$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/2e519544-efc5-3ad4-943b-e522abab0c05.roa File: 2e519544-efc5-3ad4-943b-e522abab0c05.roa (raw, json) Hash identifier: S1rwKTZ0PDG1yofSMkyLeag9wl/35Y/DD52BeRPIzKE= Subject key identifier: D4:67:FA:69:A7:CC:D5:1E:02:0C:A6:A9:F5:5A:CE:35:BC:5B:C7:CF Certificate issuer: /CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4 Certificate serial: 010D0C9F4328584EA118BF15A89CFE789545EFC0 Authority key identifier: EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/2e519544-efc5-3ad4-943b-e522abab0c05.roa Signing time: Sun 26 Jul 2026 17:43:31 +0000 ROA not before: Sun 26 Jul 2026 17:43:31 +0000 ROA not after: Sat 24 Oct 2026 17:43:31 +0000 asID: 402072 IP address blocks: 199.204.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:18:bf:15:a8:9c:fe:78:95:45:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4 Validity Not Before: Jul 26 17:43:31 2026 GMT Not After : Oct 24 17:43:31 2026 GMT Subject: CN=6b71e28a-0437-4fb5-ac31-20620a838948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:28:d1:fc:69:e2:ae:94:fb:8b:3d:1d:0b: 33:0e:30:62:14:f7:87:a7:62:b3:cd:03:c0:8e:a7: b9:81:a3:3d:3a:49:4b:9d:32:fa:52:40:b9:32:0d: c6:f0:c3:f2:51:1e:18:8c:46:c4:34:49:05:75:05: bf:ce:20:db:db:a9:23:71:df:93:3c:5e:df:63:2d: ee:70:27:8b:79:81:ae:5b:7d:2a:8d:05:0e:29:50: 26:b4:b2:86:81:42:80:ba:0a:ec:88:47:84:f4:61: 76:e5:47:f4:e5:99:fe:49:c2:3e:84:b9:6d:71:d9: 57:ee:95:e8:7d:7f:b1:a6:99:cd:df:2a:f3:dd:f7: ff:c7:dc:e4:d1:ca:28:05:25:1a:a6:3f:75:db:c2: 7f:f5:8c:61:5b:7d:fb:50:78:2e:83:1e:61:5c:d2: 54:28:a7:25:ab:81:c3:71:e1:d6:bc:79:09:e2:2a: 65:9e:6d:ab:ff:cc:fe:b3:75:18:92:80:77:02:c9: 86:ec:05:46:69:91:de:e0:42:36:c1:a1:39:bd:a4: 66:ed:52:4b:55:56:2d:5e:82:87:73:1e:32:34:4e: 64:ff:e1:6a:55:d4:15:50:c2:0a:b7:43:88:1a:84: cf:4b:83:fa:80:b6:9f:a7:60:c1:5c:16:d7:93:08: 28:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:67:FA:69:A7:CC:D5:1E:02:0C:A6:A9:F5:5A:CE:35:BC:5B:C7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/2e519544-efc5-3ad4-943b-e522abab0c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl X509v3 Authority Key Identifier: keyid:EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer sbgp-ipAddrBlock: critical IPv4: 199.204.