$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/e0533640-95af-39f9-bfa9-1881a9fbeefb.roa File: e0533640-95af-39f9-bfa9-1881a9fbeefb.roa (raw, json) Hash identifier: 0ebxi5ba1Qa7G5pra2MWUhyJdPpBsQ4q/c/W4/RYNWE= Subject key identifier: AF:14:56:D4:90:D5:71:1D:28:F6:A0:F4:A4:01:D4:C8:73:BF:CB:8B Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584E6B0A1505A0298BD135371D80 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/e0533640-95af-39f9-bfa9-1881a9fbeefb.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 53405 IP address blocks: 192.199.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:15:05:a0:29:8b:d1:35:37:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=81ddef0a-b531-4050-a7c7-07f03d993cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:d9:0f:bb:e9:5b:0f:bb:51:94:76:a5:26: 9b:c7:b9:f1:42:fc:6a:fb:e6:cd:bd:64:01:39:60: b4:30:22:f9:da:69:63:ea:89:d7:19:a4:02:26:e5: 44:6e:81:64:18:8e:2e:61:1f:a7:b5:90:22:ac:18: 46:fa:09:91:ab:64:2b:42:21:b2:40:6e:03:ab:bd: 00:bd:af:8e:1c:9f:97:17:59:6e:88:19:6b:1d:6d: 3d:43:ab:80:0f:a3:03:18:9d:17:d8:8e:b5:57:86: 30:5b:4b:41:b4:bb:e6:39:a6:af:ef:46:ae:48:ca: 97:01:03:0f:1c:13:8b:90:c4:0f:8a:3a:eb:7f:05: 45:07:87:d2:2c:e6:2f:2c:44:b5:41:8f:94:5b:79: f0:20:c6:ef:bb:4e:60:d9:bb:b3:f2:ee:ef:63:52: b7:fd:67:aa:a2:52:a1:37:0c:aa:d5:1f:52:75:83: 09:b0:d0:c1:32:76:e8:e8:fe:ed:2e:5c:d2:e2:6f: 42:05:1c:a8:76:f0:a9:73:8b:e7:02:fb:6d:ff:d1: 7d:78:bb:73:68:b9:7a:ed:43:a6:16:d5:7f:3d:87: ae:28:48:24:3a:ec:d7:b5:6b:b5:6d:94:e3:8a:25: e5:27:bb:9a:a5:b0:39:1c:d8:92:77:bd:30:a7:93: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:14:56:D4:90:D5:71:1D:28:F6:A0:F4:A4:01:D4:C8:73:BF:CB:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/e0533640-95af-39f9-bfa9-1881a9fbeefb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: 192.199.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a3:62:da:0c:51:31:8b:3f:ea:f7:ee:63:88:15:0a:3f:e8: 7c:01:d6:b4:a1:5f:c7:b8:3f:22:06:39:d3:42:ef:46:ec:5b: 54:07:70:c8:d2:63:1c:7d:12:db:55:c2:df:58:be:b4:87:da: 98:ea:60:d0:19:14:50:72:43:46:24:f8:6f:4a:f1:e3:68:34: 62:59:e3:8f:d8:4e:5f:a1:97:5a:c3:08:71:0a:bc:5b:b7:d0: 4c:ce:f1:52:76:42:14:c2:5d:2e:8b:32:58:34:ea:27:d2:fa: 66:89:65:d7:2a:6c:79:48:7f:9f:e7:66:08:17:79:0c:44:10: f0:d1:74:8f:17:23:09:e4:95:2e:95:c6:32:25:5a:e7:e1:9d: f4:66:d7:b7:97:f8:74:93:77:e3:df:ff:93:da:dd:8a:f0:15: a2:44:fc:19:22:11:17:1d:25:6b:7c:8a:6e:26:50:7f:50:36: 9a:59:89:05:c7:15:e6:b5:3a:7a:50:6c:cb:27:9b:48:c6:59: 90:65:89:50:08:e9:8b:4a:e5:f4:14:91:d1:a2:b3:16:ac:7a: 08:07:36:ac:1b:44:b1:60:af:82:55:a2:44:09:a8:7d:75:e1: d1:33:7f:86:98:79:29:01:4d:54:46:45:22:eb:1a:11:6d:51: 9f:94:25:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChUFoCmL0TU3HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ODFkZGVmMGEtYjUzMS00MDUwLWE3YzctMDdmMDNkOTkzY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAornZD7vpWw+7UZR2pSabx7nxQvxq++bNvWQB OWC0MCL52mlj6onXGaQCJuVEboFkGI4uYR+ntZAirBhG+gmRq2QrQiGyQG4Dq70A va+OHJ+XF1luiBlrHW09Q6uAD6MDGJ0X2I61V4YwW0tBtLvmOaav70auSMqXAQMP HBOLkMQPijrrfwVFB4fSLOYvLES1QY+UW3nwIMbvu05g2buz8u7vY1K3/WeqolKh Nwyq1R9SdYMJsNDBMnbo6P7tLlzS4m9CBRyodvCpc4vnAvtt/9F9eLtzaLl67UOm FtV/PYeuKEgkOuzXtWu1bZTjiiXlJ7uapbA5HNiSd70wp5MpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8UVtSQ1XEdKPag9KQB1Mhzv8uLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvZTA1MzM2NDAtOTVhZi0z OWY5LWJmYTktMTg4MWE5ZmJlZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMfHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmjYtoMUTGLP+r37mOIFQo/6HwB1rShX8e4PyIGOdNC70bsW1QHcMjS Yxx9EttVwt9YvrSH2pjqYNAZFFByQ0Yk+G9K8eNoNGJZ44/YTl+hl1rDCHEKvFu3 0EzO8VJ2QhTCXS6LMlg06ifS+maJZdcqbHlIf5/nZggXeQxEEPDRdI8XIwnklS6V xjIlWufhnfRm17eX+HSTd+Pf/5Pa3YrwFaJE/BkiERcdJWt8im4mUH9QNppZiQXH Fea1OnpQbMsnm0jGWZBliVAI6YtK5fQUkdGisxaseggHNqwbRLFgr4JVokQJqH11 4dEzf4aYeSkBTVRGRSLrGhFtUZ+UJao= -----END CERTIFICATE-----Generated at Tue Jul 7 20:06:17 2026 by rpki-client