$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055/028df71f-9e96-3aaf-afa8-3c0eecf090cc.roa File: 028df71f-9e96-3aaf-afa8-3c0eecf090cc.roa (raw, json) Hash identifier: 5IZVNbsBtB5reTROt8Zh+O0JyHMsPto/ygzLoIJcz7k= Subject key identifier: 85:ED:EA:BB:B7:4F:59:9A:48:BF:D0:55:B2:47:1C:CA:CD:06:77:25 Certificate issuer: /CN=2ca5a48f-7dda-415d-922b-c98ae0566055 Certificate serial: 010D0C9F4328584F56D4F2431262F28FC75D3680 Authority key identifier: 31:96:BC:14:A8:07:01:52:57:62:B3:0F:02:D1:93:CD:CD:98:6C:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055/028df71f-9e96-3aaf-afa8-3c0eecf090cc.roa Signing time: Tue 29 Sep 2026 20:04:02 +0000 ROA not before: Tue 29 Sep 2026 20:04:02 +0000 ROA not after: Mon 28 Dec 2026 21:04:02 +0000 asID: 30615 IP address blocks: 199.30.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055/2ca5a48f-7dda-415d-922b-c98ae0566055.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055/2ca5a48f-7dda-415d-922b-c98ae0566055.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:d4:f2:43:12:62:f2:8f:c7:5d:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca5a48f-7dda-415d-922b-c98ae0566055 Validity Not Before: Sep 29 20:04:02 2026 GMT Not After : Dec 28 21:04:02 2026 GMT Subject: CN=f427cefd-2b95-4e67-8131-f71334d97952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:03:9b:84:4a:58:28:b7:54:bf:4f:60:cc: 29:b0:58:ef:47:92:33:33:e3:0b:d1:45:74:4f:e1: 68:0b:50:fd:df:01:da:bf:52:ce:17:c6:62:e6:ee: ba:52:dd:c5:1f:5b:96:c0:63:66:b0:f7:08:ed:41: 7b:64:ca:68:a4:40:4f:de:1d:f8:57:65:0c:c0:89: f4:bd:68:58:11:7e:d9:2d:38:60:28:ae:1e:f6:ae: 39:1b:44:a8:e8:3d:44:02:a2:f3:cf:0c:28:2a:e9: a1:34:57:cd:6f:ac:f6:bd:8e:3c:5c:9a:0f:5d:78: 33:5b:58:3e:3e:9f:3d:cf:db:86:07:9e:85:33:5c: 47:0a:3c:e1:50:d4:97:17:85:66:ca:d7:b2:38:08: 8e:c1:32:5a:cc:a7:e0:fb:44:5d:e1:f9:e5:c1:52: c0:39:0a:14:18:3b:be:dd:4a:fb:97:22:73:b7:f0: b3:a2:53:87:2c:11:5b:65:11:84:47:f5:2c:10:8e: ca:de:f7:e9:e4:45:16:7a:59:16:2b:de:f1:dc:1f: 87:2e:d4:f3:b6:e7:73:31:be:41:74:00:37:d3:68: c3:ba:c8:88:b2:26:b0:97:a1:f3:14:a6:f4:03:f2: a9:8c:e2:c5:19:4f:d3:ef:5b:c7:a9:af:52:6e:41: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:EA:BB:B7:4F:59:9A:48:BF:D0:55:B2:47:1C:CA:CD:06:77:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055/028df71f-9e96-3aaf-afa8-3c0eecf090cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055/2ca5a48f-7dda-415d-922b-c98ae0566055.crl X509v3 Authority Key Identifier: keyid:31:96:BC:14:A8:07:01:52:57:62:B3:0F:02:D1:93:CD:CD:98:6C:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2ca5a48f-7dda-415d-922b-c98ae0566055.cer sbgp-ipAddrBlock: critical IPv4: 199.30.