$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b1488a79-6987-33a2-8b2c-2007f1779528.roa File: b1488a79-6987-33a2-8b2c-2007f1779528.roa (raw, json) Hash identifier: vIayQl7Aftdi6jwG1nU1MgbLa18WXCajhjnb4ntJCu8= Subject key identifier: BC:14:10:9F:BD:E3:3E:99:C0:80:64:8E:CF:23:7B:B0:3F:42:56:B3 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA23199612AC112F21C6300 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b1488a79-6987-33a2-8b2c-2007f1779528.roa Signing time: Sun 19 Jul 2026 18:24:17 +0000 ROA not before: Sun 19 Jul 2026 18:24:17 +0000 ROA not after: Sat 17 Oct 2026 18:24:17 +0000 asID: 11404 IP address blocks: 199.189.96.0/21 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:31:99:61:2a:c1:12:f2:1c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:17 2026 GMT Not After : Oct 17 18:24:17 2026 GMT Subject: CN=80daaac8-3b5c-4f3d-bceb-965cb7bb0812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:4d:66:5d:94:85:45:18:81:96:db:52:97: 2d:07:5a:95:51:19:47:f8:fa:04:57:c4:43:b4:18: 94:5d:f9:ef:eb:6d:12:9e:18:91:e9:f1:8d:b3:42: b6:27:71:40:e7:bd:5a:7c:a4:cb:bf:ec:9f:76:fa: ab:1b:d9:f9:87:2e:1f:41:0c:d0:00:03:a7:32:7d: fb:e0:77:d1:0d:15:29:9a:1a:e1:a0:d6:75:ab:91: 7a:2a:0c:ed:ba:65:5f:47:75:af:d3:cd:26:1e:02: 9b:b1:10:cc:0e:28:e2:62:58:bc:14:b4:97:3e:43: ec:8b:1b:bd:ad:92:8e:7f:e4:fb:63:d7:aa:ce:c2: ee:56:7a:04:36:35:bd:05:e2:3d:93:3f:9a:44:78: df:0f:07:8d:94:90:9a:f2:f4:2d:3b:2c:69:95:95: 72:ab:c0:59:0a:24:bc:a9:6a:21:aa:99:c4:a3:1c: 70:91:d0:e0:b8:aa:2b:f5:c9:9c:a1:c1:51:55:21: 76:3f:bb:4c:b8:5d:1d:bc:6f:b6:74:fd:a2:39:6a: 6f:dc:14:bc:60:cc:5d:7d:eb:20:99:02:98:ae:94: 67:b7:f6:bd:51:14:91:8f:4e:ca:10:a1:c3:8f:87: 50:f2:fe:34:42:6f:1e:a1:cc:61:28:6b:de:07:97: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:14:10:9F:BD:E3:3E:99:C0:80:64:8E:CF:23:7B:B0:3F:42:56:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b1488a79-6987-33a2-8b2c-2007f1779528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4d:b6:6d:4b:11:d3:e0:db:ae:b7:28:fa:5e:94:30:d4:ed: fd:82:fa:12:30:7f:aa:0c:fe:ac:25:19:af:ed:83:73:d3:ba: c3:dd:97:95:43:bc:19:d6:c1:59:af:fa:8a:8a:e2:ae:eb:52: 62:4b:4b:a2:df:4d:d9:78:0e:01:12:1d:ad:8a:62:57:b1:09: df:a0:f2:a2:92:b2:73:4c:a0:42:0c:19:0b:e3:82:9b:ad:96: ab:1e:56:87:52:f6:3c:fa:be:b5:a7:f2:ac:10:ac:2d:c5:a3: 3e:d5:0e:34:d9:1a:37:cd:31:55:7e:e3:9a:f4:65:53:20:e2: 70:cc:ff:d1:92:f4:ae:19:43:8b:3e:3d:0c:c5:b8:4d:c4:f8: 6d:5f:d5:c9:11:6a:40:bf:50:de:30:60:80:54:90:5f:5b:9b: e8:74:1e:0f:56:10:e3:92:79:20:ef:10:d0:15:3f:1f:52:01: 83:34:05:76:18:21:88:eb:e3:25:c5:2a:59:77:fe:81:68:c8: ce:96:a1:9e:fa:b8:31:b5:97:0a:ea:66:a9:db:a9:f9:6d:88: 22:c1:9d:09:0e:7d:9a:42:14:9a:57:dd:95:96:23:8e:12:b8: 9e:2f:fe:b9:f1:b4:5d:8f:36:f8:38:53:ec:d5:2a:88:c4:58: a7:bc:ec:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojGZYSrBEvIcYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxN1oXDTI2MTAxNzE4MjQxN1owLzEtMCsGA1UEAxMk ODBkYWFhYzgtM2I1Yy00ZjNkLWJjZWItOTY1Y2I3YmIwODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKFNZl2UhUUYgZbbUpctB1qVURlH+PoEV8RD tBiUXfnv620SnhiR6fGNs0K2J3FA571afKTLv+yfdvqrG9n5hy4fQQzQAAOnMn37 4HfRDRUpmhrhoNZ1q5F6KgztumVfR3Wv080mHgKbsRDMDijiYli8FLSXPkPsixu9 rZKOf+T7Y9eqzsLuVnoENjW9BeI9kz+aRHjfDweNlJCa8vQtOyxplZVyq8BZCiS8 qWohqpnEoxxwkdDguKor9cmcocFRVSF2P7tMuF0dvG+2dP2iOWpv3BS8YMxdfesg mQKYrpRnt/a9URSRj07KEKHDj4dQ8v40Qm8eocxhKGveB5cppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwUEJ+94z6ZwIBkjs8je7A/QlazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjE0ODhhNzktNjk4Ny0z M2EyLThiMmMtMjAwN2YxNzc5NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhNtm1LEdPg2663KPpelDDU7f2C+hIwf6oM/qwlGa/tg3PTusPdl5VD vBnWwVmv+oqK4q7rUmJLS6LfTdl4DgESHa2KYlexCd+g8qKSsnNMoEIMGQvjgput lqseVodS9jz6vrWn8qwQrC3Foz7VDjTZGjfNMVV+45r0ZVMg4nDM/9GS9K4ZQ4s+ PQzFuE3E+G1f1ckRakC/UN4wYIBUkF9bm+h0Hg9WEOOSeSDvENAVPx9SAYM0BXYY IYjr4yXFKll3/oFoyM6WoZ76uDG1lwrqZqnbqfltiCLBnQkOfZpCFJpX3ZWWI44S uJ4v/rnxtF2PNvg4U+zVKojEWKe87Lc= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:29 2026 by rpki-client