$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/fcf288a0-64d9-37ae-a492-630353c22a50.roa File: fcf288a0-64d9-37ae-a492-630353c22a50.roa (raw, json) Hash identifier: JumWGW6dQ0A21eWkKoBx0QbPfTJfGquS4WvLmLm0XsU= Subject key identifier: A0:47:26:9C:A1:E7:25:52:16:A4:C7:CF:61:C6:F3:9A:CF:22:D8:35 Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584FA1C0B2D3DB6356A488A82CC0 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/fcf288a0-64d9-37ae-a492-630353c22a50.roa Signing time: Mon 26 Oct 2026 16:08:51 +0000 ROA not before: Mon 26 Oct 2026 16:08:51 +0000 ROA not after: Sun 24 Jan 2027 17:08:51 +0000 asID: 136809 IP address blocks: 199.30.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:c0:b2:d3:db:63:56:a4:88:a8:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Oct 26 16:08:51 2026 GMT Not After : Jan 24 17:08:51 2027 GMT Subject: CN=238eec7c-78e7-4e2a-9910-89482760289a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:69:e4:53:7b:92:23:52:99:a0:d1:09:aa: 9b:11:af:8d:e0:17:9a:97:7d:36:08:db:8d:9f:74: 2f:29:8e:c0:f6:7a:51:c2:d3:7b:c5:d2:8c:72:e8: 7e:a9:6c:b1:c2:be:54:0f:0b:e0:35:55:d0:fa:38: 84:66:64:b4:61:dd:67:b8:24:90:39:db:1e:7d:1c: 84:9e:d9:13:8e:25:f8:fd:98:ea:c4:29:65:d2:77: d8:34:ab:e3:81:28:19:3d:6e:16:36:80:50:eb:53: a0:d3:8d:e7:d2:f8:a4:24:8f:5d:6e:ff:67:d2:e3: 94:51:e3:41:a0:7b:89:7a:52:9e:eb:3c:46:52:a9: 1a:db:68:ee:70:3b:7b:1f:61:f2:37:87:71:87:94: bd:88:57:de:41:db:b9:86:e1:27:34:fb:a0:40:13: ae:b7:31:96:6d:01:6c:77:b3:46:5f:b2:2c:ef:ac: 53:53:b6:f9:00:dc:9f:83:dc:94:6f:24:83:87:ca: e2:30:21:62:cd:0d:2f:22:fe:99:cd:f8:64:1f:4f: ab:37:92:38:64:59:3f:25:13:32:17:c0:36:97:a3: 61:e7:9f:76:5b:aa:d1:7b:4f:2a:aa:49:24:9c:0a: ea:70:87:cd:67:15:7c:4c:e7:0a:a7:94:a5:10:06: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:47:26:9C:A1:E7:25:52:16:A4:C7:CF:61:C6:F3:9A:CF:22:D8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/fcf288a0-64d9-37ae-a492-630353c22a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.30.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ea:33:28:34:0c:f3:23:4a:42:85:fe:35:93:4e:99:e1:76: fb:71:5d:f2:7c:1e:50:0b:30:f8:6d:25:7e:db:c4:68:a5:18: ff:6e:8e:6e:9f:c7:c2:92:d3:36:4c:63:6e:ca:0f:ae:9f:aa: dc:81:b5:06:53:99:1f:62:a7:41:56:a7:52:13:67:ea:3c:20: fe:6d:f4:9d:53:dd:e9:e9:d5:d7:2f:32:4a:4d:ab:09:1e:6f: a6:9e:50:dc:17:e5:5c:36:2e:6b:f3:9d:41:7d:76:71:66:97: 50:49:ca:64:4b:59:30:74:d1:ad:97:1e:11:fd:67:e2:df:db: ab:ed:24:4d:88:0e:8a:e3:9c:5c:5c:d3:a9:e7:b9:22:fb:6a: 1e:ad:67:36:59:7f:cc:d2:25:d0:6b:82:5e:4e:cb:bf:07:c3: 06:98:0c:08:7a:37:86:20:64:ad:a0:a7:5e:6f:f1:97:d9:46: c6:ac:9f:0b:10:52:7f:4c:aa:52:55:5f:66:28:93:98:99:93: c8:b8:1a:87:ea:e3:23:9f:b0:a6:4e:f7:50:39:2a:85:73:15: 53:77:b3:9c:fe:3f:af:90:b3:c5:5b:5b:4f:df:24:69:3a:09: 98:2c:5d:2a:27:cd:ad:26:4e:0e:a2:92:46:90:e9:87:26:60: 8e:ad:5b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hwLLT22NWpIioLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI2MTAyNjE2MDg1MVoXDTI3MDEyNDE3MDg1MVowLzEtMCsGA1UEAxMk MjM4ZWVjN2MtNzhlNy00ZTJhLTk5MTAtODk0ODI3NjAyODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk9p5FN7kiNSmaDRCaqbEa+N4Beal302CNuN n3QvKY7A9npRwtN7xdKMcuh+qWyxwr5UDwvgNVXQ+jiEZmS0Yd1nuCSQOdsefRyE ntkTjiX4/ZjqxCll0nfYNKvjgSgZPW4WNoBQ61Og043n0vikJI9dbv9n0uOUUeNB oHuJelKe6zxGUqka22jucDt7H2HyN4dxh5S9iFfeQdu5huEnNPugQBOutzGWbQFs d7NGX7Is76xTU7b5ANyfg9yUbySDh8riMCFizQ0vIv6ZzfhkH0+rN5I4ZFk/JRMy F8A2l6Nh5592W6rRe08qqkkknArqcIfNZxV8TOcKp5SlEAbBjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBHJpyh5yVSFqTHz2HG85rPItg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvZmNmMjg4YTAtNjRkOS0z N2FlLWE0OTItNjMwMzUzYzIyYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx4HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7qMyg0DPMjSkKF/jWTTpnhdvtxXfJ8HlALMPhtJX7bxGilGP9ujm6f x8KS0zZMY27KD66fqtyBtQZTmR9ip0FWp1ITZ+o8IP5t9J1T3enp1dcvMkpNqwke b6aeUNwX5Vw2LmvznUF9dnFml1BJymRLWTB00a2XHhH9Z+Lf26vtJE2IDorjnFxc 06nnuSL7ah6tZzZZf8zSJdBrgl5Oy78HwwaYDAh6N4YgZK2gp15v8ZfZRsasnwsQ Un9MqlJVX2Yok5iZk8i4Gofq4yOfsKZO91A5KoVzFVN3s5z+P6+Qs8VbW0/fJGk6 CZgsXSonza0mTg6ikkaQ6YcmYI6tW1w= -----END CERTIFICATE-----Generated at Thu Oct 29 05:49:18 2026 by rpki-client