$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: HKgKbk4t3hNAIrCKATkXAV5Kk+yNsc7VjnTvE9NJiGE= Subject key identifier: 66:79:78:C3:5E:1F:82:FF:A5:86:56:E2:43:52:53:D3:88:AA:A9:57 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584E210EFE47514065413B3B1EE0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:fe:47:51:40:65:41:3b:3b:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=33b477ea-0a67-4080-8da6-47582ca1219e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:7d:15:f7:97:30:22:55:e6:1d:9c:b6:ca: 6c:77:81:cf:e9:f3:36:df:08:50:32:91:34:d0:58: e4:63:41:59:c0:ce:5f:7e:26:b8:58:58:d0:11:08: f6:19:1c:71:c5:a8:f0:86:d2:43:1d:80:fe:e9:b9: 08:12:59:a9:be:7c:b1:60:ef:ab:9c:77:72:cc:70: 7f:c5:73:5f:d1:7c:34:cf:53:2f:4c:d1:bb:c1:80: 57:be:e5:ed:ad:de:39:25:6b:59:00:21:c0:2a:f9: 7e:15:6e:83:a4:fd:1c:af:88:dd:8a:85:f2:c2:74: ed:dd:49:96:ef:9a:4c:f6:bf:ff:a4:08:cc:33:1c: 72:d1:82:26:b3:2e:c9:1c:98:72:34:48:25:05:c0: ba:0c:a3:62:54:3b:94:0f:33:e7:75:68:ed:79:55: 9f:27:9d:59:8b:70:05:12:7b:cd:39:2e:48:ee:47: d2:60:99:75:5f:41:72:64:ee:e7:03:1b:2a:7c:60: 89:74:e9:59:7b:b6:13:9f:12:af:29:96:6c:1e:af: 56:f6:42:ae:fa:49:c2:47:10:ea:41:a1:d8:45:e2: 35:21:b7:6e:a4:94:8d:be:cf:2d:9d:aa:b0:12:63: 9c:56:08:4b:ce:2a:5a:82:76:f8:b6:50:35:97:7a: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:79:78:C3:5E:1F:82:FF:A5:86:56:E2:43:52:53:D3:88:AA:A9:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:db:91:79:2d:b2:cc:57:2d:d1:9b:54:34:26:e8:87:ea:f0: c3:71:58:41:78:a9:dc:95:0c:14:28:e6:0e:7c:8f:a3:bc:63: 18:43:6f:76:bd:f7:76:1c:59:27:f4:f8:1e:c5:c3:50:38:66: 61:41:29:70:70:3c:1d:51:3f:a3:df:c3:1d:58:47:1f:a6:a8: a9:22:23:c6:82:83:b2:1a:b2:c9:58:a0:e0:fd:ca:08:5b:21: 35:69:97:9d:79:c3:77:14:13:c6:11:50:43:fb:a8:32:e3:6d: bc:fa:f4:e9:57:41:2a:a9:f3:2b:a0:70:47:5e:54:58:00:ac: fa:34:ba:d8:3f:31:c8:83:28:79:38:fb:29:d4:1e:77:5b:81: 5e:e9:d0:4a:b0:b1:61:f5:96:67:26:c6:70:f1:42:25:65:be: d4:ea:3b:de:fa:ca:2d:1a:68:31:2b:52:69:bb:68:2a:4d:ab: c6:4c:45:c0:a9:90:2d:bb:b4:d5:93:24:a2:04:cd:18:9e:a1: d3:51:0b:2a:4f:ae:d6:63:4d:45:94:24:eb:d6:71:21:73:ff: 04:ec:f4:6d:d6:58:19:60:3a:34:7a:63:7a:54:ea:42:19:65: aa:d1:0b:82:81:7b:33:1d:fe:84:bc:44:57:e7:b7:87:4b:64: 9a:ff:34:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDv5HUUBlQTs7HuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk MzNiNDc3ZWEtMGE2Ny00MDgwLThkYTYtNDc1ODJjYTEyMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA99FfeXMCJV5h2ctspsd4HP6fM23whQMpE0 0FjkY0FZwM5ffia4WFjQEQj2GRxxxajwhtJDHYD+6bkIElmpvnyxYO+rnHdyzHB/ xXNf0Xw0z1MvTNG7wYBXvuXtrd45JWtZACHAKvl+FW6DpP0cr4jdioXywnTt3UmW 75pM9r//pAjMMxxy0YImsy7JHJhyNEglBcC6DKNiVDuUDzPndWjteVWfJ51Zi3AF EnvNOS5I7kfSYJl1X0FyZO7nAxsqfGCJdOlZe7YTnxKvKZZsHq9W9kKu+knCRxDq QaHYReI1IbdupJSNvs8tnaqwEmOcVghLzipagnb4tlA1l3qyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ5eMNeH4L/pYZW4kNSU9OIqqlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvbkXktssxXLdGbVDQm6Ifq8MNxWEF4qdyVDBQo5g58j6O8YxhDb3a9 93YcWSf0+B7Fw1A4ZmFBKXBwPB1RP6Pfwx1YRx+mqKkiI8aCg7IasslYoOD9yghb ITVpl515w3cUE8YRUEP7qDLjbbz69OlXQSqp8yugcEdeVFgArPo0utg/MciDKHk4 +ynUHndbgV7p0EqwsWH1lmcmxnDxQiVlvtTqO976yi0aaDErUmm7aCpNq8ZMRcCp kC27tNWTJKIEzRieodNRCypPrtZjTUWUJOvWcSFz/wTs9G3WWBlgOjR6Y3pU6kIZ ZarRC4KBezMd/oS8RFfnt4dLZJr/NEs= -----END CERTIFICATE-----Generated at Sat Jun 13 17:57:12 2026 by rpki-client