$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa File: 04baf0fa-6a1d-3766-a496-ca289440ff8c.roa (raw, json) Hash identifier: oSn/6h3ahRDpxtV+mawj80NA31mp+B8EJyL6+izi8I4= Subject key identifier: 8F:6F:C3:78:CB:88:46:15:BB:38:1F:04:08:E5:8D:14:30:55:4F:C9 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584E9EAFDF98975DA9D0417B8C00 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 29900 IP address blocks: 162.218.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:df:98:97:5d:a9:d0:41:7b:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=0eb5bde4-823e-4fb0-84ee-a82c612c9bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ab:50:cf:c1:d0:c9:7a:33:f2:5e:36:2c:de: d1:c0:58:dc:21:a2:07:a8:0c:9d:76:aa:6b:fc:5f: 25:3a:6b:4a:50:1a:58:d3:35:02:4c:7c:a5:a5:03: b0:df:70:d5:da:61:60:34:6b:2a:f6:e2:85:20:7e: c7:1e:5c:3c:b2:b0:85:92:11:ff:71:ea:d3:5c:fc: 30:c8:89:bc:dc:d2:f5:0e:ec:20:ba:47:fb:5d:a1: 41:d4:8e:d2:13:b1:d7:d1:6d:18:b8:d2:e0:03:8c: d0:1d:92:a2:fa:dd:a4:8b:4e:4d:53:7d:0d:37:12: b7:ae:de:8f:e0:cb:cd:53:0c:fe:0b:a3:44:ae:e9: 5f:a0:8d:e6:bd:47:04:15:08:14:64:9a:41:b8:96: dc:b0:5c:59:b9:ce:f1:a1:4c:8a:7a:df:7d:10:8a: f2:0e:65:25:0d:df:8d:0c:f1:ac:e5:8e:73:16:16: 5c:66:55:47:44:e9:71:be:ca:96:18:f8:bc:f6:90: 60:2c:59:3b:c7:28:cc:86:26:76:1f:14:29:51:49: 75:36:b7:d1:d1:f6:61:c4:2f:14:c0:e4:5e:97:73: c4:4c:9c:7e:12:33:ee:4f:58:02:22:a5:78:35:4c: 95:22:22:01:4e:f1:54:3f:46:ea:83:28:6f:bd:9f: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:C3:78:CB:88:46:15:BB:38:1F:04:08:E5:8D:14:30:55:4F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:09:32:bd:55:10:08:af:e2:ac:15:3f:f3:b7:5d:8a:b3:ea: 1a:97:49:2c:19:3e:00:75:d4:fe:43:9d:ea:13:1f:f3:66:d9: 50:53:d6:c3:8d:8a:d8:69:4b:81:8a:06:86:ff:6b:49:05:17: d5:2c:1a:40:5b:9e:89:8a:63:ec:a8:de:f9:e5:8f:e9:2b:c3: 1f:c4:60:92:b7:a1:5c:0d:ed:2e:5c:a3:d3:ec:05:a6:e9:19: 7c:43:cf:7f:2e:e3:ec:95:f9:44:86:2c:2e:6e:c9:46:f8:95: 21:30:84:b4:e1:62:62:e9:5e:5e:11:20:c7:b7:f4:99:15:0b: 3b:16:fd:ba:f1:73:b8:ca:b5:98:19:4d:5a:1c:a4:c5:a1:65: 58:83:f7:6e:8b:60:43:da:74:a8:95:cf:b9:7f:e8:3f:04:ef: 90:0f:69:09:b9:b5:c9:eb:c1:49:62:9e:3d:a5:8c:18:c0:d6: 63:ad:1c:b7:7d:1c:e6:61:f6:de:73:99:84:16:da:76:d2:89: 14:38:89:46:1e:b0:a3:ba:b7:c2:71:0b:d3:c1:3f:43:43:2d: c0:33:a7:66:3f:3e:29:82:9e:05:6e:97:c5:ab:62:41:44:0b: f6:d7:f4:88:9a:51:7c:da:a0:3f:c3:e8:e0:cc:c0:da:57:b2: 79:0e:23:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er9+Yl12p0EF7jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MGViNWJkZTQtODIzZS00ZmIwLTg0ZWUtYTgyYzYxMmM5YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKtQz8HQyXoz8l42LN7RwFjcIaIHqAyddqpr /F8lOmtKUBpY0zUCTHylpQOw33DV2mFgNGsq9uKFIH7HHlw8srCFkhH/cerTXPww yIm83NL1Duwgukf7XaFB1I7SE7HX0W0YuNLgA4zQHZKi+t2ki05NU30NNxK3rt6P 4MvNUwz+C6NErulfoI3mvUcEFQgUZJpBuJbcsFxZuc7xoUyKet99EIryDmUlDd+N DPGs5Y5zFhZcZlVHROlxvsqWGPi89pBgLFk7xyjMhiZ2HxQpUUl1NrfR0fZhxC8U wORel3PETJx+EjPuT1gCIqV4NUyVIiIBTvFUP0bqgyhvvZ+JxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9vw3jLiEYVuzgfBAjljRQwVU/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvMDRiYWYwZmEtNmExZC0z NzY2LWE0OTYtY2EyODk0NDBmZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMJMr1VEAiv4qwVP/O3XYqz6hqXSSwZPgB11P5DneoTH/Nm2VBT1sON ithpS4GKBob/a0kFF9UsGkBbnomKY+yo3vnlj+krwx/EYJK3oVwN7S5co9PsBabp GXxDz38u4+yV+USGLC5uyUb4lSEwhLThYmLpXl4RIMe39JkVCzsW/brxc7jKtZgZ TVocpMWhZViD926LYEPadKiVz7l/6D8E75APaQm5tcnrwUlinj2ljBjA1mOtHLd9 HOZh9t5zmYQW2nbSiRQ4iUYesKO6t8JxC9PBP0NDLcAzp2Y/PimCngVul8WrYkFE C/bX9IiaUXzaoD/D6ODMwNpXsnkOIwo= -----END CERTIFICATE-----Generated at Wed Jul 29 04:30:23 2026 by rpki-client