$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa File: a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa (raw, json) Hash identifier: 4eJg7SMnw41Rn+z0rKvePQc2tBab9tl143Ux8wCYww0= Subject key identifier: CA:CB:76:96:06:1B:8C:B8:5F:F0:5D:E3:1C:77:95:96:11:E0:1A:51 Certificate issuer: /CN=e58dee25-2204-469c-b0eb-da831443b959 Certificate serial: 010D0C9F4328584E6F3A3BF7FE60B3CC502D1950 Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 40521 IP address blocks: 198.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:3b:f7:fe:60:b3:cc:50:2d:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=c8c999d6-e438-45a0-97bf-bb6e7e989945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:2d:d9:cb:e2:e7:b8:6c:dc:f8:73:46:cc: 50:0c:c8:86:10:7b:08:d6:68:3a:5a:dd:9a:74:f3: 45:28:ca:1b:20:5f:8b:e7:aa:24:d8:48:a0:77:43: 2d:c5:5d:1a:c2:e8:99:92:a4:8e:29:2e:51:21:c1: 64:36:1f:10:a4:90:2d:a5:27:29:d7:ce:5d:41:41: 18:26:55:5f:ec:12:99:a7:0b:bc:f6:42:3b:ec:c1: a0:56:a6:64:b9:5a:89:40:94:17:c4:0b:3c:45:82: c2:7c:e0:0f:cd:6d:17:ba:66:5c:16:aa:61:42:84: 7c:1d:11:71:f0:68:e6:17:1c:ff:ad:a5:58:26:47: a6:15:33:ef:9c:4b:d2:52:46:1c:59:df:ef:cc:37: 81:4d:fc:f1:bb:48:ed:e9:b4:24:18:e4:c1:c1:16: 8d:64:91:8f:a5:76:27:58:6b:1a:2e:3f:c7:41:8f: ce:ee:68:03:54:bd:3e:05:85:dc:fa:ff:ea:41:ca: 20:c5:9c:ee:59:70:be:dc:4e:d7:a2:cd:c7:43:1d: c3:ee:f6:d7:1d:c2:35:e0:f2:7e:76:8e:68:c6:1f: 82:b1:06:11:ee:9a:45:0d:00:6e:f8:7b:1e:4f:01: 44:6c:95:f7:26:b5:70:3b:65:ae:33:65:b7:9b:0e: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CB:76:96:06:1B:8C:B8:5F:F0:5D:E3:1C:77:95:96:11:E0:1A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl X509v3 Authority Key Identifier: keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer sbgp-ipAddrBlock: critical IPv4: 198.251.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:35:d6:0f:37:b2:7f:1d:d5:26:eb:73:24:31:f4:d5:ac:07: 69:58:c4:b5:10:d3:79:14:f1:ad:84:0d:1a:d7:6d:03:f5:c6: 39:a4:cb:5b:61:5b:06:aa:9b:c2:60:da:0e:2c:37:72:23:da: fb:78:af:0b:4e:f1:ff:ef:4d:68:cd:8d:cd:f2:8c:f4:0b:c2: 89:d7:1d:d0:9b:08:b9:a2:d8:da:cb:99:f2:5b:49:d7:79:72: c4:5a:83:b4:e1:a5:ec:e9:f2:d1:a7:da:09:3a:5f:13:ed:5d: 1a:7f:76:73:e6:0a:0d:30:6c:ac:86:f3:13:ad:3e:65:bf:f0: 1d:c9:bc:40:d7:3a:79:6b:85:75:cc:f9:f4:36:19:9f:5a:4a: 26:ce:ab:cc:c4:03:80:cb:30:04:57:8f:b0:0b:0a:54:df:2e: 83:c9:0b:71:ec:7d:f9:e4:3d:f1:30:a6:6a:1e:9e:3e:f4:c0: a3:33:aa:18:cd:da:c8:f4:21:93:c8:aa:9f:95:54:8c:29:e7: f4:92:cb:eb:1c:0c:fb:91:db:10:dd:d5:b2:35:2a:87:a5:46: df:55:c9:77:1c:8c:b3:16:ac:86:68:e0:4b:81:8a:c0:68:a7: b9:59:5b:c4:78:1e:5c:34:b2:99:16:b6:ff:3f:a3:2a:88:54: 43:af:dd:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjv3/mCzzFAtGVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTU4ZGVlMjUtMjIwNC00NjljLWIwZWItZGE4MzE0NDNi OTU5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YzhjOTk5ZDYtZTQzOC00NWEwLTk3YmYtYmI2ZTdlOTg5OTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ct2cvi57hs3PhzRsxQDMiGEHsI1mg6Wt2a dPNFKMobIF+L56ok2Eigd0MtxV0awuiZkqSOKS5RIcFkNh8QpJAtpScp185dQUEY JlVf7BKZpwu89kI77MGgVqZkuVqJQJQXxAs8RYLCfOAPzW0XumZcFqphQoR8HRFx 8GjmFxz/raVYJkemFTPvnEvSUkYcWd/vzDeBTfzxu0jt6bQkGOTBwRaNZJGPpXYn WGsaLj/HQY/O7mgDVL0+BYXc+v/qQcogxZzuWXC+3E7Xos3HQx3D7vbXHcI14PJ+ do5oxh+CsQYR7ppFDQBu+HseTwFEbJX3JrVwO2WuM2W3mw6NZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrLdpYGG4y4X/Bd4xx3lZYR4BpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNThk ZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgzMTQ0M2I5NTkvYTNjZjdmNGEtZDA0OS0z NjA3LWEzMWItYzcwMmFmZWVhZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTU4ZGVlMjUtMjIwNC00NjljLWIw ZWItZGE4MzE0NDNiOTU5L2U1OGRlZTI1LTIyMDQtNDY5Yy1iMGViLWRhODMxNDQz Yjk1OS5jcmwwHwYDVR0jBBgwFoAUUnUQ5/3m/Rd4J0tjZp1pLp+xtrYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lNThkZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgz MTQ0M2I5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvsfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE411g83sn8d1SbrcyQx9NWsB2lYxLUQ03kU8a2EDRrXbQP1xjmky1th Wwaqm8Jg2g4sN3Ij2vt4rwtO8f/vTWjNjc3yjPQLwonXHdCbCLmi2NrLmfJbSdd5 csRag7Thpezp8tGn2gk6XxPtXRp/dnPmCg0wbKyG8xOtPmW/8B3JvEDXOnlrhXXM +fQ2GZ9aSibOq8zEA4DLMARXj7ALClTfLoPJC3HsffnkPfEwpmoenj70wKMzqhjN 2sj0IZPIqp+VVIwp5/SSy+scDPuR2xDd1bI1KoelRt9VyXccjLMWrIZo4EuBisBo p7lZW8R4Hlw0spkWtv8/oyqIVEOv3R8= -----END CERTIFICATE-----Generated at Tue Jul 21 15:47:56 2026 by rpki-client