$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa File: 3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa (raw, json) Hash identifier: Zfa4dGwgC1i++rqrQvFCqrXrmGJH4JUvWC2yo8NokVU= Subject key identifier: 72:A9:28:01:53:BD:11:D4:54:40:AA:28:22:5E:48:29:34:CA:E8:A4 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584E709F7566800C9818EEEFB180 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 15296 IP address blocks: 199.216.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:75:66:80:0c:98:18:ee:ef:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=0719de30-ad80-42ff-abe5-7f366c626482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:1d:c0:96:58:d0:7d:14:ff:5d:24:47:da: 62:a3:c1:f6:9c:4c:b5:31:43:df:c0:83:56:ed:10: c0:0f:7b:ff:c2:f4:1d:c2:fc:52:7c:4c:e5:21:f3: bf:fb:2e:95:e3:e7:f9:f6:41:a9:df:9a:a7:47:8c: 96:fd:e0:c6:10:d6:14:7b:dd:1c:e6:ee:36:54:75: 08:3a:95:ea:90:76:d6:f1:dd:92:5f:58:e0:c4:91: d3:c5:d5:7f:77:4a:c9:6c:ec:5d:d1:4a:00:92:70: 30:73:9c:ce:97:a9:9b:7b:92:7b:54:7c:1f:d4:a9: 94:3a:b3:84:4e:b4:c8:3f:d5:34:37:4f:6b:b7:a6: a2:ea:bb:2f:ab:0c:cf:77:a5:03:41:9f:2b:65:b7: 23:ca:a7:4f:e7:50:f1:a1:f6:c0:0f:03:38:28:a2: 73:de:9a:a7:e6:d0:28:80:64:f4:c5:7b:98:7f:12: 50:2e:79:d9:a1:e4:9e:56:0d:6d:c7:e2:fb:20:3f: 0e:cd:e2:d2:8d:af:21:49:1b:c5:a1:25:37:3f:69: 0b:0c:2a:3d:73:4e:88:5f:6c:62:04:a4:d6:07:3f: 43:5c:92:46:f8:4e:19:08:b8:97:ae:32:07:d0:b1: 8d:01:cc:b5:2c:a0:40:1d:eb:e3:62:12:15:18:1e: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:28:01:53:BD:11:D4:54:40:AA:28:22:5E:48:29:34:CA:E8:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:aa:aa:cb:4a:fc:66:79:7e:3b:37:64:2f:61:31:21:1f:4e: 3d:10:05:ef:cb:68:27:4f:f7:81:cf:db:7c:84:fc:5f:98:3a: 27:8a:59:d4:2a:75:e6:b0:bd:2e:d1:24:67:75:9e:0a:3f:6e: 50:f9:d5:4d:1b:a9:4c:68:31:ab:84:be:0d:2e:17:71:75:0a: da:52:5f:54:f3:8b:c7:5a:ed:be:23:b1:e2:0c:3d:df:b4:a7: 5e:aa:f5:a0:27:80:de:68:04:85:8a:d7:2e:26:89:30:36:04: 0c:90:54:e2:0c:32:05:6a:b8:a0:d9:64:67:e0:7d:73:fa:9a: 98:2f:3a:c3:90:54:d5:85:9b:ea:79:43:89:bf:9b:04:45:00: 27:50:27:67:84:00:5b:bd:7d:e4:6b:eb:3d:57:90:56:a9:b3: c4:2f:d1:5c:6e:5e:40:b2:36:05:6f:16:51:59:2d:0f:96:00: fb:35:2c:11:f1:cf:ec:2c:5a:1c:d6:7a:b2:05:7e:cb:2c:7d: 11:ea:33:b3:73:33:69:e9:db:db:14:01:86:a1:4d:d7:f1:eb: 92:69:2e:b6:68:c9:29:68:ac:54:c5:e2:60:26:7a:6c:09:3e: cd:20:b4:49:95:48:ca:b6:02:67:13:ed:95:15:90:24:b5:6c: 9d:d0:99:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3VmgAyYGO7vsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk MDcxOWRlMzAtYWQ4MC00MmZmLWFiZTUtN2YzNjZjNjI2NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOwdwJZY0H0U/10kR9pio8H2nEy1MUPfwINW 7RDAD3v/wvQdwvxSfEzlIfO/+y6V4+f59kGp35qnR4yW/eDGENYUe90c5u42VHUI OpXqkHbW8d2SX1jgxJHTxdV/d0rJbOxd0UoAknAwc5zOl6mbe5J7VHwf1KmUOrOE TrTIP9U0N09rt6ai6rsvqwzPd6UDQZ8rZbcjyqdP51DxofbADwM4KKJz3pqn5tAo gGT0xXuYfxJQLnnZoeSeVg1tx+L7ID8OzeLSja8hSRvFoSU3P2kLDCo9c06IX2xi BKTWBz9DXJJG+E4ZCLiXrjIH0LGNAcy1LKBAHevjYhIVGB4nCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKpKAFTvRHUVECqKCJeSCk0yuikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvM2MyZjRlZTQtNmVjNS0z M2VmLWI0ZjYtZGE5NzViNDE4NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9i8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+qqstK/GZ5fjs3ZC9hMSEfTj0QBe/LaCdP94HP23yE/F+YOieKWdQq deawvS7RJGd1ngo/blD51U0bqUxoMauEvg0uF3F1CtpSX1Tzi8da7b4jseIMPd+0 p16q9aAngN5oBIWK1y4miTA2BAyQVOIMMgVquKDZZGfgfXP6mpgvOsOQVNWFm+p5 Q4m/mwRFACdQJ2eEAFu9feRr6z1XkFaps8Qv0VxuXkCyNgVvFlFZLQ+WAPs1LBHx z+wsWhzWerIFfsssfRHqM7NzM2np29sUAYahTdfx65JpLrZoySlorFTF4mAmemwJ Ps0gtEmVSMq2AmcT7ZUVkCS1bJ3QmRM= -----END CERTIFICATE-----Generated at Tue Jul 21 15:56:45 2026 by rpki-client