$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/49a0bdf5-5ce2-3eef-a54f-e664a63225dd.roa File: 49a0bdf5-5ce2-3eef-a54f-e664a63225dd.roa (raw, json) Hash identifier: VPhh/b6fTH6yfiyYjd/i4B4nnGj06oz4Ymj8suJbDKk= Subject key identifier: D8:B5:4F:92:68:C0:12:83:C6:D7:A2:60:B9:8C:F5:F4:10:ED:CD:E3 Certificate issuer: /CN=df50907a-5dd1-4ef7-a109-30ae99771030 Certificate serial: 010D0C9F4328584E5E36DF7A612B68622BCEE280 Authority key identifier: F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/49a0bdf5-5ce2-3eef-a54f-e664a63225dd.roa Signing time: Thu 02 Jul 2026 18:45:04 +0000 ROA not before: Thu 02 Jul 2026 18:45:04 +0000 ROA not after: Wed 30 Sep 2026 18:45:04 +0000 asID: 14618 IP address blocks: 199.202.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:36:df:7a:61:2b:68:62:2b:ce:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df50907a-5dd1-4ef7-a109-30ae99771030 Validity Not Before: Jul 2 18:45:04 2026 GMT Not After : Sep 30 18:45:04 2026 GMT Subject: CN=0ac71c92-5b96-4d84-9bc2-1e3e161e0fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:96:39:de:a1:27:ff:54:76:e9:39:6e:a0: 84:fb:3f:1b:9a:99:99:be:7a:e2:43:0e:67:12:54: a4:25:7f:e8:56:f7:37:48:58:8b:cd:7b:23:93:04: 05:b3:d0:d1:6a:fe:81:0b:4c:c3:a1:f5:59:5d:b7: 15:a6:84:d3:24:38:c0:77:4c:34:02:8c:44:54:f3: e6:15:20:e1:e9:39:e0:c3:71:ab:30:df:77:3e:10: a7:50:f5:25:a8:76:fd:f4:4e:51:68:fb:37:7d:6c: a2:d9:64:eb:48:eb:a3:c3:b3:04:b2:f5:49:30:cc: 51:ee:d6:d1:97:fd:a4:14:88:a6:98:05:58:c7:bb: 3b:9d:bf:ae:8f:a6:b5:89:cb:e9:7e:f9:7d:9b:a6: 67:47:ca:cd:e8:e1:fa:64:22:8e:d2:05:c8:d6:cc: e1:c5:aa:24:9e:a1:86:7a:71:9e:e7:27:48:2f:44: 60:78:26:ab:0c:9d:c5:f4:28:a1:89:69:c3:4e:e4: cb:d5:99:fb:c0:6b:9b:dc:ac:50:6e:0b:a8:81:de: c3:64:5c:e7:f7:84:f6:aa:14:7b:ce:5b:cb:85:f9: 96:8a:25:74:43:61:85:4b:02:34:39:a0:7f:a3:2a: 6f:c2:8c:08:a6:32:7d:b3:b5:6e:78:16:e2:46:2f: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:4F:92:68:C0:12:83:C6:D7:A2:60:B9:8C:F5:F4:10:ED:CD:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/49a0bdf5-5ce2-3eef-a54f-e664a63225dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.crl X509v3 Authority Key Identifier: keyid:F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer sbgp-ipAddrBlock: critical IPv4: 199.202.