2f: 6c:b5:3c:76:1c:d5:14:e0:87:d7:d8:dc:6b:d0:ce: 88:3f:b8:81:57:0c:8c:db:59:65:ee:d6:07:9f:c7: ec:5c:89:23:4e:53:2d:56:2a:1c:b8:ea:51:36:7a: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5F:0C:C2:FC:BE:3A:DE:B5:2C:4D:DB:AB:02:CF:D3:FC:67:FC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/4d1835db-d866-3a89-85fd-caf73e74c409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304/020f2bc0-10b9-4714-a437-b2a865c14304.crl X509v3 Authority Key Identifier: keyid:82:56:F3:EB:F5:CD:05:30:CF:B7:D5:0D:A5:28:26:FB:02:E3:4A:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/020f2bc0-10b9-4714-a437-b2a865c14304.cer sbgp-ipAddrBlock: critical IPv4: 199.204.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:63:ac:23:91:eb:d9:63:dc:61:93:5b:bd:5a:97:b2:91:6c: 09:31:1d:e3:bc:ef:ca:e7:1e:7e:c9:62:6b:be:8a:23:9e:ab: 32:8c:ec:87:ad:ef:6b:6a:d6:7b:66:73:4b:da:ec:96:99:4f: 03:0a:b8:3f:29:eb:38:3b:27:a4:06:fe:18:b1:87:c8:04:bb: 3b:4a:03:2f:f2:13:b7:4a:80:8b:f9:e6:1f:30:36:5c:11:51: cf:6d:12:26:63:4a:c1:de:c6:ec:5a:e1:ee:5e:c7:3a:c5:44: 54:ea:3e:56:9f:b3:ab:a6:20:ea:bd:86:fd:e9:45:d0:ae:30: e8:cb:83:4e:87:4c:06:96:70:bc:54:2a:a3:79:57:d5:fa:fa: c4:f0:52:6c:1e:6c:91:30:8f:fe:5d:98:4d:94:3d:9b:91:27: a7:6a:e0:2e:74:16:b4:9e:4a:fc:a7:b8:93:bc:3d:c1:4c:16: fa:29:b1:ee:fe:2d:68:d4:15:f4:be:4c:6c:99:13:b3:cd:5f: 81:a9:7f:0f:e5:cf:b5:31:90:b1:19:94:8f:c8:bc:67:f5:db: e2:2b:63:91:43:23:80:eb:7e:4b:85:75:d1:84:b7:b8:20:5f: 99:6f:54:47:16:08:98:d1:17:11:07:9b:87:ed:da:bd:7d:5c: 15:fa:92:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7r7J/MptquuoH6jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIwZjJiYzAtMTBiOS00NzE0LWE0MzctYjJhODY1YzE0 MzA0MB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk OTdmOTdiZDktOGRlYS00MGQ3LWFlZDctNjgwMGJiMDk0NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAittGjA/7s6OFuZWtQZrI4H/+5FrngXVKNO1a ljQg2LqjAjkRmgPp7FzbITTbzat2K5uPCoE4Ky4BgeS+MYj8tMunQXiIban3D5fY YTQL0R3tIONO+KjYB+R3H2m/j/p+d5yqGQRO1IOxOXuAJ3mswcv/nDQ9ALXkCWeJ gNf+aZVHXeYOX65mgxB1lO9fkc86RJ86EPHAbqwAC/whDUalXxg/Oj70Ri2Kgnii yaUkYitQYbVvzzdGIXjvYx9B+nBJjI1RZpdSoMdvEARomwo/5C9stTx2HNUU4IfX 2Nxr0M6IP7iBVwyM21ll7tYHn8fsXIkjTlMtViocuOpRNnpYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNfDML8vjretSxN26sCz9P8Z/zMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMjBm MmJjMC0xMGI5LTQ3MTQtYTQzNy1iMmE4NjVjMTQzMDQvNGQxODM1ZGItZDg2Ni0z YTg5LTg1ZmQtY2FmNzNlNzRjNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDIwZjJiYzAtMTBiOS00NzE0LWE0 MzctYjJhODY1YzE0MzA0LzAyMGYyYmMwLTEwYjktNDcxNC1hNDM3LWIyYTg2NWMx NDMwNC5jcmwwHwYDVR0jBBgwFoAUglbz6/XNBTDPt9UNpSgm+wLjSt0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMjBmMmJjMC0xMGI5LTQ3MTQtYTQzNy1iMmE4 NjVjMTQzMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8zTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5jrCOR69lj3GGTW71al7KRbAkxHeO878rnHn7JYmu+iiOeqzKM7Iet 72tq1ntmc0va7JaZTwMKuD8p6zg7J6QG/hixh8gEuztKAy/yE7dKgIv55h8wNlwR Uc9tEiZjSsHexuxa4e5exzrFRFTqPlafs6umIOq9hv3pRdCuMOjLg06HTAaWcLxU KqN5V9X6+sTwUmwebJEwj/5dmE2UPZuRJ6dq4C50FrSeSvynuJO8PcFMFvopse7+ LWjUFfS+TGyZE7PNX4Gpfw/lz7UxkLEZlI/IvGf12+IrY5FDI4DrfkuFddGEt7gg X5lvVEcWCJjRFxEHm4ft2r19XBX6ktc= -----END CERTIFICATE-----Generated at Tue Sep 22 18:43:44 2026 by rpki-client