$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/20b5826b-6146-3281-95ec-133efb51d11e.roa File: 20b5826b-6146-3281-95ec-133efb51d11e.roa (raw, json) Hash identifier: Gnc/upcKTTmaZH1VUshkqC/HNZa0tzDRWudd4gHe0pE= Subject key identifier: BC:57:25:81:A1:16:20:7A:41:71:8E:58:ED:98:DF:27:F3:CE:7B:E5 Certificate issuer: /CN=02ae6ad1-19bf-4926-8b00-6ce72efacb0f Certificate serial: 010D0C9F4328584E6F9F16E0B8FD2E805E7C3A80 Authority key identifier: 0D:85:D4:6E:20:CC:CD:FC:CB:EC:1F:8F:F9:1C:23:A5:31:85:35:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/20b5826b-6146-3281-95ec-133efb51d11e.roa Signing time: Thu 09 Jul 2026 00:23:47 +0000 ROA not before: Thu 09 Jul 2026 00:23:47 +0000 ROA not after: Wed 07 Oct 2026 00:23:47 +0000 asID: 402721 IP address blocks: 199.245.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:9f:16:e0:b8:fd:2e:80:5e:7c:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ae6ad1-19bf-4926-8b00-6ce72efacb0f Validity Not Before: Jul 9 00:23:47 2026 GMT Not After : Oct 7 00:23:47 2026 GMT Subject: CN=97d04c46-f52e-47f5-9835-b9494faa40cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3b:64:2f:ec:2e:d4:75:c8:c4:68:52:6a:0a: 1f:ec:64:92:cf:38:a2:3b:3d:62:63:6b:5f:56:ae: 7a:80:f8:10:eb:e1:99:d1:82:dd:ac:94:04:cf:6d: 21:f0:38:87:d3:3e:99:18:82:38:87:02:af:06:46: 3e:86:f3:3f:cd:ca:2f:1b:38:15:b7:b9:9a:d4:9e: 51:99:d3:4d:00:d9:f0:c0:63:8c:26:9a:1c:4c:f6: 00:78:2d:ef:9c:a2:5e:4b:8d:e1:e6:8f:f9:90:48: 51:75:9a:f2:0a:03:08:ab:e7:11:12:9d:d0:03:9d: 56:31:a3:b2:db:dd:9f:1b:d8:8b:2c:42:b2:e0:df: b3:a8:cb:8b:05:59:10:79:66:e4:78:4e:f7:d1:8f: d9:2d:65:bc:c9:45:97:7d:3e:df:0e:cf:9b:c4:12: 51:5c:6e:ed:0b:87:68:3e:dd:7d:9d:04:c3:43:d7: 57:6f:ed:57:4b:a5:a1:b9:57:05:03:28:30:56:eb: 6d:87:6a:96:bb:e3:df:5c:4b:af:04:fe:3c:28:74: cd:cb:b6:c6:a6:3a:f4:93:f0:cc:11:5f:60:24:3e: 9a:dd:cb:d5:e4:3b:f7:3e:e3:a5:10:a6:c5:b8:29: 67:ea:c5:32:97:d5:6a:fb:b4:5c:15:46:6f:1c:26: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:57:25:81:A1:16:20:7A:41:71:8E:58:ED:98:DF:27:F3:CE:7B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/20b5826b-6146-3281-95ec-133efb51d11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.crl X509v3 Authority Key Identifier: keyid:0D:85:D4:6E:20:CC:CD:FC:CB:EC:1F:8F:F9:1C:23:A5:31:85:35:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.cer sbgp-ipAddrBlock: critical IPv4: 199.245.