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:48:07:15:7d:51:d9:f2:21:f5:09:40:ee:04:2e:f3:b6:dd: 9f:4b:dd:a3:f2:55:11:78:45:bc:03:1c:b3:8c:07:22:81:97: 52:10:2c:37:b3:ca:de:0e:68:f0:4d:67:e6:7f:c2:7a:d7:dd: 65:c7:bc:ff:2e:18:4a:6b:32:ee:bd:5a:e1:b8:30:3b:14:59: a8:36:a1:33:8e:2d:ce:96:e3:8c:ab:c6:ab:b6:a5:ac:51:7d: 17:fc:9f:15:31:e8:b9:36:c3:61:c1:6e:70:9f:93:ed:3d:d2: c4:4f:6d:1c:62:b1:ee:59:0e:fb:6e:b9:fc:5f:cb:24:f0:34: 51:8e:f7:86:de:88:7d:8f:8a:00:b1:30:35:e9:dd:d7:9f:43: 55:e1:03:85:e9:70:30:3d:bf:f3:d9:0d:02:90:c9:0e:8d:2d: 5f:8f:94:09:a3:9d:b5:45:f9:b8:b4:fd:41:7a:31:25:b3:7e: cd:57:3a:d5:42:cf:7d:45:b4:c4:ad:f9:e4:12:ff:08:7f:f8: c0:1e:3e:79:91:b7:1f:15:eb:0d:7a:49:1f:c4:76:8c:9c:57: e0:e3:ed:d3:84:73:97:b8:5f:bc:ee:83:de:00:14:56:f4:6b: a7:2e:1f:4f:38:79:54:ce:d7:27:4a:7e:48:93:a3:06:8c:ad: cb:26:01:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eNt96YStoYivO4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1MDkwN2EtNWRkMS00ZWY3LWExMDktMzBhZTk5Nzcx MDMwMB4XDTI2MDcwMjE4NDUwNFoXDTI2MDkzMDE4NDUwNFowLzEtMCsGA1UEAxMk MGFjNzFjOTItNWI5Ni00ZDg0LTliYzItMWUzZTE2MWUwZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmKWOd6hJ/9Uduk5bqCE+z8bmpmZvnriQw5n ElSkJX/oVvc3SFiLzXsjkwQFs9DRav6BC0zDofVZXbcVpoTTJDjAd0w0AoxEVPPm FSDh6Tngw3GrMN93PhCnUPUlqHb99E5RaPs3fWyi2WTrSOujw7MEsvVJMMxR7tbR l/2kFIimmAVYx7s7nb+uj6a1icvpfvl9m6ZnR8rN6OH6ZCKO0gXI1szhxaoknqGG enGe5ydIL0RgeCarDJ3F9CihiWnDTuTL1Zn7wGub3KxQbguogd7DZFzn94T2qhR7 zlvLhfmWiiV0Q2GFSwI0OaB/oypvwowIpjJ9s7VueBbiRi8/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi1T5JowBKDxteiYLmM9fQQ7c3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kZjUw OTA3YS01ZGQxLTRlZjctYTEwOS0zMGFlOTk3NzEwMzAvNDlhMGJkZjUtNWNlMi0z ZWVmLWE1NGYtZTY2NGE2MzIyNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGY1MDkwN2EtNWRkMS00ZWY3LWEx MDktMzBhZTk5NzcxMDMwL2RmNTA5MDdhLTVkZDEtNGVmNy1hMTA5LTMwYWU5OTc3 MTAzMC5jcmwwHwYDVR0jBBgwFoAU+aimNbFyaPzvRX93xz447rcRhW0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kZjUwOTA3YS01ZGQxLTRlZjctYTEwOS0zMGFl OTk3NzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8qaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVIBxV9UdnyIfUJQO4ELvO23Z9L3aPyVRF4RbwDHLOMByKBl1IQLDez yt4OaPBNZ+Z/wnrX3WXHvP8uGEprMu69WuG4MDsUWag2oTOOLc6W44yrxqu2paxR fRf8nxUx6Lk2w2HBbnCfk+090sRPbRxise5ZDvtuufxfyyTwNFGO94beiH2PigCx MDXp3defQ1XhA4XpcDA9v/PZDQKQyQ6NLV+PlAmjnbVF+bi0/UF6MSWzfs1XOtVC z31FtMSt+eQS/wh/+MAePnmRtx8V6w16SR/EdoycV+Dj7dOEc5e4X7zug94AFFb0 a6cuH084eVTO1ydKfkiTowaMrcsmAQo= -----END CERTIFICATE-----Generated at Mon Jul 6 18:15:47 2026 by rpki-client