$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa File: 252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa (raw, json) Hash identifier: XroLfgAkuhun8kPaTRg2MhMZwsoD9vqIVIBWc76bC0Q= Subject key identifier: A5:70:E9:CE:67:1E:4B:FE:CE:6E:3A:40:C8:8A:64:7D:F6:3F:B9:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A03C4A382D87B22E16EE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 199.36.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:3c:4a:38:2d:87:b2:2e:16:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=24bcc2fa-78aa-4267-b415-597530a41646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:23:5f:da:8d:74:ec:28:e8:38:14:b0:c9: b4:45:fc:1b:ed:55:f7:fd:11:4e:8a:a8:7c:6f:45: 1a:9e:98:9d:68:a2:f8:cf:fb:da:40:bf:8d:cb:30: 21:dd:1c:0d:4c:77:c2:91:98:00:18:80:44:49:e9: ed:89:ce:49:de:ed:42:0c:f2:64:3f:aa:3e:02:b5: 8e:31:50:6b:12:6e:9b:f1:28:52:0d:82:b2:9e:41: 1c:5a:74:5d:e9:a3:7b:ab:d9:d8:49:33:87:39:77: ba:2d:7e:e6:d8:9e:99:c0:f5:f8:70:57:b0:22:aa: dd:94:f1:d1:61:ad:32:e7:c6:b8:f7:ce:91:5a:58: 57:a0:c8:6b:fe:32:fb:90:d7:ab:1b:70:e9:08:60: 2c:23:39:22:a5:b2:c4:0d:d0:65:48:67:53:2b:7f: 82:81:0b:0b:b3:e2:51:7f:0e:25:af:05:c5:fc:6f: 3e:8e:47:80:bb:eb:99:88:46:68:9a:e6:01:5d:95: 0b:1d:26:86:e2:b2:05:ca:f4:a3:dc:c3:9b:86:d2: 4e:ad:42:e4:0c:50:19:6d:d5:c7:c6:b7:d3:b8:67: 16:18:b1:22:94:f2:c0:98:3a:c1:1f:95:47:dd:aa: 65:7e:64:bf:00:c8:99:bd:5e:93:a6:7e:db:ba:70: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:E9:CE:67:1E:4B:FE:CE:6E:3A:40:C8:8A:64:7D:F6:3F:B9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:47:34:88:7b:41:79:ff:29:96:99:1a:b6:16:7a:98:58:e2: 7b:26:c7:ce:f3:c5:75:a5:0a:ec:6d:f2:57:b0:6e:97:03:7c: ab:3e:e7:b7:c9:76:aa:e6:49:fa:cb:7c:fe:ab:3b:e3:57:fe: 74:55:76:3c:7f:e8:53:7b:1a:6b:67:c7:4c:d6:f7:4d:a2:f4: 05:b2:b5:9b:06:69:d3:67:01:30:19:86:c5:5e:b4:90:c6:70: 07:48:93:26:70:47:94:ce:4c:4a:50:19:a5:7f:6a:df:9a:b6: e2:dd:36:ba:e7:ec:68:3c:3c:1d:6a:d5:ca:2c:aa:c3:fc:e8: be:91:19:30:25:45:8e:c0:6c:c4:54:6b:61:25:e8:20:03:f1: dd:15:a5:2a:49:02:f7:8a:47:12:54:80:28:9b:e3:60:e0:2b: ad:f7:6e:57:af:d4:41:45:63:28:4f:ce:5c:d7:40:69:59:dc: e9:b9:ee:8c:52:97:57:29:94:0a:d6:ca:c5:cd:cd:8b:44:c4: e2:5d:00:13:10:25:12:64:2b:23:a4:f7:4a:e1:af:1b:fb:62: 47:a5:06:32:1c:dc:eb:c9:6c:88:c1:63:3e:b6:78:8b:6b:74: e7:3b:0f:37:d8:9f:b6:e9:ac:7f:46:54:44:55:13:4e:cd:4e: 1f:b5:6b:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noDxKOC2Hsi4W7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjRiY2MyZmEtNzhhYS00MjY3LWI0MTUtNTk3NTMwYTQxNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1AjX9qNdOwo6DgUsMm0Rfwb7VX3/RFOiqh8 b0UanpidaKL4z/vaQL+NyzAh3RwNTHfCkZgAGIBESentic5J3u1CDPJkP6o+ArWO MVBrEm6b8ShSDYKynkEcWnRd6aN7q9nYSTOHOXe6LX7m2J6ZwPX4cFewIqrdlPHR Ya0y58a4986RWlhXoMhr/jL7kNerG3DpCGAsIzkipbLEDdBlSGdTK3+CgQsLs+JR fw4lrwXF/G8+jkeAu+uZiEZomuYBXZULHSaG4rIFyvSj3MObhtJOrULkDFAZbdXH xrfTuGcWGLEilPLAmDrBH5VH3aplfmS/AMiZvV6Tpn7bunAVKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVw6c5nHkv+zm46QMiKZH32P7nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjUyZjNhZTgtN2FlYS0z OTg5LThiNjItZjFiYmU1YzljM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhHNIh7QXn/KZaZGrYWephY4nsmx87zxXWlCuxt8lewbpcDfKs+57fJ dqrmSfrLfP6rO+NX/nRVdjx/6FN7Gmtnx0zW902i9AWytZsGadNnATAZhsVetJDG cAdIkyZwR5TOTEpQGaV/at+atuLdNrrn7Gg8PB1q1cosqsP86L6RGTAlRY7AbMRU a2El6CAD8d0VpSpJAveKRxJUgCib42DgK633blev1EFFYyhPzlzXQGlZ3Om57oxS l1cplArWysXNzYtExOJdABMQJRJkKyOk90rhrxv7YkelBjIc3OvJbIjBYz62eItr dOc7DzfYn7bprH9GVERVE07NTh+1a7k= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:18 2026 by rpki-client