$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: hdmDvLtT9VBAIyj27zNx+sYItrRyBEvnGQ1CtL/v5YY= Subject key identifier: 0E:44:57:7A:51:DF:BA:DC:DD:98:9C:76:CE:35:DF:F8:1F:34:CA:BC Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EA78769C283027708E380A380 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:69:c2:83:02:77:08:e3:80:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a1c77b5a-3e88-4477-a31c-5ecb6b044d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:24:a5:a8:df:90:85:12:19:3d:37:4c:8a: b7:8e:83:ab:cd:4d:1a:1f:3a:63:30:ed:2e:9a:b4: 6a:30:f8:30:2f:b8:70:82:45:b4:62:0a:3b:a8:02: 69:5a:89:7d:55:fb:ff:70:c6:ec:c7:b2:ac:69:21: 17:87:55:28:34:f0:62:65:90:6a:2a:f2:ec:e4:91: 3d:07:93:cb:3a:65:3a:25:60:23:a0:89:8f:c8:bc: cf:54:03:5e:ee:70:02:8a:18:ef:9b:e1:27:28:d9: c0:87:6e:4c:94:77:fd:3c:07:c4:27:86:e7:cd:d9: ca:95:81:69:90:83:1c:50:f7:ea:45:09:85:06:c1: 4b:88:c9:62:4e:f9:65:cd:50:90:9b:57:72:96:8b: a7:e9:ba:f4:88:56:59:30:7d:a0:16:52:ed:da:7f: ad:6e:03:5e:db:04:b0:43:68:42:d0:3f:8e:24:93: 37:d9:3b:d3:3e:eb:9f:58:7f:ab:c3:6c:c9:4a:db: 93:24:03:c1:45:9d:ec:98:95:c0:67:6b:25:53:01: 14:40:e1:3c:e7:7e:b6:04:04:1f:fa:05:db:92:13: 4b:14:0d:77:5a:f9:57:38:4a:7a:0b:7c:d1:91:22: b8:c7:ba:a1:b3:08:23:4f:a6:72:c0:79:04:ff:77: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:57:7A:51:DF:BA:DC:DD:98:9C:76:CE:35:DF:F8:1F:34:CA:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d5:55:62:71:7b:e1:55:15:e2:b0:d5:9d:7a:f4:ae:9a:32: c6:b7:99:99:47:d8:06:96:87:7b:a7:65:7b:5b:07:84:92:24: 5b:d2:c2:c3:eb:2b:6a:6b:17:ab:fa:93:4a:c9:66:fe:0b:41: 2b:1d:ed:77:70:7f:1d:28:28:0f:e7:28:0e:0b:a7:e2:63:11: 45:27:8e:e7:79:51:1d:b1:3d:03:a4:5f:42:10:1b:e8:53:0f: 81:4b:8c:3c:75:70:fa:c0:8a:ac:8c:dd:7e:89:2f:51:6c:b2: e4:09:41:24:85:40:35:c2:f0:63:55:0b:5d:68:0a:55:0f:0f: 09:61:e0:7f:00:ef:0a:e7:3f:6f:4d:c3:1b:5a:ea:d3:2e:be: a1:fa:68:9a:01:31:61:03:28:a8:a5:ac:c0:b9:ad:d1:78:b1: 71:02:cf:e8:de:93:27:2a:c9:1b:eb:78:aa:77:46:6d:47:9e: 67:14:7b:a4:48:7a:26:40:70:95:b9:99:30:86:65:1a:25:f9: fe:f7:bb:d1:b9:0f:8c:b3:ae:91:55:89:1c:0b:fb:b2:97:cb: 6d:77:55:c0:11:9a:9d:f4:2f:ef:b1:a9:ed:86:cf:10:1a:ba: 64:09:5f:68:6c:7a:12:40:a8:42:99:47:e2:10:c7:55:dc:bd: 2a:da:2e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2nCgwJ3COOAo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTFjNzdiNWEtM2U4OC00NDc3LWEzMWMtNWVjYjZiMDQ0ZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK4kpajfkIUSGT03TIq3joOrzU0aHzpjMO0u mrRqMPgwL7hwgkW0Ygo7qAJpWol9Vfv/cMbsx7KsaSEXh1UoNPBiZZBqKvLs5JE9 B5PLOmU6JWAjoImPyLzPVANe7nACihjvm+EnKNnAh25MlHf9PAfEJ4bnzdnKlYFp kIMcUPfqRQmFBsFLiMliTvllzVCQm1dyloun6br0iFZZMH2gFlLt2n+tbgNe2wSw Q2hC0D+OJJM32TvTPuufWH+rw2zJStuTJAPBRZ3smJXAZ2slUwEUQOE85362BAQf +gXbkhNLFA13WvlXOEp6C3zRkSK4x7qhswgjT6ZywHkE/3eaTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5EV3pR37rc3Zicds413/gfNMq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3VVWJxe+FVFeKw1Z169K6aMsa3mZlH2AaWh3unZXtbB4SSJFvSwsPr K2prF6v6k0rJZv4LQSsd7Xdwfx0oKA/nKA4Lp+JjEUUnjud5UR2xPQOkX0IQG+hT D4FLjDx1cPrAiqyM3X6JL1FssuQJQSSFQDXC8GNVC11oClUPDwlh4H8A7wrnP29N wxta6tMuvqH6aJoBMWEDKKilrMC5rdF4sXECz+jekycqyRvreKp3Rm1HnmcUe6RI eiZAcJW5mTCGZRol+f73u9G5D4yzrpFViRwL+7KXy213VcARmp30L++xqe2GzxAa umQJX2hsehJAqEKZR+IQx1XcvSraLsg= -----END CERTIFICATE-----Generated at Wed Jul 29 10:16:02 2026 by rpki-client