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1c:bc:1f:a5:56:f9:34:80:98:8f:dd:aa:66:b3:46:c9:9a: ff:b0:fd:02:75:08:5f:88:08:a4:30:1d:12:f4:1f:72:c6:29: 77:2e:78:3c:b8:06:42:df:45:51:82:0d:b1:5a:dd:dd:3d:8a: c3:d4:17:b3:f4:65:f1:e5:b3:ff:03:27:e2:c3:d1:61:17:2a: a2:9e:c2:cb:bb:81:6f:70:c6:5a:01:96:93:07:fa:ab:77:2c: 2a:09:a2:9f:d0:03:28:68:a3:9a:dc:23:65:93:b3:5d:c6:89: 18:70:96:52:64:2d:cd:e0:3b:a3:f2:1d:dd:e5:19:43:90:26: 80:6a:7f:e0:d9:97:dc:f5:72:d0:ce:4f:db:3a:49:f3:1e:f4: 0b:e4:7c:5f:2f:cc:24:47:ef:34:d0:6b:79:a9:63:31:01:6e: c0:1a:9e:0e:ce:7d:56:84:cc:17:52:ce:ef:a9:5a:f1:37:21: d9:bc:eb:c2:09:87:a0:b2:74:f3:53:03:a5:82:32:aa:b8:f8: ce:c3:9d:d6:f3:f4:09:40:48:91:11:56:a2:af:df:48:03:0c: c2:af:a6:47:ef:3f:3a:9b:e8:b8:ce:78:6a:db:b0:80:6a:94: 07:03:74:f6:a5:b3:2a:96:43:37:0f:ae:78:8a:3c:e8:66:d9: 74:82:d4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vnxbguP0ugF58OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJhZTZhZDEtMTliZi00OTI2LThiMDAtNmNlNzJlZmFj YjBmMB4XDTI2MDcwOTAwMjM0N1oXDTI2MTAwNzAwMjM0N1owLzEtMCsGA1UEAxMk OTdkMDRjNDYtZjUyZS00N2Y1LTk4MzUtYjk0OTRmYWE0MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkztkL+wu1HXIxGhSagof7GSSzziiOz1iY2tf Vq56gPgQ6+GZ0YLdrJQEz20h8DiH0z6ZGII4hwKvBkY+hvM/zcovGzgVt7ma1J5R mdNNANnwwGOMJpocTPYAeC3vnKJeS43h5o/5kEhRdZryCgMIq+cREp3QA51WMaOy 292fG9iLLEKy4N+zqMuLBVkQeWbkeE730Y/ZLWW8yUWXfT7fDs+bxBJRXG7tC4do Pt19nQTDQ9dXb+1XS6WhuVcFAygwVutth2qWu+PfXEuvBP48KHTNy7bGpjr0k/DM EV9gJD6a3cvV5Dv3PuOlEKbFuCln6sUyl9Vq+7RcFUZvHCb3vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxXJYGhFiB6QXGOWO2Y3yfzznvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMmFl NmFkMS0xOWJmLTQ5MjYtOGIwMC02Y2U3MmVmYWNiMGYvMjBiNTgyNmItNjE0Ni0z MjgxLTk1ZWMtMTMzZWZiNTFkMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDJhZTZhZDEtMTliZi00OTI2LThi MDAtNmNlNzJlZmFjYjBmLzAyYWU2YWQxLTE5YmYtNDkyNi04YjAwLTZjZTcyZWZh Y2IwZi5jcmwwHwYDVR0jBBgwFoAUDYXUbiDMzfzL7B+P+RwjpTGFNZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMmFlNmFkMS0xOWJmLTQ5MjYtOGIwMC02Y2U3 MmVmYWNiMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/XNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIcvB+lVvk0gJiP3apms0bJmv+w/QJ1CF+ICKQwHRL0H3LGKXcueDy4 BkLfRVGCDbFa3d09isPUF7P0ZfHls/8DJ+LD0WEXKqKewsu7gW9wxloBlpMH+qt3 LCoJop/QAyhoo5rcI2WTs13GiRhwllJkLc3gO6PyHd3lGUOQJoBqf+DZl9z1ctDO T9s6SfMe9AvkfF8vzCRH7zTQa3mpYzEBbsAang7OfVaEzBdSzu+pWvE3Idm868IJ h6CydPNTA6WCMqq4+M7Dndbz9AlASJERVqKv30gDDMKvpkfvPzqb6LjOeGrbsIBq lAcDdPalsyqWQzcPrniKPOhm2XSC1Gc= -----END CERTIFICATE-----Generated at Tue Jul 21 20:58:11 2026 by rpki-client