$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa File: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (raw, json) Hash identifier: 1KDy2OPglC8i9d8ghYe5Xi5qmEYmPAKme8YYWt4NvCk= Subject key identifier: 36:35:2C:CF:57:81:67:90:CD:48:5A:12:19:35:91:74:83:77:37:75 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584EE38C93BED356D2E632B46C00 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 21766 IP address blocks: 199.189.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:93:be:d3:56:d2:e6:32:b4:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=29318383-f73c-49f3-bf43-6603bf7568d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2d:dc:d3:4a:98:cb:20:e4:c0:74:0d:34:4d: 93:12:8a:34:e5:71:01:80:98:7b:7e:e4:5a:a8:43: 07:f3:b6:a9:15:d7:08:2e:15:60:17:e4:ea:a0:c5: 60:42:2b:74:8d:34:6d:5b:55:fa:36:18:38:f5:bf: 61:4e:93:62:53:1d:7d:e2:4c:1f:ef:cd:c6:f7:ef: 7c:75:2e:c9:ea:01:69:c0:10:45:3a:05:2a:5b:5e: cd:60:eb:d9:d8:b4:04:19:66:61:2d:b7:13:71:1e: 35:3f:10:71:25:a0:f8:60:52:77:48:82:bc:38:f4: 3c:e7:45:ed:9e:db:4d:ad:50:53:6c:d3:b1:ba:62: d7:c7:30:fa:ec:c2:e8:3b:a3:bf:f2:7a:74:b9:31: 4d:b4:82:b8:5b:79:51:f3:da:14:e7:76:69:6e:24: 25:31:29:03:f4:cf:f9:2f:77:eb:a6:84:8c:8f:75: fa:f1:c1:17:86:f6:3e:3a:1b:dd:64:75:c0:40:93: cc:ca:21:b0:8d:13:05:31:8c:fb:92:d2:a4:a7:fa: 37:bd:08:29:09:d6:a0:55:39:23:c7:c4:7b:0d:38: 60:d1:af:db:8b:24:66:7d:e5:5b:8a:bc:87:80:a2: ef:d2:b9:bf:9e:d3:9a:ba:24:92:77:82:25:53:ad: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:2C:CF:57:81:67:90:CD:48:5A:12:19:35:91:74:83:77:37:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.189.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9b:a9:c7:5c:23:56:1f:fe:b2:6d:1f:63:0a:39:8e:4b:83: 53:2f:9c:36:85:19:ad:cb:1b:63:1a:82:e1:7f:67:4c:82:60: a3:4e:d3:ee:88:e7:2e:e9:cc:19:da:c9:26:98:af:8b:23:eb: 21:c7:69:a5:9f:a2:0f:74:c7:a9:22:8b:8d:11:b7:a9:28:c9: 95:13:88:e0:ad:c1:a3:ab:84:c3:d7:0f:03:41:c3:07:e3:8e: 44:52:46:b4:6c:1d:3a:73:ae:4b:11:32:35:78:c7:ce:62:df: a6:fc:9b:97:da:7a:42:3b:f0:26:c8:ee:4f:96:95:2a:b7:1e: 7d:35:db:d9:c3:f5:c4:60:e5:cd:4a:db:be:6a:d4:41:26:0c: 13:68:ed:e2:23:52:87:22:ff:77:7f:56:aa:f7:f3:1f:66:f0: a3:ed:0f:16:c0:2a:54:f6:35:83:fc:fa:37:21:be:54:c6:58: 08:53:a3:04:e4:05:c1:ba:f7:7c:49:a3:46:0d:ee:ac:e8:30: 8e:04:14:a9:d7:1b:7f:fa:58:1f:c9:65:05:49:96:38:8b:bb: 01:15:5f:d9:c7:85:0b:99:ec:53:f0:cb:5b:0a:a9:b3:c9:aa: 8d:90:cc:b5:7c:07:9c:a0:22:87:32:8a:4f:80:fb:ea:96:2a: d9:3b:d7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJO+01bS5jK0bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MjkzMTgzODMtZjczYy00OWYzLWJmNDMtNjYwM2JmNzU2OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy3c00qYyyDkwHQNNE2TEoo05XEBgJh7fuRa qEMH87apFdcILhVgF+TqoMVgQit0jTRtW1X6Nhg49b9hTpNiUx194kwf783G9+98 dS7J6gFpwBBFOgUqW17NYOvZ2LQEGWZhLbcTcR41PxBxJaD4YFJ3SIK8OPQ850Xt nttNrVBTbNOxumLXxzD67MLoO6O/8np0uTFNtIK4W3lR89oU53ZpbiQlMSkD9M/5 L3frpoSMj3X68cEXhvY+OhvdZHXAQJPMyiGwjRMFMYz7ktKkp/o3vQgpCdagVTkj x8R7DThg0a/biyRmfeVbiryHgKLv0rm/ntOauiSSd4IlU61LkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY1LM9XgWeQzUhaEhk1kXSDdzd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWEwYWU3ZmEtZTc0Ny0z ZTgwLWJiY2UtMmUwZjVhZDU3ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6bqcdcI1Yf/rJtH2MKOY5Lg1MvnDaFGa3LG2MaguF/Z0yCYKNO0+6I 5y7pzBnaySaYr4sj6yHHaaWfog90x6kii40Rt6koyZUTiOCtwaOrhMPXDwNBwwfj jkRSRrRsHTpzrksRMjV4x85i36b8m5faekI78CbI7k+WlSq3Hn0129nD9cRg5c1K 275q1EEmDBNo7eIjUoci/3d/Vqr38x9m8KPtDxbAKlT2NYP8+jchvlTGWAhTowTk BcG693xJo0YN7qzoMI4EFKnXG3/6WB/JZQVJljiLuwEVX9nHhQuZ7FPwy1sKqbPJ qo2QzLV8B5ygIocyik+A++qWKtk71+A= -----END CERTIFICATE-----Generated at Thu Sep 24 14:06:12 2026 by rpki-client