$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/1156cf07-7f12-3349-96aa-049c4d61b428.roa File: 1156cf07-7f12-3349-96aa-049c4d61b428.roa (raw, json) Hash identifier: MJgzmgRaZy6At2kwcVj864otZMHvZv7UpE7tOlxoCzQ= Subject key identifier: 16:BA:8E:92:FC:7A:65:9B:28:E6:C5:25:42:95:AF:66:E4:73:78:81 Certificate issuer: /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Certificate serial: 010D0C9F4328584EA79088F04DD18D4F49B50100 Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/1156cf07-7f12-3349-96aa-049c4d61b428.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 199.59.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:88:f0:4d:d1:8d:4f:49:b5:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b04b44aa-310b-4b35-9e5c-b023108b712c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:38:a5:89:7e:54:15:f2:08:e0:fa:8f:07: 86:2f:6c:59:f8:89:91:5c:07:e9:a0:93:3f:0f:f3: d0:14:4a:4e:98:ab:69:40:18:f5:7d:ad:65:c9:b4: bb:32:12:6b:2d:96:7e:71:4f:63:fc:35:04:54:89: a9:36:9f:87:43:53:af:47:bf:a9:69:11:51:6a:c5: b3:a5:a0:b8:ce:08:3d:3c:af:56:63:70:6e:c7:82: a0:88:73:d3:ab:37:49:e6:b7:c7:b4:e9:4c:f0:cf: c3:c4:6f:85:f0:24:75:1d:17:6c:10:9b:73:f8:5d: fd:79:e6:be:73:dd:bd:61:aa:59:77:66:4a:52:41: b3:23:0b:61:45:63:3f:51:57:4e:5a:0a:5a:b5:78: a8:79:72:e5:ab:d2:9b:7e:c9:91:9f:c3:b5:b7:5a: fd:87:b1:f3:95:98:0e:c9:c8:33:c8:b7:eb:ad:a4: e9:8f:41:4d:d8:6b:02:66:3e:62:f5:b9:92:16:79: ac:a2:2b:7b:8b:d0:ab:44:c8:55:fb:6a:8e:75:44: f1:92:74:f7:22:d8:4f:8c:7b:85:20:14:29:91:05: 8c:3a:cd:b1:70:d1:05:61:94:ab:cd:b1:8a:75:9a: b1:31:b0:2c:38:74:4a:ab:d4:0f:db:fe:f5:ee:96: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:8E:92:FC:7A:65:9B:28:E6:C5:25:42:95:AF:66:E4:73:78:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/1156cf07-7f12-3349-96aa-049c4d61b428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl X509v3 Authority Key Identifier: keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer sbgp-ipAddrBlock: critical IPv4: 199.59.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e2:96:f7:a5:52:b0:cf:60:9e:59:f7:b9:07:8a:f3:e6:cd: ff:e5:55:44:6c:e8:0d:52:ed:39:f8:f1:6d:55:49:f6:5f:e4: 88:b4:17:05:ca:dc:14:af:4b:e7:56:a8:21:07:75:18:12:59: 85:e6:ff:33:bc:e7:58:80:fd:90:ff:a0:65:86:1c:c8:40:5b: 71:eb:be:ba:3b:0f:af:f4:10:91:85:50:6f:14:2d:86:24:b8: f7:31:9c:fd:5d:9d:34:9f:79:d8:5a:94:5e:e3:a4:d0:d1:fc: b4:b4:e2:25:27:c1:49:f7:39:2e:9b:a6:10:7c:c0:4a:55:a6: a5:4a:b2:6c:f9:00:ed:91:34:94:77:dc:0e:eb:57:8d:bb:78: 57:eb:90:15:ce:2c:bd:27:12:93:48:58:e0:6f:56:72:45:3b: 33:3b:eb:d3:af:f7:b9:d7:ec:36:00:89:0e:ca:5c:c6:75:11: 01:23:4b:4f:e2:fb:31:9a:48:4d:a7:87:e4:6f:8a:87:78:fd: 08:6b:d5:b7:e1:50:29:de:d1:42:a0:e8:7d:b5:22:ad:73:30: 76:95:5c:42:71:d0:46:32:63:f9:f9:98:64:b2:89:5c:98:9f: 73:5c:55:a6:9b:ad:49:ad:99:e3:55:ee:aa:8b:f5:59:fd:a5: 36:2b:cd:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkIjwTdGNT0m1AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YWY2ODUtOWU2NC00NGU0LWFjMzYtNzE5YWQ1Yjhi ZjY4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjA0YjQ0YWEtMzEwYi00YjM1LTllNWMtYjAyMzEwOGI3MTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocg4pYl+VBXyCOD6jweGL2xZ+ImRXAfpoJM/ D/PQFEpOmKtpQBj1fa1lybS7MhJrLZZ+cU9j/DUEVImpNp+HQ1OvR7+paRFRasWz paC4zgg9PK9WY3Bux4KgiHPTqzdJ5rfHtOlM8M/DxG+F8CR1HRdsEJtz+F39eea+ c929YapZd2ZKUkGzIwthRWM/UVdOWgpatXioeXLlq9KbfsmRn8O1t1r9h7HzlZgO ycgzyLfrraTpj0FN2GsCZj5i9bmSFnmsoit7i9CrRMhV+2qOdUTxknT3IthPjHuF IBQpkQWMOs2xcNEFYZSrzbGKdZqxMbAsOHRKq9QP2/717pYbxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa6jpL8emWbKObFJUKVr2bkc3iBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yzdh ZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlhZDViOGJmNjgvMTE1NmNmMDctN2YxMi0z MzQ5LTk2YWEtMDQ5YzRkNjFiNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGM3YWY2ODUtOWU2NC00NGU0LWFj MzYtNzE5YWQ1YjhiZjY4LzRjN2FmNjg1LTllNjQtNDRlNC1hYzM2LTcxOWFkNWI4 YmY2OC5jcmwwHwYDVR0jBBgwFoAUgx/6ReETQHUnLybdGCEJrfzIml8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80YzdhZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlh ZDViOGJmNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzvzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbilvelUrDPYJ5Z97kHivPmzf/lVURs6A1S7Tn48W1VSfZf5Ii0FwXK 3BSvS+dWqCEHdRgSWYXm/zO851iA/ZD/oGWGHMhAW3Hrvro7D6/0EJGFUG8ULYYk uPcxnP1dnTSfedhalF7jpNDR/LS04iUnwUn3OS6bphB8wEpVpqVKsmz5AO2RNJR3 3A7rV427eFfrkBXOLL0nEpNIWOBvVnJFOzM769Ov97nX7DYAiQ7KXMZ1EQEjS0/i +zGaSE2nh+Rviod4/Qhr1bfhUCne0UKg6H21Iq1zMHaVXEJx0EYyY/n5mGSyiVyY n3NcVaabrUmtmeNV7qqL9Vn9pTYrzaM= -----END CERTIFICATE-----Generated at Thu Aug 20 21:58:45 2026 by rpki-client