$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa File: 4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa (raw, json) Hash identifier: gN3Mn0wDO7YKLVMAjFs0FgP0HUflJo8yYxWlvfQQUpY= Subject key identifier: 64:3A:54:AD:FC:82:73:11:9D:31:FF:B1:3D:F9:D6:13:93:0B:30:70 Certificate issuer: /CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Certificate serial: 010D0C9F4328584E577F54D507AC4829D2969E30 Authority key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa Signing time: Tue 30 Jun 2026 09:00:12 +0000 ROA not before: Tue 30 Jun 2026 09:00:12 +0000 ROA not after: Mon 28 Sep 2026 09:00:12 +0000 asID: 396982 IP address blocks: 199.88.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:7f:54:d5:07:ac:48:29:d2:96:9e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Validity Not Before: Jun 30 09:00:12 2026 GMT Not After : Sep 28 09:00:12 2026 GMT Subject: CN=b1f1d5f1-8912-4f8c-a98d-886b787669bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:78:7f:4d:3b:c4:22:f7:2e:d9:60:67:32: cd:82:1c:dd:12:3e:ff:2c:dc:48:b2:61:35:54:30: 99:ef:27:99:d2:5c:01:7e:01:23:fc:89:f9:93:de: 47:eb:fb:47:2e:05:ed:50:63:6e:18:f9:af:26:8f: c0:48:ba:b9:9d:8c:fb:64:e9:11:fa:99:3e:6b:e3: 42:4b:a8:9e:9d:42:3e:76:bd:0c:d2:97:6f:6b:57: 8a:90:48:b6:47:3b:1b:19:9b:93:22:63:0c:47:bb: 22:28:31:3c:7c:be:e4:01:b8:52:61:f1:0f:22:6c: 35:0f:a8:db:d4:c4:31:d8:6b:1d:ae:f1:da:5b:66: 3f:c1:26:98:a1:3a:13:c3:f9:e8:6f:69:86:93:12: 2c:7b:48:f5:3b:38:e7:a8:cc:ef:b1:f4:05:b1:4f: 9d:bc:e0:c0:89:0c:5f:d6:09:af:b5:64:0d:59:b5: fb:6a:9a:57:cc:0d:ac:de:76:c0:71:a6:c1:f9:45: 3c:58:42:bf:40:d7:e3:ee:c1:8d:28:39:5c:34:92: 6c:3a:14:04:dc:2e:f1:8c:49:02:fc:2d:56:8c:65: 12:c8:aa:fa:3a:fd:1e:0b:35:ee:2b:d5:6b:06:63: 88:b7:50:4e:67:8b:e6:fb:c8:a1:80:d8:cb:33:16: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:54:AD:FC:82:73:11:9D:31:FF:B1:3D:F9:D6:13:93:0B:30:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl X509v3 Authority Key Identifier: keyid:15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer sbgp-ipAddrBlock: critical IPv4: 199.88.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:41:30:b5:62:2e:91:79:b9:9e:2b:75:85:8f:03:90:c2:93: fa:23:1b:55:68:75:d2:d0:e3:6e:5f:c3:53:ac:7d:4b:12:c8: 6e:8a:f4:84:16:6b:ed:6c:15:78:46:80:7e:9e:63:9f:0d:b0: 39:bc:8d:63:bf:7a:b8:4e:ed:28:3c:93:f1:3e:ad:a7:76:cf: ac:c4:48:f1:93:3e:52:fb:13:da:ec:a3:73:e4:df:66:2d:17: c9:fb:26:a5:aa:d7:9c:c5:82:c0:d3:03:b4:d0:d9:f5:94:cf: f7:28:37:53:53:fb:3f:09:88:50:9c:a1:c3:38:c2:f4:ac:45: f6:a5:3f:40:5f:e2:69:a8:d4:fe:ee:03:c7:d7:6e:5a:07:2c: cb:ed:bd:a7:9c:25:28:9c:55:6c:3d:3c:77:92:5b:2c:07:43: 47:59:50:ba:82:7d:96:3a:65:49:41:d8:db:06:ba:1e:fd:37: 98:f0:bd:96:15:7a:ef:09:68:33:0e:9f:c0:04:85:cd:7c:0b: bc:58:7b:98:5d:27:0c:d6:5c:d4:da:fe:f5:d5:23:b9:38:5c: 2e:67:46:2c:37:11:e7:b4:24:e0:ba:2c:12:20:0f:47:a3:f9: 20:36:fd:07:89:ae:a9:a0:cd:7a:58:b5:97:c4:1c:49:b9:dd: e2:b7:67:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf1TVB6xIKdKWnjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4 Y2Y4MB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk YjFmMWQ1ZjEtODkxMi00ZjhjLWE5OGQtODg2Yjc4NzY2OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYZ4f007xCL3LtlgZzLNghzdEj7/LNxIsmE1 VDCZ7yeZ0lwBfgEj/In5k95H6/tHLgXtUGNuGPmvJo/ASLq5nYz7ZOkR+pk+a+NC S6ienUI+dr0M0pdva1eKkEi2RzsbGZuTImMMR7siKDE8fL7kAbhSYfEPImw1D6jb 1MQx2GsdrvHaW2Y/wSaYoToTw/nob2mGkxIse0j1OzjnqMzvsfQFsU+dvODAiQxf 1gmvtWQNWbX7appXzA2s3nbAcabB+UU8WEK/QNfj7sGNKDlcNJJsOhQE3C7xjEkC /C1WjGUSyKr6Ov0eCzXuK9VrBmOIt1BOZ4vm+8ihgNjLMxaOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ6VK38gnMRnTH/sT351hOTCzBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRi NmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvNGNhZmJmZDItMzViMC0z ZDA3LThkMTMtMTFmNmJkYmEyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjA0YjZlMzUtYzJiNS00MDg0LTlj NzAtZGQ1ZTdjN2Q4Y2Y4LzIwNGI2ZTM1LWMyYjUtNDA4NC05YzcwLWRkNWU3Yzdk OGNmOC5jcmwwHwYDVR0jBBgwFoAUFbIs9jHTt8wyjYn24esUXLA9Iv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVl N2M3ZDhjZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRBMLViLpF5uZ4rdYWPA5DCk/ojG1VoddLQ425fw1OsfUsSyG6K9IQW a+1sFXhGgH6eY58NsDm8jWO/erhO7Sg8k/E+rad2z6zESPGTPlL7E9rso3Pk32Yt F8n7JqWq15zFgsDTA7TQ2fWUz/coN1NT+z8JiFCcocM4wvSsRfalP0Bf4mmo1P7u A8fXbloHLMvtvaecJSicVWw9PHeSWywHQ0dZULqCfZY6ZUlB2NsGuh79N5jwvZYV eu8JaDMOn8AEhc18C7xYe5hdJwzWXNTa/vXVI7k4XC5nRiw3Eee0JOC6LBIgD0ej +SA2/QeJrqmgzXpYtZfEHEm53eK3Z84= -----END CERTIFICATE-----Generated at Tue Jul 7 20:05:30 2026 by rpki-client