$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa File: df51f702-a91e-30cf-988e-dca1dd4d9a92.roa (raw, json) Hash identifier: payWRU0ZNrs5OiovVv5EAsngN407PUDCO2uxZqWzDqk= Subject key identifier: 50:F9:87:11:16:13:6F:42:E0:8C:F0:07:A7:79:13:12:23:C4:15:72 Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584F20F7CFE37C5821DA90E0E3C0 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 199.7.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cf:e3:7c:58:21:da:90:e0:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8007643f-0add-49b5-b6be-5dafdb7b4ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:d3:1c:f3:3b:1e:85:3f:f9:31:bf:79:c6: 88:65:8f:73:7a:70:c7:48:01:5f:70:b9:cf:62:43: 54:75:51:d4:01:f4:d2:cc:17:67:4c:9a:98:26:17: fd:c5:d3:33:d7:b7:55:41:0b:f8:66:18:cd:db:7f: 00:9a:56:4d:3b:42:d3:5b:4c:08:80:7f:fe:45:9c: 19:3d:b5:a8:ef:3b:d5:bd:64:f5:84:10:a6:83:87: df:2f:bb:aa:c0:1c:14:9f:df:20:1a:0f:e4:79:c8: 1c:2c:c8:38:88:cf:42:bc:6e:cd:f6:7b:34:72:02: ea:67:2e:84:8a:5a:8b:da:65:26:02:7c:c7:25:e4: 20:38:83:82:d8:8e:3e:6f:66:aa:79:37:66:29:f5: 93:72:c5:d4:bf:16:9f:a0:02:8d:f4:92:03:64:93: 4d:77:ed:1d:c9:1b:3b:aa:c9:a0:7d:59:12:3a:5f: ee:c2:e0:a9:94:54:71:14:02:8b:dd:a7:4c:d7:ac: 95:3e:65:48:0e:53:bb:2f:30:79:e7:fd:b3:0d:25: ea:ae:b8:61:aa:cb:44:e2:c7:b8:c5:3f:5d:11:18: f5:d3:11:d0:47:2b:01:0a:ac:5e:37:c2:c0:0f:96: c9:19:26:f6:d0:86:a3:42:9d:33:bd:4f:ce:fe:3a: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F9:87:11:16:13:6F:42:E0:8C:F0:07:A7:79:13:12:23:C4:15:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:25:f5:a6:cb:34:62:dc:36:c8:25:fc:ec:ef:7d:46:db:f6: a8:90:91:78:fb:c0:15:8c:c9:8d:03:ef:b6:d6:c9:4e:b1:cf: f7:2a:7d:48:0e:f5:b5:81:33:e7:ae:87:c5:90:06:eb:e7:3b: d7:cb:83:7e:ea:e1:e0:a7:1c:27:8a:05:74:fb:c8:6d:81:1d: a5:97:ae:2e:b9:fc:18:46:e4:4e:f8:9f:ac:36:68:4e:93:9b: 75:2c:9b:71:dc:88:e4:88:75:27:5a:f8:77:47:0e:ce:37:cc: a5:ae:f0:78:46:8f:5f:e3:79:ca:07:7c:1b:de:2b:df:e2:7e: 37:67:c4:e5:8c:47:7c:0f:42:00:f6:96:39:05:4a:85:8b:cc: c7:1b:e4:b8:4d:51:99:c9:82:66:ab:ab:3e:c8:ef:72:0e:9e: c1:e8:31:a6:74:3d:ea:dc:bb:1c:6d:95:62:b6:21:28:79:6a: 2e:d9:99:95:72:2b:de:3a:50:48:6a:e6:91:6d:23:09:37:8d: 6b:36:3a:37:cd:6a:f4:6e:6f:dd:9c:dc:b1:de:ed:9c:da:5b: 17:5e:bd:ad:a2:34:df:7c:cc:f3:e6:a5:84:9a:55:36:2d:43: 4b:91:66:d7:b2:3a:96:b7:f9:f5:0c:86:e8:58:ed:36:8b:b3: 43:8a:be:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98/jfFgh2pDg48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODAwNzY0M2YtMGFkZC00OWI1LWI2YmUtNWRhZmRiN2I0ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArijTHPM7HoU/+TG/ecaIZY9zenDHSAFfcLnP YkNUdVHUAfTSzBdnTJqYJhf9xdMz17dVQQv4ZhjN238AmlZNO0LTW0wIgH/+RZwZ PbWo7zvVvWT1hBCmg4ffL7uqwBwUn98gGg/kecgcLMg4iM9CvG7N9ns0cgLqZy6E ilqL2mUmAnzHJeQgOIOC2I4+b2aqeTdmKfWTcsXUvxafoAKN9JIDZJNNd+0dyRs7 qsmgfVkSOl/uwuCplFRxFAKL3adM16yVPmVIDlO7LzB55/2zDSXqrrhhqstE4se4 xT9dERj10xHQRysBCqxeN8LAD5bJGSb20IajQp0zvU/O/jp3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFD5hxEWE29C4IzwB6d5ExIjxBVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvZGY1MWY3MDItYTkxZS0z MGNmLTk4OGUtZGNhMWRkNGQ5YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcl9abLNGLcNsgl/OzvfUbb9qiQkXj7wBWMyY0D77bWyU6xz/cqfUgO 9bWBM+euh8WQBuvnO9fLg37q4eCnHCeKBXT7yG2BHaWXri65/BhG5E74n6w2aE6T m3Usm3HciOSIdSda+HdHDs43zKWu8HhGj1/jecoHfBveK9/ifjdnxOWMR3wPQgD2 ljkFSoWLzMcb5LhNUZnJgmarqz7I73IOnsHoMaZ0PercuxxtlWK2ISh5ai7ZmZVy K946UEhq5pFtIwk3jWs2OjfNavRub92c3LHe7ZzaWxdeva2iNN98zPPmpYSaVTYt Q0uRZteyOpa3+fUMhuhY7TaLs0OKvrE= -----END CERTIFICATE-----Generated at Mon Sep 21 16:59:27 2026 by rpki-client