$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa File: a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa (raw, json) Hash identifier: MoXzOzTAKuBdZED1i1ypGm2fFX6sa2d6ofz//AtbSq8= Subject key identifier: 7F:D4:05:54:81:D7:D4:2A:70:13:A6:9F:EC:9C:55:18:96:B1:83:04 Certificate issuer: /CN=5398a1dc-9144-466a-9218-fa7b21ae09de Certificate serial: 010D0C9F4328584E5601FCE96749233D60B33100 Authority key identifier: 0B:49:AB:F1:0B:38:9E:1E:04:D0:74:70:79:D8:B6:94:88:7D:0C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa Signing time: Mon 29 Jun 2026 20:12:02 +0000 ROA not before: Mon 29 Jun 2026 20:12:02 +0000 ROA not after: Sun 27 Sep 2026 20:12:02 +0000 asID: 16939 IP address blocks: 199.101.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:01:fc:e9:67:49:23:3d:60:b3:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5398a1dc-9144-466a-9218-fa7b21ae09de Validity Not Before: Jun 29 20:12:02 2026 GMT Not After : Sep 27 20:12:02 2026 GMT Subject: CN=f6a5d20d-c7d1-4e89-8624-83ef49cc84b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:a5:43:72:4f:65:85:2b:bf:7a:b2:8a:69: 68:0b:03:c6:fc:f0:1a:fd:12:90:88:08:e9:8d:7b: fc:23:34:73:72:7c:1f:50:18:4c:6f:f9:b4:3d:bf: 7c:e2:87:d6:42:26:7f:5d:31:08:a0:dd:cd:a7:26: 1f:f0:ea:0e:2c:06:64:47:ca:f9:1f:02:5f:67:6d: 4f:a4:a8:e1:4f:35:5f:09:2e:36:c2:97:80:f1:c9: cb:f0:ab:7d:fb:f1:c9:0f:fb:28:4d:ba:dc:6e:b4: 36:63:36:94:54:de:6f:36:a1:e6:f1:35:f2:17:40: 0d:da:d4:ed:04:c9:a5:08:cf:1c:95:6e:56:ef:1c: b9:3f:b2:70:ea:4f:5d:04:b6:8a:50:c6:5c:a6:d9: 09:ee:7a:bc:3d:70:3f:69:bf:af:f1:1f:dd:01:8d: ed:19:63:40:7b:62:fd:38:dd:e9:5c:c6:7a:3c:4c: 76:cd:87:70:6e:6d:e7:7e:77:db:f4:1f:40:42:e3: 43:17:bb:eb:7f:c9:92:dd:32:a3:dc:a8:b4:3d:cc: 6d:12:4c:aa:15:ec:71:a2:32:36:92:17:08:f7:ab: 0a:fe:91:fe:cb:5e:ac:d5:4b:8c:81:45:29:4c:7f: 08:d0:23:f7:79:53:e1:60:a0:67:26:c8:88:10:24: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:05:54:81:D7:D4:2A:70:13:A6:9F:EC:9C:55:18:96:B1:83:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/a375a112-70ea-3d94-ad00-d7b7b8b6ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.crl X509v3 Authority Key Identifier: keyid:0B:49:AB:F1:0B:38:9E:1E:04:D0:74:70:79:D8:B6:94:88:7D:0C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de.cer sbgp-ipAddrBlock: critical IPv4: 199.101.