$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa File: c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa (raw, json) Hash identifier: o0tGHF97AD7CrCo0BhpPZsWyRg4RO6E4IVsO5Bl44Fg= Subject key identifier: C5:D8:D6:1C:0F:C8:9C:2A:F6:02:78:11:7A:09:58:21:D0:7A:CA:4C Certificate issuer: /CN=bd417297-965f-4fd0-82f0-a774a3ef359e Certificate serial: 010D0C9F4328584E5E7A02B20D6918DF24794480 Authority key identifier: 0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 19318 IP address blocks: 199.88.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:7a:02:b2:0d:69:18:df:24:79:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd417297-965f-4fd0-82f0-a774a3ef359e Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=36fddac2-0b5c-4b96-8f53-7372f0cc2751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:94:76:bb:e5:0d:14:ff:29:0d:0d:b6:91: 47:47:6e:f6:f0:24:18:aa:b4:95:f1:9e:4c:f8:d0: 01:c7:f1:99:c7:ea:2f:70:35:da:59:9e:ee:61:ae: 57:f8:85:db:33:85:5d:8a:a7:6e:00:0b:8a:5a:9d: 52:d2:48:d8:c5:2b:54:05:a2:b9:bb:6f:ad:a2:b3: 95:0f:33:51:83:ec:07:d8:57:c5:d5:c7:b0:f7:8e: 11:45:86:3e:a3:84:1b:d1:f9:58:43:f9:af:ea:78: a5:2c:40:e0:56:93:c9:6d:52:b3:7a:93:f5:b1:eb: 65:b1:5e:5a:92:1b:9d:2e:fc:f5:a5:f4:f7:85:c1: 43:63:78:95:f2:56:fe:64:59:ea:5f:26:73:cf:3e: e4:8c:07:f0:79:d6:a1:27:17:af:8c:85:04:eb:d6: 32:2d:59:1f:37:39:54:3e:59:aa:76:83:5e:6c:83: 00:cc:b4:02:d8:cb:56:a9:3e:87:d5:dc:a3:36:48: bc:a1:22:38:75:73:fb:2a:ef:89:79:0c:df:93:2d: 5b:46:97:ad:2f:58:9a:ae:65:81:71:18:05:38:f6: 03:c1:52:49:fc:b0:36:c3:a3:5f:f1:10:56:d4:5c: 71:3a:aa:0d:ab:42:cf:ea:ea:3e:0e:4b:07:53:f4: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:D6:1C:0F:C8:9C:2A:F6:02:78:11:7A:09:58:21:D0:7A:CA:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl X509v3 Authority Key Identifier: keyid:0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer sbgp-ipAddrBlock: critical IPv4: 199.88.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:39:dc:6a:9f:37:27:81:8c:0a:0f:13:81:ec:ae:15:bb:fe: a0:eb:ba:8b:74:57:30:06:b8:aa:2e:51:b8:f3:a7:c6:31:ad: 1a:4f:1b:37:8d:2e:1a:1c:e7:1d:3b:1d:8a:d4:c2:b5:47:83: 85:59:62:ae:15:00:ca:a1:45:27:37:bd:31:73:ac:04:dd:16: d4:fa:7a:b5:d2:e0:8e:12:4e:db:0d:01:d1:85:4e:a6:1e:d6: 42:91:bc:c1:5b:b8:13:ac:5f:36:7b:a7:e9:72:fb:dd:10:3a: 1e:95:d3:72:f4:32:9c:45:7b:bc:57:4e:e0:6c:7c:e0:80:50: 03:da:3f:2d:1e:50:c7:41:53:a0:c9:bf:8d:3b:1e:a2:d2:83: f5:9e:4e:b5:18:4b:78:53:81:09:03:34:4a:60:0e:f8:99:4f: 35:75:52:53:1e:6b:30:ef:00:55:55:b9:b7:a3:62:71:3b:83: 2c:e4:88:2f:a7:9b:8c:f9:19:0e:9f:da:5d:82:ee:b1:1a:60: 46:d5:e9:1a:6d:ef:63:2d:8d:9b:7d:d9:4e:d2:4d:42:f6:32: d0:0e:ba:46:fb:6d:49:55:df:96:13:a3:23:97:f9:a0:71:3b: b3:56:81:93:8d:c0:61:af:90:4d:f3:c1:77:13:f3:2b:67:37: d0:c9:2b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegKyDWkY3yR5RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0MTcyOTctOTY1Zi00ZmQwLTgyZjAtYTc3NGEzZWYz NTllMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk MzZmZGRhYzItMGI1Yy00Yjk2LThmNTMtNzM3MmYwY2MyNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP+UdrvlDRT/KQ0NtpFHR2728CQYqrSV8Z5M +NABx/GZx+ovcDXaWZ7uYa5X+IXbM4VdiqduAAuKWp1S0kjYxStUBaK5u2+torOV DzNRg+wH2FfF1cew944RRYY+o4Qb0flYQ/mv6nilLEDgVpPJbVKzepP1setlsV5a khudLvz1pfT3hcFDY3iV8lb+ZFnqXyZzzz7kjAfwedahJxevjIUE69YyLVkfNzlU PlmqdoNebIMAzLQC2MtWqT6H1dyjNki8oSI4dXP7Ku+JeQzfky1bRpetL1iarmWB cRgFOPYDwVJJ/LA2w6Nf8RBW1FxxOqoNq0LP6uo+DksHU/RIIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXY1hwPyJwq9gJ4EXoJWCHQespMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQx NzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0YTNlZjM1OWUvYzk5YTJmNjktZmIyZS0z OGUzLThjZjEtNDE3ZTVhMDE2MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmQ0MTcyOTctOTY1Zi00ZmQwLTgy ZjAtYTc3NGEzZWYzNTllL2JkNDE3Mjk3LTk2NWYtNGZkMC04MmYwLWE3NzRhM2Vm MzU5ZS5jcmwwHwYDVR0jBBgwFoAUCoB/q4BfE61qX0Nq3dOrLISw87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQxNzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0 YTNlZjM1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1jyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk53GqfNyeBjAoPE4HsrhW7/qDruot0VzAGuKouUbjzp8YxrRpPGzeN Lhoc5x07HYrUwrVHg4VZYq4VAMqhRSc3vTFzrATdFtT6erXS4I4STtsNAdGFTqYe 1kKRvMFbuBOsXzZ7p+ly+90QOh6V03L0MpxFe7xXTuBsfOCAUAPaPy0eUMdBU6DJ v407HqLSg/WeTrUYS3hTgQkDNEpgDviZTzV1UlMeazDvAFVVubejYnE7gyzkiC+n m4z5GQ6f2l2C7rEaYEbV6Rpt72MtjZt92U7STUL2MtAOukb7bUlV35YToyOX+aBx O7NWgZONwGGvkE3zwXcT8ytnN9DJK4E= -----END CERTIFICATE-----Generated at Tue Jul 21 17:29:16 2026 by rpki-client