$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c8daa929-a74d-3c47-b218-4c5184b03df6.roa File: c8daa929-a74d-3c47-b218-4c5184b03df6.roa (raw, json) Hash identifier: Yq3+z1/eJ9JsTvi3PYGzcc9EhbyluqeGIFJaP6ZUAWA= Subject key identifier: D8:D7:5B:B7:62:4C:41:45:B2:4D:6A:AC:E2:0C:54:76:74:A4:77:1B Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584EA7974EBC94CD4E5881B0D6E0 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c8daa929-a74d-3c47-b218-4c5184b03df6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14291 IP address blocks: 199.45.244.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:4e:bc:94:cd:4e:58:81:b0:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=df5bb42e-47b2-4349-a6a0-ad2ca45e3b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:5d:88:af:2f:80:c4:26:53:82:8d:f6:50: 88:9d:3f:86:12:43:cc:8d:08:cf:a2:b6:d5:7d:30: 2a:25:2e:2e:63:34:95:6c:16:2b:b6:18:56:5f:4a: df:bb:a2:ae:3d:ce:94:ca:03:37:2a:64:fb:d7:38: 55:84:39:0a:34:53:30:81:54:f7:13:4c:2f:0b:a2: 67:d6:3a:74:9d:eb:7c:9e:34:25:3b:30:85:4c:39: d5:2a:f2:3b:de:c2:20:ce:b8:7e:54:fd:89:27:c5: de:d6:7a:73:cd:4b:7e:f1:01:08:fd:6d:42:84:7d: 5c:89:47:90:bb:d9:bd:ec:0c:76:3d:08:21:40:21: b6:9f:72:a7:d6:15:74:a8:62:b6:82:16:a7:2b:2f: 85:07:30:c1:16:0a:99:2d:6a:f1:af:ce:9b:97:2f: 06:07:00:52:17:33:d1:53:3d:33:e4:31:01:05:c4: d2:47:df:dc:f2:e7:c8:13:b9:2e:48:56:3f:8a:31: a7:b7:d8:54:ef:f0:f4:0e:d8:17:5d:00:84:7b:fd: f9:1a:40:36:f2:f3:f4:d4:72:c2:49:60:bd:23:b0: cd:d3:28:f5:33:ed:a4:87:cd:3f:fd:86:01:d2:ee: f6:0e:00:67:a8:06:af:a6:7d:49:df:7c:45:c2:09: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:5B:B7:62:4C:41:45:B2:4D:6A:AC:E2:0C:54:76:74:A4:77:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c8daa929-a74d-3c47-b218-4c5184b03df6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 199.45.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:10:79:c7:82:ee:59:31:66:25:2d:f9:fe:bb:b9:20:89:a5: 92:61:72:12:b5:f8:17:5f:73:91:42:47:06:96:a2:4a:e8:ba: 45:3f:84:51:08:e3:e3:4c:82:41:1e:aa:ec:13:f1:35:4c:db: bc:66:3d:32:cf:8a:f3:94:d5:92:60:2d:61:9a:32:14:9c:90: d2:22:ba:58:e1:da:e8:63:37:d6:9b:ce:ce:77:e6:46:b4:16: 3a:01:be:08:97:92:f6:d0:36:7c:f8:ae:39:82:25:be:7e:3a: 67:2e:c7:c7:d0:2c:89:53:de:a3:f0:00:28:64:d7:be:ac:b8: f8:8f:de:41:b4:6a:36:d5:93:6f:2c:ff:b8:4e:23:35:f6:7f: cf:1f:56:cf:94:6f:c3:02:23:87:d4:c7:77:97:3b:8f:06:74: df:a7:4d:ed:3e:f8:33:d1:cd:33:2d:28:b9:e0:d1:31:0a:cf: f2:49:46:c8:64:2a:43:01:6f:68:f1:4b:65:03:22:75:90:a8: 51:5b:52:96:2f:e8:89:5c:b3:18:8c:64:50:6e:3f:9a:c9:4d: 3c:42:68:7d:fb:31:ca:92:fd:6f:de:48:b1:b1:12:15:9e:fb: 65:cf:dd:05:86:5f:ce:bc:71:e4:3e:10:c4:1b:cb:d8:1f:34: d9:be:38:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl068lM1OWIGw1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGY1YmI0MmUtNDdiMi00MzQ5LWE2YTAtYWQyY2E0NWUzYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob9diK8vgMQmU4KN9lCInT+GEkPMjQjPorbV fTAqJS4uYzSVbBYrthhWX0rfu6KuPc6UygM3KmT71zhVhDkKNFMwgVT3E0wvC6Jn 1jp0net8njQlOzCFTDnVKvI73sIgzrh+VP2JJ8Xe1npzzUt+8QEI/W1ChH1ciUeQ u9m97Ax2PQghQCG2n3Kn1hV0qGK2ghanKy+FBzDBFgqZLWrxr86bly8GBwBSFzPR Uz0z5DEBBcTSR9/c8ufIE7kuSFY/ijGnt9hU7/D0DtgXXQCEe/35GkA28vP01HLC SWC9I7DN0yj1M+2kh80//YYB0u72DgBnqAavpn1J33xFwgmN3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjXW7diTEFFsk1qrOIMVHZ0pHcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvYzhkYWE5MjktYTc0ZC0z YzQ3LWIyMTgtNGM1MTg0YjAzZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4QeceC7lkxZiUt+f67uSCJpZJhchK1+Bdfc5FCRwaWokroukU/hFEI 4+NMgkEequwT8TVM27xmPTLPivOU1ZJgLWGaMhSckNIiuljh2uhjN9abzs535ka0 FjoBvgiXkvbQNnz4rjmCJb5+Omcux8fQLIlT3qPwAChk176suPiP3kG0ajbVk28s /7hOIzX2f88fVs+Ub8MCI4fUx3eXO48GdN+nTe0++DPRzTMtKLng0TEKz/JJRshk KkMBb2jxS2UDInWQqFFbUpYv6IlcsxiMZFBuP5rJTTxCaH37McqS/W/eSLGxEhWe +2XP3QWGX868ceQ+EMQby9gfNNm+OGE= -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:43 2026 by rpki-client