$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa File: 0a495132-7cda-3198-aa84-524b4588371a.roa (raw, json) Hash identifier: 6CF9i9AzdfbQ2vzUjL90702MZ1fp8LY4sO+u2lWZOvc= Subject key identifier: CD:60:11:61:4C:FA:00:5E:62:8A:B8:63:C9:45:B5:65:65:0B:93:26 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584EE0C1F0752B275B9086373A00 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 21766 IP address blocks: 199.217.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:f0:75:2b:27:5b:90:86:37:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=2d4bc5a7-7cae-434b-ab84-a98761a8d231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:61:a2:0f:b8:b6:90:7f:86:18:cf:b5:3c: f1:80:11:5c:b0:6f:a8:a3:eb:51:c7:a1:78:81:4a: 20:d0:b1:21:fc:48:23:06:e2:b6:98:10:7c:e3:93: 25:1b:e2:7f:80:a4:45:1e:02:ed:8a:88:66:1b:4f: da:66:c9:12:08:1c:ed:17:7d:8c:f1:db:b3:02:18: e9:19:6e:c0:e9:2c:9d:69:2a:83:0a:e7:68:af:08: 63:7d:63:3c:ee:fa:b9:ac:1a:65:e0:a4:4e:60:49: 0c:32:68:b9:24:c4:03:c7:44:27:01:1e:7e:38:9f: 15:f1:fb:9b:33:f2:29:b2:a8:0f:88:86:12:7f:71: 8f:a8:a7:34:79:05:62:b8:44:4f:9c:24:12:71:ec: fa:90:d7:b3:66:36:aa:5c:58:ed:ff:6f:4c:df:fb: 6c:97:9d:8d:00:de:08:70:36:39:6a:f3:f5:e3:ae: f8:5d:23:a2:cd:4c:03:3a:a0:3f:53:c8:35:84:67: a3:cf:4c:42:f0:b8:44:65:e5:78:4c:44:22:ff:2a: 77:44:d7:d2:5e:cb:c0:50:5f:05:68:b9:73:81:82: 37:6a:d2:94:27:b7:c2:3f:41:57:41:05:b9:44:b3: 82:2f:71:12:02:33:33:51:dc:81:49:39:78:7e:65: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:60:11:61:4C:FA:00:5E:62:8A:B8:63:C9:45:B5:65:65:0B:93:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.217.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:09:3f:ae:bb:44:0d:2e:bd:ef:7e:f5:c6:85:b8:a4:51:bc: 26:aa:7a:11:b5:b6:5a:61:28:e6:2b:c0:13:57:ea:cc:76:e9: b7:5a:0a:33:53:95:ad:ab:2c:92:ed:e6:e8:96:b1:53:76:c8: aa:07:06:15:1c:90:dd:52:0b:75:4f:d4:72:14:ed:e3:88:76: 74:3a:f5:39:bc:c5:99:32:18:9b:4f:7e:43:d8:f0:51:02:90: de:e3:0c:34:25:5d:81:38:e7:4c:f9:81:62:6a:4e:22:b3:5b: 9d:58:49:b0:31:b6:66:93:c5:aa:47:6c:2b:11:28:a3:81:58: 30:6a:bd:3e:5c:aa:ab:ef:5c:93:32:2f:bd:ae:d9:8f:7c:16: d0:c3:1f:89:2e:c7:f2:4d:5d:33:be:6d:73:06:55:d9:ae:71: c8:1c:2b:d0:cd:13:fd:4a:e5:3f:66:e2:9e:0b:c7:67:b3:bf: ba:a0:76:e5:c4:cc:1a:6f:86:4d:03:41:f0:81:c7:d6:d2:24: cb:3d:7e:db:f8:53:e7:9b:4b:b3:47:10:81:93:f3:db:60:18: d0:ab:ef:e3:3e:d9:5a:57:44:37:7e:7e:52:fe:5e:aa:8d:db: a9:b0:51:b4:5a:57:71:6b:78:8a:1a:6a:04:02:1b:6a:46:e7: 55:df:55:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwfB1KydbkIY3OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MmQ0YmM1YTctN2NhZS00MzRiLWFiODQtYTk4NzYxYThkMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp91hog+4tpB/hhjPtTzxgBFcsG+oo+tRx6F4 gUog0LEh/EgjBuK2mBB845MlG+J/gKRFHgLtiohmG0/aZskSCBztF32M8duzAhjp GW7A6SydaSqDCudorwhjfWM87vq5rBpl4KROYEkMMmi5JMQDx0QnAR5+OJ8V8fub M/IpsqgPiIYSf3GPqKc0eQViuERPnCQScez6kNezZjaqXFjt/29M3/tsl52NAN4I cDY5avP14674XSOizUwDOqA/U8g1hGejz0xC8LhEZeV4TEQi/yp3RNfSXsvAUF8F aLlzgYI3atKUJ7fCP0FXQQW5RLOCL3ESAjMzUdyBSTl4fmWVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1gEWFM+gBeYoq4Y8lFtWVlC5MmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMGE0OTUxMzItN2NkYS0z MTk4LWFhODQtNTI0YjQ1ODgzNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEJP667RA0uve9+9caFuKRRvCaqehG1tlphKOYrwBNX6sx26bdaCjNT la2rLJLt5uiWsVN2yKoHBhUckN1SC3VP1HIU7eOIdnQ69Tm8xZkyGJtPfkPY8FEC kN7jDDQlXYE450z5gWJqTiKzW51YSbAxtmaTxapHbCsRKKOBWDBqvT5cqqvvXJMy L72u2Y98FtDDH4kux/JNXTO+bXMGVdmuccgcK9DNE/1K5T9m4p4Lx2ezv7qgduXE zBpvhk0DQfCBx9bSJMs9ftv4U+ebS7NHEIGT89tgGNCr7+M+2VpXRDd+flL+XqqN 26mwUbRaV3FreIoaagQCG2pG51XfVZc= -----END CERTIFICATE-----Generated at Sun Oct 11 13:49:39 2026 by rpki-client