$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa File: 295fda47-ec78-359b-8a00-77909cf1ddfb.roa (raw, json) Hash identifier: 0kWbM68t4ITNVwYEl2PR6Xgk//+D+jHgiah4OWyaRM8= Subject key identifier: 05:8C:18:1C:B3:DD:66:4F:89:04:FC:B7:A5:4B:7E:C4:DD:D0:79:F9 Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584F20F7CFCBA38E91047DDF5140 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 199.7.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cf:cb:a3:8e:91:04:7d:df:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=7eb89013-c4c2-49c1-96b7-861f127ceaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:ca:01:20:60:59:96:b4:79:25:24:2e:c8: 78:32:5c:2f:c8:9b:e4:56:bb:d2:2e:96:50:da:3f: 6e:c1:6b:dd:96:a7:77:a5:0a:9e:29:13:3d:cc:28: 10:f6:05:36:43:10:1f:65:d2:50:49:f6:02:a1:07: 15:31:5e:61:e1:94:02:8b:9c:b0:fa:57:4c:51:01: 76:f3:74:d5:76:f9:51:f9:8e:ad:c8:29:db:f4:63: 4f:4a:18:14:e7:91:99:8f:b2:22:18:9a:02:fb:12: d0:e5:53:45:c4:46:99:99:4f:2d:ef:dc:43:65:cf: ee:8a:08:42:09:35:22:fc:8e:f0:af:81:55:98:d9: e9:7f:b7:8f:a6:3e:2a:5d:22:d4:90:f1:4b:e2:56: 04:d2:0e:84:2e:93:b6:41:9c:06:6f:cb:32:8a:bb: 33:1b:6d:5f:a4:85:3b:09:5f:da:b3:81:57:b2:a5: 25:21:41:bc:bb:ee:3a:4c:26:ff:95:4a:4d:c8:6c: e2:88:1e:05:72:71:13:3a:c3:a9:1e:c5:41:f6:22: 0e:37:cf:b6:32:e6:60:6e:44:b1:62:c6:31:ee:8c: a3:a9:31:f7:0f:b0:6b:78:2c:b3:39:19:97:a0:93: bc:b2:6a:ce:00:4a:70:c8:12:24:77:57:82:c3:f7: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8C:18:1C:B3:DD:66:4F:89:04:FC:B7:A5:4B:7E:C4:DD:D0:79:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3c:db:43:6a:80:c1:13:e6:59:7f:16:10:57:75:fa:db:63: 93:e1:1f:74:1a:c6:b3:e5:5c:38:eb:3c:6d:47:db:30:93:32: dc:d1:76:b8:2c:a0:06:44:5a:84:0a:a6:18:7e:92:ff:64:05: f0:81:df:93:6b:e3:c0:c4:8c:ae:cd:40:3b:a1:4a:3f:2e:1e: 8a:8a:92:63:3d:c9:95:16:55:c4:f8:5c:4a:e5:36:74:0f:f5: 83:6a:2c:7a:50:7f:1a:1d:7a:94:eb:37:b4:cb:9e:3e:d2:a8: 43:7c:7c:27:1d:95:4e:2b:94:7a:9f:b2:bc:f1:94:19:5f:2a: dc:20:d3:ef:8a:76:f1:3b:56:06:3d:13:c4:24:44:47:23:d5: 9a:0b:02:60:7b:2c:e5:74:d5:f4:42:c6:96:62:2f:b6:f6:ee: f4:64:99:eb:a5:5e:66:e5:34:26:33:da:27:fa:a1:8c:11:20: 20:6e:27:1f:2a:73:09:48:80:83:6b:2d:40:8f:4c:5d:4c:3c: e3:83:83:41:51:ba:1a:94:e6:14:dc:2e:a0:08:79:44:91:35: aa:89:f3:0c:40:d3:fe:85:bc:1a:9f:f1:86:b2:92:e5:e9:5b: fe:c7:5f:34:da:fe:78:f5:1a:9e:8a:ec:61:b6:15:eb:80:8c: fc:fb:f9:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98/Lo46RBH3fUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk N2ViODkwMTMtYzRjMi00OWMxLTk2YjctODYxZjEyN2NlYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDfKASBgWZa0eSUkLsh4MlwvyJvkVrvSLpZQ 2j9uwWvdlqd3pQqeKRM9zCgQ9gU2QxAfZdJQSfYCoQcVMV5h4ZQCi5yw+ldMUQF2 83TVdvlR+Y6tyCnb9GNPShgU55GZj7IiGJoC+xLQ5VNFxEaZmU8t79xDZc/uighC CTUi/I7wr4FVmNnpf7ePpj4qXSLUkPFL4lYE0g6ELpO2QZwGb8syirszG21fpIU7 CV/as4FXsqUlIUG8u+46TCb/lUpNyGziiB4FcnETOsOpHsVB9iION8+2MuZgbkSx YsYx7oyjqTH3D7BreCyzORmXoJO8smrOAEpwyBIkd1eCw/f8AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWMGByz3WZPiQT8t6VLfsTd0Hn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvMjk1ZmRhNDctZWM3OC0z NTliLThhMDAtNzc5MDljZjFkZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU820NqgMET5ll/FhBXdfrbY5PhH3QaxrPlXDjrPG1H2zCTMtzRdrgs oAZEWoQKphh+kv9kBfCB35Nr48DEjK7NQDuhSj8uHoqKkmM9yZUWVcT4XErlNnQP 9YNqLHpQfxodepTrN7TLnj7SqEN8fCcdlU4rlHqfsrzxlBlfKtwg0++KdvE7VgY9 E8QkREcj1ZoLAmB7LOV01fRCxpZiL7b27vRkmeulXmblNCYz2if6oYwRICBuJx8q cwlIgINrLUCPTF1MPOODg0FRuhqU5hTcLqAIeUSRNaqJ8wxA0/6FvBqf8YaykuXp W/7HXzTa/nj1Gp6K7GG2FeuAjPz7+VU= -----END CERTIFICATE-----Generated at Mon Sep 21 18:54:40 2026 by rpki-client