$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/c9a357e8-5b34-3488-aff9-64850d85d2ab.roa File: c9a357e8-5b34-3488-aff9-64850d85d2ab.roa (raw, json) Hash identifier: +w5qU/C02450/sgXHTvhvfdWm9V3lyp1t+1b1ihE28o= Subject key identifier: 25:26:88:EE:46:D8:8C:D6:8D:5C:1E:BD:80:58:3C:CE:A4:F8:08:29 Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584E598426A5EC9ED2175C152800 Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/c9a357e8-5b34-3488-aff9-64850d85d2ab.roa Signing time: Wed 01 Jul 2026 02:21:43 +0000 ROA not before: Wed 01 Jul 2026 02:21:43 +0000 ROA not after: Fri 18 Sep 2026 12:46:36 +0000 asID: 206819 IP address blocks: 199.38.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:59:84:26:a5:ec:9e:d2:17:5c:15:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Jul 1 02:21:43 2026 GMT Not After : Sep 18 12:46:36 2026 GMT Subject: CN=aafa8a4b-3418-4c1a-a4b3-0b7a092d226a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:9b:d3:e6:82:c5:7b:93:ac:1f:33:b2:a6: 81:e8:dd:17:0d:fd:97:39:b9:5a:19:db:94:75:a9: 63:59:f7:13:b3:4d:9c:7e:0c:b3:70:a2:18:22:ee: cc:ec:f7:52:e7:d4:ee:0b:1d:53:9d:6d:a4:f0:e4: 31:25:a8:f0:78:33:42:4d:56:fb:77:82:87:1f:fc: 7a:7c:f8:3b:b8:f1:67:86:85:e6:2b:b6:f9:50:06: a3:e9:64:27:b4:60:ff:56:e4:17:48:3b:9c:35:b9: 00:c3:34:e8:cd:ea:d3:a3:ba:3b:fe:93:8f:38:7d: 1e:6f:3f:81:65:50:33:29:06:ef:09:5f:7b:82:55: 42:05:c2:23:0e:88:d1:d4:36:e3:71:19:f0:a8:09: 34:41:fa:ba:3e:8a:0c:6b:75:29:5f:12:28:bf:54: 0c:30:44:bf:bd:2e:53:fb:cf:f7:4e:6f:36:aa:05: 3c:2d:af:11:1a:8b:20:a8:0b:b1:05:4d:2d:7c:41: 01:aa:20:94:1e:52:11:da:34:56:64:40:65:a6:53: 6d:08:3a:87:df:fd:94:6f:21:ec:c7:9b:1b:f7:79: dc:7f:82:de:ae:e2:22:70:b7:36:c3:c8:e3:6c:45: 96:17:b7:cd:e6:eb:d1:78:17:40:e6:06:3b:d5:52: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:88:EE:46:D8:8C:D6:8D:5C:1E:BD:80:58:3C:CE:A4:F8:08:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/c9a357e8-5b34-3488-aff9-64850d85d2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d3:41:5f:4b:c5:4a:c9:04:4e:4b:06:d0:ad:5b:83:f3:3e: 16:1d:7f:b5:b9:ba:49:3d:a4:74:7a:3c:df:3f:fd:27:2c:60: 84:e7:fe:81:b0:11:86:86:19:cb:a1:be:26:73:74:29:8e:3a: 9e:1f:91:46:7a:11:11:3f:19:8c:5b:84:78:de:4c:f8:f2:3f: 91:ba:60:c5:59:a6:f9:a4:a8:43:32:d9:05:fe:22:a0:30:a1: 20:da:b2:80:1b:62:b1:e4:47:44:a9:9a:14:a5:f9:56:53:a7: 03:78:ec:2d:3b:0d:41:7b:bc:1e:c8:64:a0:30:46:4e:56:e3: b9:69:ee:66:c1:dc:62:41:25:87:0b:4b:8b:b9:73:81:24:ad: 2e:1f:7f:92:4d:a2:35:89:b3:2b:a2:81:24:9f:4a:85:bf:80: 36:09:78:c5:57:f6:66:40:eb:fa:19:f2:2c:e3:5f:ad:cb:6b: 6c:1d:ac:73:c3:1e:63:58:69:d2:83:17:84:39:d2:0b:3e:dc: c6:7a:54:1e:d1:57:f3:45:e9:28:48:c5:eb:7f:fb:25:de:f8: cb:40:38:05:27:83:83:1a:23:06:73:a7:e3:ab:27:4d:8d:d1: 71:19:2d:81:4e:09:e7:1a:27:2e:a4:d9:ad:46:6f:a0:79:64: 39:69:c1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ZhCal7J7SF1wVKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDcwMTAyMjE0M1oXDTI2MDkxODEyNDYzNlowLzEtMCsGA1UEAxMk YWFmYThhNGItMzQxOC00YzFhLWE0YjMtMGI3YTA5MmQyMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0ub0+aCxXuTrB8zsqaB6N0XDf2XOblaGduU daljWfcTs02cfgyzcKIYIu7M7PdS59TuCx1TnW2k8OQxJajweDNCTVb7d4KHH/x6 fPg7uPFnhoXmK7b5UAaj6WQntGD/VuQXSDucNbkAwzTozerTo7o7/pOPOH0ebz+B ZVAzKQbvCV97glVCBcIjDojR1DbjcRnwqAk0Qfq6PooMa3UpXxIov1QMMES/vS5T +8/3Tm82qgU8La8RGosgqAuxBU0tfEEBqiCUHlIR2jRWZEBlplNtCDqH3/2UbyHs x5sb93ncf4LeruIicLc2w8jjbEWWF7fN5uvReBdA5gY71VIcnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUmiO5G2IzWjVwevYBYPM6k+AgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvYzlhMzU3ZTgtNWIzNC0z NDg4LWFmZjktNjQ4NTBkODVkMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbTQV9LxUrJBE5LBtCtW4PzPhYdf7W5ukk9pHR6PN8//ScsYITn/oGw EYaGGcuhviZzdCmOOp4fkUZ6ERE/GYxbhHjeTPjyP5G6YMVZpvmkqEMy2QX+IqAw oSDasoAbYrHkR0SpmhSl+VZTpwN47C07DUF7vB7IZKAwRk5W47lp7mbB3GJBJYcL S4u5c4EkrS4ff5JNojWJsyuigSSfSoW/gDYJeMVX9mZA6/oZ8izjX63La2wdrHPD HmNYadKDF4Q50gs+3MZ6VB7RV/NF6ShIxet/+yXe+MtAOAUng4MaIwZzp+OrJ02N 0XEZLYFOCecaJy6k2a1Gb6B5ZDlpwfs= -----END CERTIFICATE-----Generated at Sun Jul 12 23:45:35 2026 by rpki-client