$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa File: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (raw, json) Hash identifier: s5cvncJL6NLWqRgo4YJZdSnIMCnl+dvDzuWBqdzhYPE= Subject key identifier: 02:8E:D8:C8:97:12:6D:0B:E9:D5:1E:CE:0D:7F:87:A0:AE:5D:08:61 Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009 Certificate serial: 010D0C9F4328584E6B0A222B898527C6F9D76280 Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 40460 IP address blocks: 199.182.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:22:2b:89:85:27:c6:f9:d7:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=d1034389-d125-4f7f-adf3-f4d3918a5d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:49:38:89:b1:3b:f8:33:24:c5:2a:b2:c8: 20:4d:c7:2c:48:bb:83:11:26:43:6b:3c:03:94:2e: 84:ed:77:e6:ab:e0:cc:15:82:38:3e:5e:f8:b1:80: f1:7f:dd:4b:86:57:d7:e0:f0:a2:74:bc:68:f4:91: 8b:79:cb:2f:9f:5f:ed:17:80:19:36:fa:ee:1a:0e: 89:06:9d:8a:8a:34:ec:fa:7e:8d:83:11:7a:ee:fd: bf:29:fe:87:16:d0:cf:64:2e:d0:71:74:f8:a0:71: fd:c6:36:01:38:f2:71:69:88:84:0d:da:41:d0:b8: 0b:97:8e:92:90:93:5b:15:24:7a:63:2f:32:1f:49: 78:3a:47:70:5e:99:1a:83:cc:9a:77:fc:7f:7f:37: f0:d2:3b:98:ba:5a:2a:e0:05:57:d6:b0:82:e9:4e: c5:79:0b:f3:58:d3:fe:e0:7b:fc:7b:ef:8e:78:a3: 1d:6b:f1:57:26:d4:c8:5a:fb:ad:91:4e:eb:7f:c5: 86:5f:92:39:40:1b:ef:9c:8a:43:78:8b:1e:ee:a6: af:c8:20:d6:62:77:2d:f4:3f:65:c3:8a:34:88:83: 24:77:b8:ad:11:c1:17:5a:fe:04:9f:0f:b2:ab:78: 9a:e2:45:3a:88:08:3c:e7:ef:d3:f6:f7:c2:65:80: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8E:D8:C8:97:12:6D:0B:E9:D5:1E:CE:0D:7F:87:A0:AE:5D:08:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl X509v3 Authority Key Identifier: keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer sbgp-ipAddrBlock: critical IPv4: 199.182.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:5f:65:7d:98:f7:37:8c:e4:22:c0:71:d9:90:3d:f3:72:c2: 55:60:18:98:8d:bd:4e:3b:7b:dc:3c:f1:6d:12:02:47:ad:92: 86:88:f7:54:08:c2:4a:ba:76:0c:42:20:73:28:7c:f1:1d:22: 07:26:6c:0b:4c:3a:db:14:ee:05:72:19:60:05:36:a9:4d:7b: 8b:f8:22:28:4a:00:ce:7e:4f:f5:66:b2:88:cd:8d:e6:72:b3: 28:02:ea:64:d3:4f:a9:da:4d:c5:64:f3:44:21:83:7e:37:69: b7:f4:b0:9f:19:87:3d:8c:03:50:02:e7:21:0f:bb:c1:8b:9e: aa:95:f5:ba:a5:89:2b:ed:59:12:15:f4:4e:ba:5b:11:bd:a5: 3c:17:26:6d:dc:2d:87:b3:d9:b1:33:49:be:a8:0f:73:5a:7b: aa:70:35:b3:c6:2c:b2:de:13:ea:ab:75:39:d6:c0:a1:a7:4f: f6:2a:4e:fc:47:03:92:00:9b:8e:1c:21:3f:2d:1f:7e:c1:de: 5f:68:da:ea:4e:42:0b:a3:17:62:64:20:0f:15:0b:2e:a8:39: 87:6a:59:b9:1f:93:76:a5:ee:56:ad:51:12:78:4f:00:c5:46: 9c:ea:8c:76:ad:d2:98:4e:b7:1a:3a:67:6d:c8:29:8e:1d:48: f6:b8:f0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCiIriYUnxvnXYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNTQ4YTktZTE3Mi00MWEzLTkyNWEtNjA5ZTkzMWQw MDA5MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZDEwMzQzODktZDEyNS00ZjdmLWFkZjMtZjRkMzkxOGE1ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIVJOImxO/gzJMUqssggTccsSLuDESZDazwD lC6E7Xfmq+DMFYI4Pl74sYDxf91LhlfX4PCidLxo9JGLecsvn1/tF4AZNvruGg6J Bp2KijTs+n6NgxF67v2/Kf6HFtDPZC7QcXT4oHH9xjYBOPJxaYiEDdpB0LgLl46S kJNbFSR6Yy8yH0l4OkdwXpkag8yad/x/fzfw0juYuloq4AVX1rCC6U7FeQvzWNP+ 4Hv8e++OeKMda/FXJtTIWvutkU7rf8WGX5I5QBvvnIpDeIse7qavyCDWYnct9D9l w4o0iIMkd7itEcEXWv4Enw+yq3ia4kU6iAg85+/T9vfCZYC2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKO2MiXEm0L6dUezg1/h6CuXQhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1 NDhhOS1lMTcyLTQxYTMtOTI1YS02MDllOTMxZDAwMDkvZDNjNWRmM2UtZjJlNC0z NjEzLTk2MjYtMjY1YTcyYTZkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNTQ4YTktZTE3Mi00MWEzLTky NWEtNjA5ZTkzMWQwMDA5LzNiYjU0OGE5LWUxNzItNDFhMy05MjVhLTYwOWU5MzFk MDAwOS5jcmwwHwYDVR0jBBgwFoAUFkV4gX9FTzzMRxgL5Nkx0UiTiwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1NDhhOS1lMTcyLTQxYTMtOTI1YS02MDll OTMxZDAwMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7a8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM5fZX2Y9zeM5CLAcdmQPfNywlVgGJiNvU47e9w88W0SAketkoaI91QI wkq6dgxCIHMofPEdIgcmbAtMOtsU7gVyGWAFNqlNe4v4IihKAM5+T/VmsojNjeZy sygC6mTTT6naTcVk80Qhg343abf0sJ8Zhz2MA1AC5yEPu8GLnqqV9bqliSvtWRIV 9E66WxG9pTwXJm3cLYez2bEzSb6oD3Nae6pwNbPGLLLeE+qrdTnWwKGnT/YqTvxH A5IAm44cIT8tH37B3l9o2upOQgujF2JkIA8VCy6oOYdqWbkfk3al7latURJ4TwDF RpzqjHat0phOtxo6Z23IKY4dSPa48K0= -----END CERTIFICATE-----Generated at Wed Jul 8 16:10:03 2026 by rpki-client