$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa File: 502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa (raw, json) Hash identifier: vV0w69dvFsRJ2CD449SgKAn7bHp90rTkgQ9k9N5vnYE= Subject key identifier: BE:F4:6B:8D:B1:8D:3E:E7:75:10:4B:B6:E4:51:E5:FD:90:15:F5:B3 Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584EC20C65FB6BE4A3D035934E60 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 3677 IP address blocks: 199.201.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:65:fb:6b:e4:a3:d0:35:93:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=e7962f9a-9e1c-4f9d-b69a-5e88ce004025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:ef:46:10:2b:cb:bc:86:3d:19:fb:f8:c4: c7:1e:22:11:2a:5f:e5:b5:4d:a7:95:81:8b:08:af: 43:74:b6:03:be:fe:5c:f8:62:60:b4:2a:83:ec:35: b1:93:a7:c0:d8:65:58:e6:03:1c:01:f0:d5:41:c3: 0b:d3:cd:5e:05:b4:13:95:21:26:15:54:51:16:d9: 4f:80:5b:d2:2d:fc:a8:45:ec:99:63:b4:f9:de:05: e1:80:5f:5a:40:76:64:a8:ee:73:05:e8:2b:14:49: 93:ee:d3:19:aa:82:e7:29:48:3e:5b:be:79:33:aa: 7d:11:5d:b7:2e:fb:24:b0:c3:e4:ff:f6:68:67:e4: 55:e1:73:f6:7f:9d:10:26:7c:bd:d1:63:97:d8:d9: 12:b9:b7:51:48:92:bb:7d:d3:11:de:7a:00:74:35: a7:87:55:2a:50:5f:c7:00:e8:21:23:e0:69:52:de: 43:1d:1e:51:23:37:eb:30:6c:ca:b3:a4:be:84:17: 4a:58:ee:cc:1e:b3:6e:ec:0f:a5:77:cc:2d:a6:2f: 57:b4:8f:e5:17:e0:52:89:55:39:6b:20:2c:b2:32: 50:f5:e5:07:a3:41:e9:02:26:bf:39:d9:8e:dc:48: 82:b0:e2:4f:7a:27:e9:fc:09:e0:19:eb:16:b9:d4: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F4:6B:8D:B1:8D:3E:E7:75:10:4B:B6:E4:51:E5:FD:90:15:F5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/502add25-2a1e-3d32-aa97-b2f7d5d8dc9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 199.201.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f0:7d:29:ca:95:98:6e:f3:c5:1b:ed:f8:9f:ba:83:4a:55: 0d:a7:a2:7f:f4:ff:92:71:9d:f8:a9:18:de:44:6f:10:42:79: 08:ec:59:24:35:4e:91:53:0b:16:f1:99:f8:0a:96:71:fb:52: a3:4a:2c:38:10:cf:36:e4:97:06:45:16:63:9d:32:70:12:82: 21:d1:40:7c:02:ba:26:3b:1b:6b:4e:35:1b:d1:a9:e3:4d:a2: 07:e1:77:58:12:5f:89:2a:e5:fd:38:ca:c8:19:31:78:46:dc: 93:05:9b:b7:d7:18:14:86:fa:20:c0:62:23:2f:46:ea:55:f2: 0b:3f:21:ed:37:7b:2e:59:9b:a8:a7:dc:d0:7c:c4:3b:c5:7e: 89:47:17:80:63:91:40:fe:e6:4e:f9:f9:8f:7a:fd:83:83:39: 4f:7b:c5:46:ef:76:c7:87:ba:d4:42:9c:d9:9a:fe:5d:f0:0a: 60:89:f0:1c:d3:ad:46:f9:10:6b:cb:ff:37:bc:8a:d4:ff:2d: 60:ac:1f:24:e0:1b:0c:7c:a4:76:57:10:21:ea:68:36:23:dd: 4e:04:28:37:18:8a:16:80:d2:69:6c:4e:fd:bf:a7:66:d7:03: 10:5b:14:3a:ba:e6:20:bf:4b:b0:b4:70:a5:b0:a1:0a:b2:51: 8a:34:cf:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGX7a+Sj0DWTTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk ZTc5NjJmOWEtOWUxYy00ZjlkLWI2OWEtNWU4OGNlMDA0MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6zvRhAry7yGPRn7+MTHHiIRKl/ltU2nlYGL CK9DdLYDvv5c+GJgtCqD7DWxk6fA2GVY5gMcAfDVQcML081eBbQTlSEmFVRRFtlP gFvSLfyoReyZY7T53gXhgF9aQHZkqO5zBegrFEmT7tMZqoLnKUg+W755M6p9EV23 LvsksMPk//ZoZ+RV4XP2f50QJny90WOX2NkSubdRSJK7fdMR3noAdDWnh1UqUF/H AOghI+BpUt5DHR5RIzfrMGzKs6S+hBdKWO7MHrNu7A+ld8wtpi9XtI/lF+BSiVU5 ayAssjJQ9eUHo0HpAia/OdmO3EiCsOJPeifp/AngGesWudSqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL70a42xjT7ndRBLtuRR5f2QFfWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvNTAyYWRkMjUtMmExZS0z ZDMyLWFhOTctYjJmN2Q1ZDhkYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8nNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbwfSnKlZhu88Ub7fifuoNKVQ2non/0/5JxnfipGN5EbxBCeQjsWSQ1 TpFTCxbxmfgKlnH7UqNKLDgQzzbklwZFFmOdMnASgiHRQHwCuiY7G2tONRvRqeNN ogfhd1gSX4kq5f04ysgZMXhG3JMFm7fXGBSG+iDAYiMvRupV8gs/Ie03ey5Zm6in 3NB8xDvFfolHF4BjkUD+5k75+Y96/YODOU97xUbvdseHutRCnNma/l3wCmCJ8BzT rUb5EGvL/ze8itT/LWCsHyTgGwx8pHZXECHqaDYj3U4EKDcYihaA0mlsTv2/p2bX AxBbFDq65iC/S7C0cKWwoQqyUYo0z80= -----END CERTIFICATE-----Generated at Fri Aug 21 21:20:00 2026 by rpki-client