$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa File: 298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa (raw, json) Hash identifier: iZDGOXN+vIIRTRm5/i3uSTEDx5/5Va9KtT9LUNm7Rok= Subject key identifier: F4:4A:E4:7A:F4:B2:1E:36:05:06:13:CD:2B:11:61:78:7B:5F:D4:27 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584E709F71B5105FEA4D3B476280 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 15296 IP address blocks: 199.216.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:71:b5:10:5f:ea:4d:3b:47:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=e71cd03b-9f58-47f6-9b4d-5ff5c89a6e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2f:35:9a:05:d0:65:1d:18:4e:47:71:96:34: 4f:74:b5:f7:67:a4:8b:8a:ce:39:5a:e3:23:62:d7: 89:d8:66:60:0c:73:d4:05:b9:01:78:3e:4e:0b:03: 06:bd:4e:6e:b9:c0:68:3a:cd:aa:28:c5:d7:b6:49: 62:8a:c0:33:f9:c3:63:4b:b7:48:31:3a:b3:2d:a2: 55:c0:32:a1:a6:ed:a3:17:21:8b:35:fa:1a:44:af: 24:9d:30:32:81:13:43:b2:fa:3a:04:1c:d1:81:48: 4e:d6:ab:7c:93:9e:e6:26:d0:52:4a:c8:d7:61:44: f2:67:3c:a6:cf:5d:f7:a5:46:73:4f:3f:9b:9b:46: 0f:39:9c:9f:35:5b:fd:b9:64:eb:bd:1c:67:74:8f: ac:f5:21:5f:75:f6:0c:17:3c:fc:54:cd:13:d3:c7: 35:f3:fe:52:57:04:2b:90:72:94:68:73:ba:43:a4: ad:e8:af:c0:46:99:41:df:cb:5e:de:0a:85:12:38: 97:f5:5d:58:c7:c4:89:bc:d9:90:cd:3e:86:2a:cb: 39:96:d8:bd:ac:97:64:d9:df:8c:e4:dc:7b:13:1d: cf:c8:27:7f:00:b9:2e:1c:de:71:7c:fb:26:7b:d4: b1:29:b3:49:b6:13:03:a3:36:54:ad:13:49:e6:44: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4A:E4:7A:F4:B2:1E:36:05:06:13:CD:2B:11:61:78:7B:5F:D4:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e2:70:67:a8:2a:7f:6b:1a:51:7e:6a:86:5b:87:24:a2:2a: 9a:7b:23:32:d4:34:cd:f9:86:75:91:3a:b8:b1:97:cf:00:aa: 0e:cb:96:89:22:38:5e:96:fa:17:36:37:34:fa:d3:33:79:69: 0d:4a:c8:84:c0:0e:1b:cf:fa:54:c9:b1:b0:08:df:bf:73:5c: 8a:d6:7d:1d:83:8a:49:ef:18:e7:df:e4:ed:96:ea:1f:e4:13: 71:72:92:1a:0e:dd:4c:69:87:37:c0:06:93:81:74:b1:b0:98: 50:0d:d9:6a:1c:fa:59:29:56:0c:52:1f:73:b2:1a:36:e0:17: 5e:0a:d4:59:a3:7b:35:5b:06:79:76:b5:8c:c3:e3:5a:dd:5b: 78:c9:9a:d7:f7:c1:1c:4d:55:54:c4:54:34:04:f2:af:25:4a: 52:83:df:39:64:46:8c:2d:a4:cf:bb:4b:87:e1:84:27:a3:b7: bf:45:b0:e6:b8:a6:f7:1d:f0:0a:51:9f:97:2c:e5:46:4a:1f: e9:fd:01:ab:b1:40:22:ec:fb:3f:a5:9c:73:bc:09:9c:02:19: e2:e8:69:6b:41:8f:54:1e:70:ba:10:f3:d8:fe:48:e9:41:81: 08:04:95:ee:17:de:d6:aa:4b:fd:c4:a5:53:12:af:cf:51:dc: 6b:d1:bd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3G1EF/qTTtHYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk ZTcxY2QwM2ItOWY1OC00N2Y2LTliNGQtNWZmNWM4OWE2ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S81mgXQZR0YTkdxljRPdLX3Z6SLis45WuMj YteJ2GZgDHPUBbkBeD5OCwMGvU5uucBoOs2qKMXXtkliisAz+cNjS7dIMTqzLaJV wDKhpu2jFyGLNfoaRK8knTAygRNDsvo6BBzRgUhO1qt8k57mJtBSSsjXYUTyZzym z133pUZzTz+bm0YPOZyfNVv9uWTrvRxndI+s9SFfdfYMFzz8VM0T08c18/5SVwQr kHKUaHO6Q6St6K/ARplB38te3gqFEjiX9V1Yx8SJvNmQzT6GKss5lti9rJdk2d+M 5Nx7Ex3PyCd/ALkuHN5xfPsme9SxKbNJthMDozZUrRNJ5kQ0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRK5Hr0sh42BQYTzSsRYXh7X9QnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMjk4YTAyYzctNGVjYi0z MWVmLTgwMDItZWQ2NjllMWNkMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDicGeoKn9rGlF+aoZbhySiKpp7IzLUNM35hnWROrixl88Aqg7Lloki OF6W+hc2NzT60zN5aQ1KyITADhvP+lTJsbAI379zXIrWfR2DiknvGOff5O2W6h/k E3FykhoO3UxphzfABpOBdLGwmFAN2Woc+lkpVgxSH3OyGjbgF14K1FmjezVbBnl2 tYzD41rdW3jJmtf3wRxNVVTEVDQE8q8lSlKD3zlkRowtpM+7S4fhhCejt79FsOa4 pvcd8ApRn5cs5UZKH+n9AauxQCLs+z+lnHO8CZwCGeLoaWtBj1QecLoQ89j+SOlB gQgEle4X3taqS/3EpVMSr89R3GvRvdo= -----END CERTIFICATE-----Generated at Tue Jul 21 15:56:46 2026 by rpki-client