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:90:a6:e8:d2:8f:9f:8e:1a:81:3a:39:c7:e1:ab:ed:d3:c6: da:21:24:2c:6a:3a:6f:f5:34:29:85:60:f5:72:54:80:7a:93: f3:13:14:63:55:4f:f2:a9:6e:2b:e5:7c:53:cd:e3:23:5f:65: 6c:8f:e1:5a:ec:3c:69:5e:9b:54:27:0f:05:3a:0c:5e:4a:36: d6:c6:1e:94:71:c0:a0:94:f9:67:88:29:36:81:d3:52:7b:01: d2:c7:57:ae:3a:b8:b2:ba:19:74:0b:f4:aa:2d:84:1b:97:03: ea:5d:52:ab:95:a9:08:51:b0:16:22:2b:ae:f8:f3:31:a9:35: 44:4e:1d:9c:f3:8b:2f:a3:90:0f:13:01:f4:0e:3f:93:e9:9f: fb:af:6d:e0:e0:ba:74:1e:5e:75:10:0a:5c:a8:51:74:1f:10: 2d:10:4d:56:1b:bc:07:4b:13:a8:53:58:33:b2:b8:36:51:07: 06:25:c4:02:a6:79:71:52:d3:3f:01:f6:8f:d8:99:de:64:43: f7:99:ad:db:95:9a:d3:76:9d:78:82:36:94:91:76:dc:a1:58: f9:89:54:90:77:9a:35:07:82:c4:4f:ec:f7:1c:e4:94:28:1a: 14:d6:53:7e:be:80:4a:49:21:88:8a:f0:a7:d7:5f:a5:26:c8: 27:5c:2b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9W1PJDEmLyj8ddNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNhNWE0OGYtN2RkYS00MTVkLTkyMmItYzk4YWUwNTY2 MDU1MB4XDTI2MDkyOTIwMDQwMloXDTI2MTIyODIxMDQwMlowLzEtMCsGA1UEAxMk ZjQyN2NlZmQtMmI5NS00ZTY3LTgxMzEtZjcxMzM0ZDk3OTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sgDm4RKWCi3VL9PYMwpsFjvR5IzM+ML0UV0 T+FoC1D93wHav1LOF8Zi5u66Ut3FH1uWwGNmsPcI7UF7ZMpopEBP3h34V2UMwIn0 vWhYEX7ZLThgKK4e9q45G0So6D1EAqLzzwwoKumhNFfNb6z2vY48XJoPXXgzW1g+ Pp89z9uGB56FM1xHCjzhUNSXF4VmyteyOAiOwTJazKfg+0Rd4fnlwVLAOQoUGDu+ 3Ur7lyJzt/CzolOHLBFbZRGER/UsEI7K3vfp5EUWelkWK97x3B+HLtTztudzMb5B dAA302jDusiIsiawl6HzFKb0A/KpjOLFGU/T71vHqa9SbkGRlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXt6ru3T1maSL/QVbJHHMrNBnclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yY2E1 YTQ4Zi03ZGRhLTQxNWQtOTIyYi1jOThhZTA1NjYwNTUvMDI4ZGY3MWYtOWU5Ni0z YWFmLWFmYTgtM2MwZWVjZjA5MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMmNhNWE0OGYtN2RkYS00MTVkLTky MmItYzk4YWUwNTY2MDU1LzJjYTVhNDhmLTdkZGEtNDE1ZC05MjJiLWM5OGFlMDU2 NjA1NS5jcmwwHwYDVR0jBBgwFoAUMZa8FKgHAVJXYrMPAtGTzc2YbOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yY2E1YTQ4Zi03ZGRhLTQxNWQtOTIyYi1jOThh ZTA1NjYwNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeQpujSj5+OGoE6Ocfhq+3TxtohJCxqOm/1NCmFYPVyVIB6k/MTFGNV T/KpbivlfFPN4yNfZWyP4VrsPGlem1QnDwU6DF5KNtbGHpRxwKCU+WeIKTaB01J7 AdLHV646uLK6GXQL9KothBuXA+pdUquVqQhRsBYiK6748zGpNUROHZzziy+jkA8T AfQOP5Ppn/uvbeDgunQeXnUQClyoUXQfEC0QTVYbvAdLE6hTWDOyuDZRBwYlxAKm eXFS0z8B9o/Ymd5kQ/eZrduVmtN2nXiCNpSRdtyhWPmJVJB3mjUHgsRP7Pcc5JQo GhTWU36+gEpJIYiK8KfXX6UmyCdcKyo= -----END CERTIFICATE-----Generated at Sun Oct 11 17:47:56 2026 by rpki-client