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:a9:54:0c:c8:58:ad:66:59:d6:71:26:70:b9:20:78:bf: b6:3f:a5:e0:f6:4b:f4:72:91:bb:32:03:e9:c0:49:c4:b7:51: f4:41:1b:d2:76:b6:9d:97:bf:b3:cc:9a:67:bf:d1:d9:96:b2: 01:2c:f2:6e:7a:16:6b:6e:15:33:b3:e0:b6:4c:d3:7a:c5:9f: 8c:fe:77:eb:86:d1:1f:9b:71:a6:5f:36:08:1a:b6:3e:de:9b: 0a:dd:8d:c7:cb:3e:78:ee:17:2b:cf:21:4e:f7:95:95:45:17: 9c:64:34:6f:19:22:a9:7d:30:89:6d:15:e0:d4:c9:6e:9f:c1: 51:e4:40:a0:96:80:da:6e:59:e8:63:be:76:02:1c:8b:df:a3: dc:dc:25:de:b4:79:de:ab:43:e7:77:ad:f0:94:3f:26:ee:c2: bb:39:87:4f:4d:1a:1a:23:02:6e:6b:ca:c6:d3:fc:5b:5a:0f: 23:bf:58:04:11:95:d6:26:b0:a0:04:d4:07:d2:f8:d4:1d:57: 94:90:df:b5:21:87:5f:2a:eb:7b:a9:0b:14:8f:1c:3c:46:98: 5c:c5:59:8a:cb:c6:26:7c:b5:64:e5:e3:05:42:bf:d1:8b:0e: d2:39:cc:a7:70:27:95:2d:3f:e2:90:1a:53:c6:fa:2a:3b:04: c3:c8:9d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WAfzpZ0kjPWCzMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTM5OGExZGMtOTE0NC00NjZhLTkyMTgtZmE3YjIxYWUw OWRlMB4XDTI2MDYyOTIwMTIwMloXDTI2MDkyNzIwMTIwMlowLzEtMCsGA1UEAxMk ZjZhNWQyMGQtYzdkMS00ZTg5LTg2MjQtODNlZjQ5Y2M4NGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD2lQ3JPZYUrv3qyimloCwPG/PAa/RKQiAjp jXv8IzRzcnwfUBhMb/m0Pb984ofWQiZ/XTEIoN3NpyYf8OoOLAZkR8r5HwJfZ21P pKjhTzVfCS42wpeA8cnL8Kt9+/HJD/soTbrcbrQ2YzaUVN5vNqHm8TXyF0AN2tTt BMmlCM8clW5W7xy5P7Jw6k9dBLaKUMZcptkJ7nq8PXA/ab+v8R/dAY3tGWNAe2L9 ON3pXMZ6PEx2zYdwbm3nfnfb9B9AQuNDF7vrf8mS3TKj3Ki0PcxtEkyqFexxojI2 khcI96sK/pH+y16s1UuMgUUpTH8I0CP3eVPhYKBnJsiIECRzrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/UBVSB19QqcBOmn+ycVRiWsYMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81Mzk4 YTFkYy05MTQ0LTQ2NmEtOTIxOC1mYTdiMjFhZTA5ZGUvYTM3NWExMTItNzBlYS0z ZDk0LWFkMDAtZDdiN2I4YjZlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTM5OGExZGMtOTE0NC00NjZhLTky MTgtZmE3YjIxYWUwOWRlLzUzOThhMWRjLTkxNDQtNDY2YS05MjE4LWZhN2IyMWFl MDlkZS5jcmwwHwYDVR0jBBgwFoAUC0mr8Qs4nh4E0HRwedi2lIh9DOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81Mzk4YTFkYy05MTQ0LTQ2NmEtOTIxOC1mYTdi MjFhZTA5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2WVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvEqVQMyFitZlnWcSZwuSB4v7Y/peD2S/RykbsyA+nAScS3UfRBG9J2 tp2Xv7PMmme/0dmWsgEs8m56FmtuFTOz4LZM03rFn4z+d+uG0R+bcaZfNggatj7e mwrdjcfLPnjuFyvPIU73lZVFF5xkNG8ZIql9MIltFeDUyW6fwVHkQKCWgNpuWehj vnYCHIvfo9zcJd60ed6rQ+d3rfCUPybuwrs5h09NGhojAm5rysbT/FtaDyO/WAQR ldYmsKAE1AfS+NQdV5SQ37Uhh18q63upCxSPHDxGmFzFWYrLxiZ8tWTl4wVCv9GL DtI5zKdwJ5UtP+KQGlPG+io7BMPInec= -----END CERTIFICATE-----Generated at Tue Jul 21 20:57:08 2026 by rpki-client