$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/063a665b-ca88-3e71-b36d-f203af2c6d01.roa File: 063a665b-ca88-3e71-b36d-f203af2c6d01.roa (raw, json) Hash identifier: NsZ6ROWiETGRSXArQgQqfBoXKhDxqJfEzySxZeejp/c= Subject key identifier: E2:1A:16:DC:13:9D:D6:CB:66:1C:F0:64:B3:86:D7:95:D0:F5:55:4A Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584E6C19DD987E3BE4F7747B0280 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/063a665b-ca88-3e71-b36d-f203af2c6d01.roa Signing time: Tue 07 Jul 2026 18:07:56 +0000 ROA not before: Tue 07 Jul 2026 18:07:56 +0000 ROA not after: Mon 05 Oct 2026 18:07:56 +0000 asID: 397285 IP address blocks: 199.58.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:19:dd:98:7e:3b:e4:f7:74:7b:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Jul 7 18:07:56 2026 GMT Not After : Oct 5 18:07:56 2026 GMT Subject: CN=1cbbf629-9ce8-489c-b46c-4b569113f0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:8a:81:08:1d:cf:92:0e:18:0f:d8:10:8d: 1a:8b:3e:32:7d:7a:8a:d6:68:64:e4:fd:56:12:df: d8:5f:bb:b1:f3:88:5b:e8:cc:d5:17:4a:9a:3a:db: 82:9a:ed:db:39:ce:ae:43:89:70:d1:26:34:7d:61: ef:ea:14:42:43:6e:1b:d9:3c:22:80:de:04:46:ad: df:b8:3f:66:69:c1:23:ea:ab:dc:e0:7d:e0:c5:31: 10:ec:ea:24:42:4d:f6:82:69:39:af:93:0d:e6:2b: b9:f8:65:e4:dc:4d:18:3f:8a:df:59:64:86:ab:53: 60:25:53:8c:d7:fb:d0:38:5e:e6:45:c7:0c:0a:e0: c2:d1:ea:a9:4a:69:47:35:1b:a6:dd:e9:ad:5c:07: 7e:90:84:87:f7:bc:f2:11:67:32:8f:d5:54:e9:d8: 87:d8:57:97:6c:9c:4e:8f:90:b0:65:54:98:16:a5: b8:64:d8:7a:54:8c:1a:06:43:3e:74:02:d4:1f:34: 84:6f:5c:9b:77:c1:9e:78:f2:91:f2:92:20:9e:06: ea:b9:3f:bc:b0:80:13:3a:09:80:c2:8f:0b:3b:aa: 26:4e:e1:93:1d:53:bf:d4:aa:86:d7:0d:65:c8:62: e2:b4:76:58:01:eb:10:e3:3b:0a:f9:41:95:a2:20: a6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:16:DC:13:9D:D6:CB:66:1C:F0:64:B3:86:D7:95:D0:F5:55:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/063a665b-ca88-3e71-b36d-f203af2c6d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 199.58.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:53:36:10:05:cf:ba:2e:2e:dc:72:f5:9a:93:28:a9:3c:90: 8f:66:3a:ce:09:fd:7d:10:f4:28:5a:a5:a9:f9:03:6f:1d:ec: 54:d1:f9:8a:04:76:23:f1:e5:4c:38:76:ce:34:80:26:ab:e3: b3:2d:79:6b:db:29:df:38:5a:20:2c:90:bd:32:41:ad:00:79: d3:5b:dc:1c:be:be:6d:5a:e2:38:14:82:4d:6b:ab:da:95:13: fb:a7:ff:1e:c9:0e:84:90:83:6a:d3:43:63:fa:c2:c6:8d:62: a9:ec:0c:1c:94:a0:89:96:60:60:d0:3b:0c:14:ae:3e:72:95: 31:ee:e8:c5:82:c1:4e:b6:f9:0e:05:49:50:6c:6a:e5:9c:4a: 7f:1e:a9:0b:3b:b1:bb:b4:41:24:6c:87:15:68:db:aa:ca:46: 7d:e0:eb:13:4e:a2:c0:a5:46:66:c9:73:8c:66:9f:5b:41:44: 0e:fe:31:f1:9b:4b:93:c4:46:b7:cf:e0:b7:76:8d:94:9b:f1: 63:9e:69:7e:7b:30:cb:60:9d:bc:66:ab:36:26:13:e0:ed:3e: d9:c1:eb:b6:ca:9d:40:ac:62:cf:11:e9:13:7d:8e:75:b7:1b: 96:1d:d6:15:53:f6:98:4f:1a:91:0d:36:d9:b8:d3:d6:7e:3a: a2:85:0f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sGd2Yfjvk93R7AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDcwNzE4MDc1NloXDTI2MTAwNTE4MDc1NlowLzEtMCsGA1UEAxMk MWNiYmY2MjktOWNlOC00ODljLWI0NmMtNGI1NjkxMTNmMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnmKgQgdz5IOGA/YEI0aiz4yfXqK1mhk5P1W Et/YX7ux84hb6MzVF0qaOtuCmu3bOc6uQ4lw0SY0fWHv6hRCQ24b2TwigN4ERq3f uD9macEj6qvc4H3gxTEQ7OokQk32gmk5r5MN5iu5+GXk3E0YP4rfWWSGq1NgJVOM 1/vQOF7mRccMCuDC0eqpSmlHNRum3emtXAd+kISH97zyEWcyj9VU6diH2FeXbJxO j5CwZVSYFqW4ZNh6VIwaBkM+dALUHzSEb1ybd8GeePKR8pIgngbquT+8sIATOgmA wo8LO6omTuGTHVO/1KqG1w1lyGLitHZYAesQ4zsK+UGVoiCmowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIaFtwTndbLZhzwZLOG15XQ9VVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvMDYzYTY2NWItY2E4OC0z ZTcxLWIzNmQtZjIwM2FmMmM2ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9TNhAFz7ouLtxy9ZqTKKk8kI9mOs4J/X0Q9Chapan5A28d7FTR+YoE diPx5Uw4ds40gCar47MteWvbKd84WiAskL0yQa0AedNb3By+vm1a4jgUgk1rq9qV E/un/x7JDoSQg2rTQ2P6wsaNYqnsDByUoImWYGDQOwwUrj5ylTHu6MWCwU62+Q4F SVBsauWcSn8eqQs7sbu0QSRshxVo26rKRn3g6xNOosClRmbJc4xmn1tBRA7+MfGb S5PERrfP4Ld2jZSb8WOeaX57MMtgnbxmqzYmE+DtPtnB67bKnUCsYs8R6RN9jnW3 G5Yd1hVT9phPGpENNtm409Z+OqKFD5k= -----END CERTIFICATE-----Generated at Tue Jul 21 20:17:15 2026 by rpki-client