$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa File: a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa (raw, json) Hash identifier: Ulh1uT3bp6O19zljNJF0LwvpujgaYywy6W/7uiHUjGk= Subject key identifier: A8:A1:17:4B:19:4D:B9:C5:94:A6:23:C8:7B:44:E6:D3:BA:62:05:C7 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EA788695CCF343E0A21167B40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 199.87.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:69:5c:cf:34:3e:0a:21:16:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bf1600d0-3ca5-4708-8c7c-fe35287143dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:05:f2:05:8a:fd:72:f0:e2:f7:d3:22:19: 1c:dc:7e:af:94:36:81:3c:17:0e:4d:fa:b5:c0:08: bf:ed:19:e5:79:65:1b:15:a9:f4:8a:2a:76:c4:65: bd:fe:10:74:bf:b5:d4:37:dd:82:c4:63:07:74:26: 2f:39:fe:fe:2e:40:10:e3:25:70:04:b1:84:85:6a: a2:46:56:b3:e9:dd:fb:c7:a2:64:01:b4:ec:09:fb: bd:19:e1:76:27:71:e4:e3:2a:ce:f2:4d:4f:4e:28: 95:81:c6:7b:89:d5:44:c0:4f:1a:d3:ba:63:6c:47: bf:26:f2:61:72:a4:57:7a:c3:e6:72:89:cf:9b:4b: 82:9d:9c:db:5f:a6:b3:3f:c7:b4:32:a3:67:de:72: 2d:87:c0:cf:f1:77:e7:9c:ad:1e:4e:e2:c7:6c:36: fa:b6:25:28:2b:10:f9:6d:74:2a:84:76:d4:20:15: 5d:e6:03:d9:1d:39:7f:1e:c2:c4:e6:ff:ec:bf:0d: 5f:10:fd:8d:20:8a:58:51:b4:09:11:ce:b9:4d:09: 22:b9:58:d1:44:ab:bb:7b:ba:eb:60:21:ca:50:13: 58:b0:46:20:fa:26:03:fc:84:00:17:f8:74:b5:56: 33:69:59:f8:f1:ea:36:b7:b4:15:8c:96:c8:ee:28: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A1:17:4B:19:4D:B9:C5:94:A6:23:C8:7B:44:E6:D3:BA:62:05:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0b:69:e7:1d:42:26:f9:70:de:37:00:1a:0a:55:a1:f4:a5: 43:5c:98:05:01:15:31:b2:d1:7f:82:cc:2e:bf:77:4b:d7:4e: ff:ed:75:e6:b3:cc:bc:ef:03:74:27:34:ee:16:82:9f:49:68: 6f:97:9b:a2:98:72:74:76:17:8c:d4:96:3b:b7:40:65:44:ee: 34:1f:d6:68:74:24:b4:5f:67:d6:b9:f8:88:0b:95:ca:2b:b1: f5:1d:f3:36:5c:3f:93:1d:0c:9a:b7:43:f6:b5:c2:4d:f8:4b: d5:ee:16:8c:42:25:f5:b8:a9:79:80:e5:56:bd:0f:03:3c:dc: ae:12:d3:ca:95:1a:82:03:7d:d4:51:c9:61:9f:e0:fe:d6:a2: 68:db:6b:fc:76:1f:39:b8:95:b6:ca:ab:30:46:ad:20:de:c5: 00:f5:76:52:f6:a8:54:c1:06:f5:62:38:0c:aa:72:0f:cc:a9: 83:1b:ea:65:62:c9:1c:7b:8a:5f:09:e0:39:dd:09:9a:c3:44: 7e:da:2f:30:c1:15:79:e3:84:a6:40:47:18:83:f4:8f:7e:3c: 32:69:a2:cf:7f:4c:47:03:87:95:1c:53:d6:f5:a2:7b:2e:7e: 88:af:a7:02:43:fa:b0:9c:2e:cd:04:f9:23:f4:28:6c:ef:18: 88:66:e0:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGlczzQ+CiEWe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmYxNjAwZDAtM2NhNS00NzA4LThjN2MtZmUzNTI4NzE0M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8wF8gWK/XLw4vfTIhkc3H6vlDaBPBcOTfq1 wAi/7RnleWUbFan0iip2xGW9/hB0v7XUN92CxGMHdCYvOf7+LkAQ4yVwBLGEhWqi Rlaz6d37x6JkAbTsCfu9GeF2J3Hk4yrO8k1PTiiVgcZ7idVEwE8a07pjbEe/JvJh cqRXesPmconPm0uCnZzbX6azP8e0MqNn3nIth8DP8XfnnK0eTuLHbDb6tiUoKxD5 bXQqhHbUIBVd5gPZHTl/HsLE5v/svw1fEP2NIIpYUbQJEc65TQkiuVjRRKu7e7rr YCHKUBNYsEYg+iYD/IQAF/h0tVYzaVn48eo2t7QVjJbI7ijpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKihF0sZTbnFlKYjyHtE5tO6YgXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTFjNmUxODktOGE0MS0z MGY1LWEyNTgtZjQxMWU4N2VhOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoLaecdQib5cN43ABoKVaH0pUNcmAUBFTGy0X+CzC6/d0vXTv/tdeaz zLzvA3QnNO4Wgp9JaG+Xm6KYcnR2F4zUlju3QGVE7jQf1mh0JLRfZ9a5+IgLlcor sfUd8zZcP5MdDJq3Q/a1wk34S9XuFoxCJfW4qXmA5Va9DwM83K4S08qVGoIDfdRR yWGf4P7Womjba/x2Hzm4lbbKqzBGrSDexQD1dlL2qFTBBvViOAyqcg/MqYMb6mVi yRx7il8J4DndCZrDRH7aLzDBFXnjhKZARxiD9I9+PDJpos9/TEcDh5UcU9b1onsu foivpwJD+rCcLs0E+SP0KGzvGIhm4A0= -----END CERTIFICATE-----Generated at Wed Jul 29 11:25:52 2026 by rpki-client