$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: WFnodGCb3B1awnKbSlf9EGvDPPDf6jpbMng2kPaVT2s= Subject key identifier: BA:D3:61:CA:41:48:FB:BB:FB:B3:E1:63:CB:7F:C8:84:8C:1D:74:AA Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584EA7882A2DA1FA9332FFFD3880 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:2a:2d:a1:fa:93:32:ff:fd:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cbdb48d1-e0e5-4338-b0b6-6569fb3ce13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:58:60:c0:d1:4d:b0:87:77:74:b3:7c:b5: ce:2e:55:07:d9:77:f0:d0:fd:3f:b9:58:2f:bd:e4: 93:b2:8f:cc:f4:db:7f:e7:89:c1:bc:c4:d0:9c:40: f9:c6:10:db:6d:a8:98:c6:2e:62:b5:83:c5:83:9f: e9:bb:bf:d2:f2:d5:e6:cb:99:c1:37:29:bf:ae:5d: 88:9c:6d:ed:07:23:5b:29:33:5c:95:d9:56:42:c5: 2f:ad:80:0a:1b:8d:fc:9c:58:28:ab:b6:4b:0e:7e: a5:bf:1c:06:20:58:cd:85:77:d6:3c:68:69:be:2f: 1d:f0:36:e4:06:dc:15:82:47:0d:8e:ff:5c:00:be: 9b:68:5e:c9:cb:57:4c:1d:b3:32:81:33:58:c7:f1: 2d:9c:8b:bd:92:33:ad:ce:7e:6a:3c:74:b6:22:15: f3:d3:16:e5:5b:90:29:0a:5d:be:ab:c1:91:5d:4d: ad:8c:fe:76:74:bf:29:fb:1f:8b:62:d6:53:cb:62: ed:8b:32:cd:74:4f:3c:88:de:59:ee:18:23:31:aa: 27:e3:60:46:52:23:36:b6:75:92:87:2f:cc:db:f4: d7:fd:14:ba:31:2d:9b:0d:51:28:c4:a9:85:b0:2f: bb:67:1b:3e:17:42:80:9c:2e:63:51:f2:c7:74:8d: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D3:61:CA:41:48:FB:BB:FB:B3:E1:63:CB:7F:C8:84:8C:1D:74:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:db:88:41:65:25:8a:44:b0:4d:01:8c:4b:73:98:9c:1c:9c: f7:42:47:e4:6f:58:fc:49:71:7b:4f:43:11:62:df:13:a2:fb: 3c:f4:16:7a:42:ca:dc:47:c5:ee:a9:e4:a0:66:ab:13:07:e4: 30:5f:22:30:ca:bd:b8:1f:38:33:9d:85:8b:b2:d9:c4:48:5e: 51:f7:b5:c0:e4:b9:0d:96:f1:69:8a:de:39:b3:c5:22:1e:ab: 77:c9:17:e2:e7:5f:81:d9:8e:b8:2c:bc:86:df:b8:ff:7e:05: 93:d5:40:10:c0:2a:ee:be:6b:bf:7a:d6:d6:21:44:65:73:91: 23:72:24:c8:b0:73:00:eb:f3:b7:d5:58:a6:7c:d2:db:75:b6: 55:d4:cb:90:2b:52:0b:b0:b0:d8:2a:49:62:5d:1a:07:fb:3b: a1:fa:75:4f:06:f4:26:13:6d:7d:7b:74:71:39:00:98:00:fe: 57:12:f3:c7:67:91:9e:97:5b:93:4a:36:50:c0:4b:15:a0:5b: 05:5b:20:0e:7e:bf:d1:07:ec:fb:d5:bc:7f:88:22:92:25:b5: f9:01:47:a8:4f:e4:3d:0d:3f:98:96:66:4e:d5:96:b8:bd:05: 17:74:6e:22:58:64:d0:a3:fe:76:fd:15:e3:0e:5f:7b:1a:38: 29:90:72:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCotofqTMv/9OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2JkYjQ4ZDEtZTBlNS00MzM4LWIwYjYtNjU2OWZiM2NlMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgNYYMDRTbCHd3SzfLXOLlUH2Xfw0P0/uVgv veSTso/M9Nt/54nBvMTQnED5xhDbbaiYxi5itYPFg5/pu7/S8tXmy5nBNym/rl2I nG3tByNbKTNcldlWQsUvrYAKG438nFgoq7ZLDn6lvxwGIFjNhXfWPGhpvi8d8Dbk BtwVgkcNjv9cAL6baF7Jy1dMHbMygTNYx/EtnIu9kjOtzn5qPHS2IhXz0xblW5Ap Cl2+q8GRXU2tjP52dL8p+x+LYtZTy2LtizLNdE88iN5Z7hgjMaon42BGUiM2tnWS hy/M2/TX/RS6MS2bDVEoxKmFsC+7Zxs+F0KAnC5jUfLHdI2G2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrTYcpBSPu7+7PhY8t/yISMHXSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3biEFlJYpEsE0BjEtzmJwcnPdCR+RvWPxJcXtPQxFi3xOi+zz0FnpC ytxHxe6p5KBmqxMH5DBfIjDKvbgfODOdhYuy2cRIXlH3tcDkuQ2W8WmK3jmzxSIe q3fJF+LnX4HZjrgsvIbfuP9+BZPVQBDAKu6+a7961tYhRGVzkSNyJMiwcwDr87fV WKZ80tt1tlXUy5ArUguwsNgqSWJdGgf7O6H6dU8G9CYTbX17dHE5AJgA/lcS88dn kZ6XW5NKNlDASxWgWwVbIA5+v9EH7PvVvH+IIpIltfkBR6hP5D0NP5iWZk7Vlri9 BRd0biJYZNCj/nb9FeMOX3saOCmQcqc= -----END CERTIFICATE-----Generated at Wed Jul 29 07:11:02 2026 by rpki-client