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:95:f1:3c:31:c8:42:5a:fc:10:52:8a:5f:01:21:e1:01:f5: 4b:7c:78:30:c1:0b:ce:0b:b6:58:aa:3f:40:4e:8e:21:69:17: 20:96:8c:e8:ce:39:cf:5a:cb:21:63:e4:b5:18:c3:76:b9:1a: e5:cf:0e:35:13:44:34:ef:1a:ee:00:4c:f3:cc:7c:26:0e:cb: e5:b7:26:8d:9b:ba:c3:73:b6:f4:52:7e:e7:7a:c8:cf:ce:46: 25:6e:19:52:35:9c:08:48:8b:99:cc:38:f6:b3:8e:4b:a6:44: 4d:f2:73:00:44:aa:f0:df:0f:61:c1:bd:b2:3f:8e:69:d7:a3: 5c:7e:ec:59:2d:eb:51:dd:92:7b:d8:7d:ae:52:47:bb:5b:97: e8:bd:a5:b4:05:52:83:64:3b:0c:12:ca:11:4a:b5:bd:4f:21: 79:eb:13:2a:92:33:44:83:c3:53:4d:88:71:97:74:96:56:13: 8d:e7:34:7d:43:e4:b4:6f:32:50:e3:70:f7:c1:d9:6a:92:db: 27:12:4a:4b:9d:0a:d8:e6:9c:60:09:d1:24:44:a2:3f:4d:f0: e3:14:35:b9:12:4d:b6:af:05:5e:6c:a7:d8:68:1a:90:c0:32: 1f:aa:0f:3b:f7:ab:71:48:6b:bd:50:bc:79:69:8c:e8:9c:e7: d8:14:24:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hGL8VqJz+eJVF78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFhMjFlNzItYTI0MS00ZTEzLWEzY2EtNmU3OGQ4M2Qz ZGY0MB4XDTI2MDcyNjE3NDMzMVoXDTI2MTAyNDE3NDMzMVowLzEtMCsGA1UEAxMk NmI3MWUyOGEtMDQzNy00ZmI1LWFjMzEtMjA2MjBhODM4OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVUo0fxp4q6U+4s9HQszDjBiFPeHp2KzzQPA jqe5gaM9OklLnTL6UkC5Mg3G8MPyUR4YjEbENEkFdQW/ziDb26kjcd+TPF7fYy3u cCeLeYGuW30qjQUOKVAmtLKGgUKAugrsiEeE9GF25Uf05Zn+ScI+hLltcdlX7pXo fX+xppnN3yrz3ff/x9zk0cooBSUapj9128J/9YxhW337UHgugx5hXNJUKKclq4HD ceHWvHkJ4iplnm2r/8z+s3UYkoB3AsmG7AVGaZHe4EI2waE5vaRm7VJLVVYtXoKH cx4yNE5k/+FqVdQVUMIKt0OIGoTPS4P6gLafp2DBXBbXkwgogwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRn+mmnzNUeAgymqfVazjW8W8fPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YWEy MWU3Mi1hMjQxLTRlMTMtYTNjYS02ZTc4ZDgzZDNkZjQvMmU1MTk1NDQtZWZjNS0z YWQ0LTk0M2ItZTUyMmFiYWIwYzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWFhMjFlNzItYTI0MS00ZTEzLWEz Y2EtNmU3OGQ4M2QzZGY0LzVhYTIxZTcyLWEyNDEtNGUxMy1hM2NhLTZlNzhkODNk M2RmNC5jcmwwHwYDVR0jBBgwFoAU6x09b9Lo5renW1BJu0PZF3GqLDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YWEyMWU3Mi1hMjQxLTRlMTMtYTNjYS02ZTc4 ZDgzZDNkZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8yNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOV8TwxyEJa/BBSil8BIeEB9Ut8eDDBC84LtliqP0BOjiFpFyCWjOjO Oc9ayyFj5LUYw3a5GuXPDjUTRDTvGu4ATPPMfCYOy+W3Jo2busNztvRSfud6yM/O RiVuGVI1nAhIi5nMOPazjkumRE3ycwBEqvDfD2HBvbI/jmnXo1x+7Fkt61HdknvY fa5SR7tbl+i9pbQFUoNkOwwSyhFKtb1PIXnrEyqSM0SDw1NNiHGXdJZWE43nNH1D 5LRvMlDjcPfB2WqS2ycSSkudCtjmnGAJ0SREoj9N8OMUNbkSTbavBV5sp9hoGpDA Mh+qDzv3q3FIa71QvHlpjOic59gUJDA= -----END CERTIFICATE-----Generated at Mon Jul 27 13:09:04 2026 by rpki-client