$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa File: 0ca9fb71-4d54-3d33-9805-4e6585f71430.roa (raw, json) Hash identifier: cxZ3bQqWq5YsQ0PUHcQot6CTFWkCiJKlB2hFuGMm4Nk= Subject key identifier: F1:07:89:78:C4:BE:3D:9B:AA:DD:C3:05:C2:09:08:7F:76:E1:D1:71 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584EC371BE056FBC2CB1DD62DD00 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 14525 IP address blocks: 199.34.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:be:05:6f:bc:2c:b1:dd:62:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=534b5f13-67f8-497c-acea-fb5df838d017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:3f:19:a1:fa:82:15:a6:5a:2d:c5:ca:15: c6:38:e7:34:38:70:a3:a3:9f:80:be:52:61:03:c0: 69:9e:d4:ea:77:d6:a8:48:00:19:62:db:72:8b:85: 43:83:2e:02:92:2d:ad:ff:68:04:45:31:c8:82:9c: bc:11:c9:86:91:43:18:b2:22:f0:d1:90:22:8c:af: 8e:97:5f:17:ba:f0:e0:81:a9:2a:df:d8:02:78:55: f7:49:c8:ee:51:61:af:78:26:4e:14:79:8b:1d:bb: a6:dc:56:a4:54:8c:53:dd:3e:44:35:10:cd:fc:fb: 0f:71:8f:45:87:c1:b4:ac:32:60:74:f7:79:8e:fe: 9b:71:45:28:fa:61:bc:e4:95:07:a0:e3:76:0d:e7: 5c:48:32:05:4a:84:d0:1e:fb:57:3c:f0:8a:53:58: 11:06:0c:c5:91:8c:22:19:c9:ae:3f:45:3c:e0:48: 10:87:41:98:9b:8b:11:06:4f:bb:aa:ff:ac:88:60: 44:1e:32:3c:e8:ef:19:e6:b6:69:bd:a8:36:91:26: 3e:bf:79:30:1f:13:08:f8:50:29:02:99:78:be:b1: 25:0d:2e:68:c7:43:01:27:4d:b2:9a:6e:b9:45:e5: a0:e8:32:1f:96:c1:26:8b:2a:34:be:54:2a:b7:96: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:07:89:78:C4:BE:3D:9B:AA:DD:C3:05:C2:09:08:7F:76:E1:D1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/0ca9fb71-4d54-3d33-9805-4e6585f71430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 199.34.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c5:3d:54:fc:c8:f9:45:27:bb:33:6d:d4:62:2f:b4:ef:e6: 40:ed:f1:ed:79:96:27:49:51:88:e9:0e:31:53:8e:a0:09:37: 36:e3:aa:a1:8e:37:25:aa:f3:e1:ee:7c:49:5c:73:e5:1b:f7: 31:26:6a:1d:37:7c:68:3d:72:26:22:3f:90:5b:10:1a:18:93: 31:86:a8:be:4c:da:07:b1:bf:45:1b:68:27:81:15:db:c3:7a: 8b:77:de:e0:ce:8c:60:1d:a8:3b:20:d3:93:8b:77:1e:0d:6c: e4:71:e7:60:80:5d:a6:c5:86:ea:a4:d7:a8:d4:f1:b8:0f:df: 20:86:9e:12:5d:a0:75:9f:33:57:f0:61:63:b6:79:a6:8a:0b: cb:29:93:40:f0:8d:60:4a:df:e1:9c:94:a1:2a:8d:bf:f8:d0: 05:f7:7e:c6:e6:53:fd:b5:8c:81:70:cd:0a:28:f2:0c:b0:7c: 1a:17:16:92:d6:41:d3:3c:d1:69:6e:69:04:ef:18:4e:f6:cb: ff:ed:5b:c3:8a:76:61:81:ac:14:da:eb:e9:6c:63:65:1d:2b: da:43:02:b9:8b:db:d0:4e:d1:de:5c:aa:8f:00:5a:ce:57:df: 24:75:4b:39:44:3e:fc:2a:9a:dc:e2:47:24:9b:dd:e7:ac:05: f3:c6:21:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcb4Fb7wssd1i3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NTM0YjVmMTMtNjdmOC00OTdjLWFjZWEtZmI1ZGY4MzhkMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoM/GaH6ghWmWi3FyhXGOOc0OHCjo5+AvlJh A8BpntTqd9aoSAAZYttyi4VDgy4Cki2t/2gERTHIgpy8EcmGkUMYsiLw0ZAijK+O l18XuvDggakq39gCeFX3ScjuUWGveCZOFHmLHbum3FakVIxT3T5ENRDN/PsPcY9F h8G0rDJgdPd5jv6bcUUo+mG85JUHoON2DedcSDIFSoTQHvtXPPCKU1gRBgzFkYwi GcmuP0U84EgQh0GYm4sRBk+7qv+siGBEHjI86O8Z5rZpvag2kSY+v3kwHxMI+FAp Apl4vrElDS5ox0MBJ02ymm65ReWg6DIflsEmiyo0vlQqt5ZdXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEHiXjEvj2bqt3DBcIJCH924dFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvMGNhOWZiNzEtNGQ1NC0z ZDMzLTk4MDUtNGU2NTg1ZjcxNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTFPVT8yPlFJ7szbdRiL7Tv5kDt8e15lidJUYjpDjFTjqAJNzbjqqGO NyWq8+HufElcc+Ub9zEmah03fGg9ciYiP5BbEBoYkzGGqL5M2gexv0UbaCeBFdvD eot33uDOjGAdqDsg05OLdx4NbORx52CAXabFhuqk16jU8bgP3yCGnhJdoHWfM1fw YWO2eaaKC8spk0DwjWBK3+GclKEqjb/40AX3fsbmU/21jIFwzQoo8gywfBoXFpLW QdM80WluaQTvGE72y//tW8OKdmGBrBTa6+lsY2UdK9pDArmL29BO0d5cqo8AWs5X 3yR1SzlEPvwqmtziRySb3eesBfPGIQk= -----END CERTIFICATE-----Generated at Fri Aug 21 22:13:59 2026 by rpki-client