$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa File: 5ca2880a-38cd-32ae-8559-16deb6384003.roa (raw, json) Hash identifier: n0Zoed9aLBGdRgEORVWJ7wxnTX6Ljx0gBjfG0CQfvL0= Subject key identifier: 89:92:1C:42:7A:8B:73:CF:52:D8:A0:25:1B:81:DC:B0:94:EB:28:3B Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584EA79723E55956770055DB7540 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397325 IP address blocks: 199.58.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:23:e5:59:56:77:00:55:db:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1fb84106-c8d7-4e58-9b7f-847c41f700a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:16:b8:65:c6:ca:28:89:91:7c:85:7d:ec: 39:61:d3:f5:61:83:27:06:82:e7:4a:08:b3:e3:fa: c3:49:e7:a8:62:69:6a:b4:24:10:76:6a:be:dc:67: ff:2a:39:45:e0:60:a6:7b:85:28:aa:2e:39:17:2b: 58:60:f8:9a:17:73:7b:a7:ed:f2:f5:30:68:81:08: 9a:f0:41:31:02:9a:33:f1:cd:fb:0f:81:7b:b6:b8: f7:3b:06:67:49:8f:68:a1:6f:52:ba:b2:c7:89:64: 46:e3:4b:71:f2:1a:e2:ac:94:ba:26:5f:8e:e4:b8: 64:ee:ad:ab:a6:28:46:6a:f2:d0:6a:fb:81:f4:56: e4:02:54:07:ff:a2:10:ed:b2:4c:8d:cf:8b:43:d0: 7a:50:c8:e7:a2:7b:e6:73:c7:09:4f:d4:c1:27:67: 4e:2c:7c:83:66:55:b9:c2:c2:aa:2f:37:1f:47:4a: 02:0f:5c:8a:3c:bc:c3:f4:00:a1:f0:5a:8b:5f:b2: 5a:9f:08:8a:b6:7c:ee:dc:94:b0:ab:62:20:b9:12: 11:d6:10:bc:22:5b:b9:8b:26:06:14:32:45:fe:ee: 52:5f:13:5c:26:33:b3:7e:a8:4a:26:c6:12:7a:3b: 22:c7:4b:35:db:73:6f:41:09:8a:a7:51:f4:bb:e2: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:92:1C:42:7A:8B:73:CF:52:D8:A0:25:1B:81:DC:B0:94:EB:28:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e2:d1:4f:6f:cf:9d:bd:b1:34:62:37:7d:3e:53:d7:8a:3c: fd:f2:dc:0f:bd:6a:39:d8:9e:5a:95:72:ed:6c:f7:48:c7:68: 87:83:d0:5e:05:26:2b:bf:b2:57:fe:7c:6a:19:4a:b5:85:f8: 6e:0e:55:60:e7:de:0b:10:5f:9b:ee:fa:49:ca:27:52:28:17: e2:b8:c8:5d:1b:69:a7:51:09:28:51:85:48:cf:0b:7a:bf:a2: f5:4d:d9:3a:84:cf:90:77:c0:69:00:d9:99:5f:6b:93:a7:b4: 29:49:e5:c1:cc:e3:fc:e9:48:59:b4:60:02:9a:5d:4a:2e:3f: ae:44:7a:40:79:b3:d4:1e:c2:83:8f:27:1c:0e:3e:4d:1b:bf: 72:5a:b6:cf:0f:c1:d2:4e:63:54:85:d6:a9:d3:39:2f:e9:75: 33:83:a0:eb:47:9a:bc:d0:5f:2f:60:cc:c6:d7:34:0e:e1:b5: 16:7f:e5:dc:52:25:96:43:ab:f8:a5:aa:0f:37:fb:76:af:11: 92:c0:07:40:ee:be:d1:32:fa:7b:b5:1f:05:12:f9:a7:04:da: 17:13:ed:dc:e7:4a:34:a5:fe:fe:61:e6:c9:44:fc:57:ce:bc: 92:89:68:64:53:65:cd:53:43:58:2c:6b:5c:0c:f1:88:a8:3d: 5a:58:82:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlyPlWVZ3AFXbdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWZiODQxMDYtYzhkNy00ZTU4LTliN2YtODQ3YzQxZjcwMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr8WuGXGyiiJkXyFfew5YdP1YYMnBoLnSgiz 4/rDSeeoYmlqtCQQdmq+3Gf/KjlF4GCme4Uoqi45FytYYPiaF3N7p+3y9TBogQia 8EExApoz8c37D4F7trj3OwZnSY9ooW9SurLHiWRG40tx8hrirJS6Jl+O5Lhk7q2r pihGavLQavuB9FbkAlQH/6IQ7bJMjc+LQ9B6UMjnonvmc8cJT9TBJ2dOLHyDZlW5 wsKqLzcfR0oCD1yKPLzD9ACh8FqLX7JanwiKtnzu3JSwq2IguRIR1hC8Ilu5iyYG FDJF/u5SXxNcJjOzfqhKJsYSejsix0s123NvQQmKp1H0u+JivwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImSHEJ6i3PPUtigJRuB3LCU6yg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNWNhMjg4MGEtMzhjZC0z MmFlLTg1NTktMTZkZWI2Mzg0MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALi0U9vz529sTRiN30+U9eKPP3y3A+9ajnYnlqVcu1s90jHaIeD0F4F Jiu/slf+fGoZSrWF+G4OVWDn3gsQX5vu+knKJ1IoF+K4yF0baadRCShRhUjPC3q/ ovVN2TqEz5B3wGkA2Zlfa5OntClJ5cHM4/zpSFm0YAKaXUouP65EekB5s9QewoOP JxwOPk0bv3Jats8PwdJOY1SF1qnTOS/pdTODoOtHmrzQXy9gzMbXNA7htRZ/5dxS JZZDq/ilqg83+3avEZLAB0DuvtEy+nu1HwUS+acE2hcT7dznSjSl/v5h5slE/FfO vJKJaGRTZc1TQ1gsa1wM8YioPVpYgnc= -----END CERTIFICATE-----Generated at Fri Aug 21 01:43:43 2026 by rpki-client