$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28413574-43b6-36c0-bea9-fd1fb212e933.roa File: 28413574-43b6-36c0-bea9-fd1fb212e933.roa (raw, json) Hash identifier: mk81GghwRMkgtiivK7H5dgkXA4kPGACYbmcL4Dx3z5g= Subject key identifier: 3C:79:A9:C5:CA:44:1C:3B:14:92:B7:9A:E0:9F:4D:6C:C0:C6:8E:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E4F1F47EDE3F6452A95995980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28413574-43b6-36c0-bea9-fd1fb212e933.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 396613 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:47:ed:e3:f6:45:2a:95:99:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=cd54873a-2dca-44fd-860f-1b2f450d8976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:18:66:67:92:1e:9f:75:05:e4:3b:b7:ad:0a: 11:2d:7c:74:27:47:9d:fb:51:4d:d0:b0:12:fc:f9: 67:0d:d2:6f:b0:d8:2c:b8:15:0e:5f:b1:3e:67:b6: 1a:e1:cc:bb:40:1e:cb:b1:bf:3e:72:cb:5b:8b:3d: 3a:5b:19:7c:df:39:b8:d8:54:29:fd:46:4f:a2:68: 38:b4:4f:1d:4c:dc:73:2e:f6:0c:0c:15:b4:1d:35: 13:7f:d8:95:d0:21:05:68:e7:0b:8c:1d:1a:6f:ca: dd:de:43:f2:cb:94:67:91:db:38:74:d4:fd:05:5f: fc:b6:2a:ae:17:1e:3c:0b:e3:5a:9f:da:13:e9:45: c0:aa:49:43:3b:4c:82:c4:d2:47:4e:1a:53:50:ca: 42:b7:d7:8e:a6:c6:2f:4b:13:f3:9c:d4:2d:3a:15: b2:c2:43:14:67:03:76:e9:76:ff:58:53:49:d3:8a: 94:1e:4a:ba:64:e8:a0:3b:48:4f:b6:0a:db:2a:64: 06:30:9a:19:96:a3:ff:43:62:68:ee:b5:f9:f0:42: 1c:aa:29:42:cd:6b:25:02:ef:96:ca:1d:22:62:ab: 06:d5:90:52:7c:a6:3b:e2:4a:a9:cd:00:ae:7a:e5: 1b:fb:02:27:cc:e8:9e:1c:5b:3b:fc:bb:05:38:68: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:79:A9:C5:CA:44:1C:3B:14:92:B7:9A:E0:9F:4D:6C:C0:C6:8E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28413574-43b6-36c0-bea9-fd1fb212e933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b5:68:21:3c:79:3d:14:c4:41:c3:78:50:c3:b9:17:d1:31: c2:6b:90:de:d5:c9:8e:10:10:33:69:e2:ea:82:f2:13:4a:41: 6f:16:ae:e5:68:b4:3c:af:30:55:3b:b2:b1:70:45:68:cb:bf: 72:b3:09:6b:5d:fb:c7:ec:0f:a2:ff:8a:29:0f:32:35:6f:cf: a2:64:7a:90:f1:9c:5e:17:d4:ce:3b:4e:cb:ee:38:27:eb:dc: 08:32:6a:9e:47:1b:6c:01:e6:d5:aa:ef:75:6b:7c:ac:ca:b4: e7:d1:fb:f0:78:71:79:77:3e:0d:1a:36:92:ca:97:35:90:40: 69:4d:f4:f5:41:0b:c6:cb:ac:c8:d2:2a:bc:b5:f7:b4:f0:28: a5:24:07:24:6e:c8:5d:f4:20:4d:0e:bb:7d:66:6d:08:01:4d: 59:bd:0b:2b:2f:1c:af:40:df:86:8a:a0:b4:07:f2:5a:c1:1f: 73:0f:15:eb:46:62:6e:f3:00:32:1d:f2:b8:0c:b3:83:66:3e: 5b:91:61:91:92:e8:a8:9b:3e:4c:2d:b4:46:d0:3a:15:9c:a8: d5:37:f8:ee:62:d2:7b:01:fa:9b:07:78:31:e8:8d:20:54:f1: eb:cc:bd:a1:6d:ce:9c:6b:0c:aa:26:41:e9:20:22:74:d8:16: ca:0c:f3:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5PH0ft4/ZFKpWZWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk Y2Q1NDg3M2EtMmRjYS00NGZkLTg2MGYtMWIyZjQ1MGQ4OTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxhmZ5Ien3UF5Du3rQoRLXx0J0ed+1FN0LAS /PlnDdJvsNgsuBUOX7E+Z7Ya4cy7QB7Lsb8+cstbiz06Wxl83zm42FQp/UZPomg4 tE8dTNxzLvYMDBW0HTUTf9iV0CEFaOcLjB0ab8rd3kPyy5Rnkds4dNT9BV/8tiqu Fx48C+Nan9oT6UXAqklDO0yCxNJHThpTUMpCt9eOpsYvSxPznNQtOhWywkMUZwN2 6Xb/WFNJ04qUHkq6ZOigO0hPtgrbKmQGMJoZlqP/Q2Jo7rX58EIcqilCzWslAu+W yh0iYqsG1ZBSfKY74kqpzQCueuUb+wInzOieHFs7/LsFOGi0wQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDx5qcXKRBw7FJK3muCfTWzAxo4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg0MTM1NzQtNDNiNi0z NmMwLWJlYTktZmQxZmIyMTJlOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFtWghPHk9FMRBw3hQw7kX0THCa5De1cmOEBAzaeLqgvITSkFvFq7l aLQ8rzBVO7KxcEVoy79yswlrXfvH7A+i/4opDzI1b8+iZHqQ8ZxeF9TOO07L7jgn 69wIMmqeRxtsAebVqu91a3ysyrTn0fvweHF5dz4NGjaSypc1kEBpTfT1QQvGy6zI 0iq8tfe08CilJAckbshd9CBNDrt9Zm0IAU1ZvQsrLxyvQN+GiqC0B/JawR9zDxXr RmJu8wAyHfK4DLODZj5bkWGRkuiomz5MLbRG0DoVnKjVN/juYtJ7AfqbB3gx6I0g VPHrzL2hbc6cawyqJkHpICJ02BbKDPN+ -----END CERTIFICATE-----Generated at Sun Jun 28 19:40:55 2026 by rpki-client