$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa File: 77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa (raw, json) Hash identifier: EAye3HRhVOmMHZDbYzgr6I5MSpRSsE1OMqcR6EkyUMM= Subject key identifier: 1C:10:B5:C5:D3:A5:77:EB:9A:14:64:36:71:7B:79:CE:A6:41:B9:EF Certificate issuer: /CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Certificate serial: 010D0C9F4328584E69A4B384FFC5803B9B1B1A00 Authority key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 35967 IP address blocks: 199.67.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b3:84:ff:c5:80:3b:9b:1b:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=aa3a5548-2e1d-435b-9ef0-2441bfc04d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:d4:17:9f:b7:a6:47:ad:65:30:21:55:4c: 03:b9:c4:cf:9a:48:62:c8:ef:d7:2b:50:28:40:60: cc:6a:fb:da:3c:00:98:59:da:d1:dd:b2:0f:4b:be: 25:2f:2e:e0:f7:47:07:71:7e:24:96:33:bf:cb:53: f7:13:bb:60:4a:9d:e8:30:13:87:0c:f4:bd:80:d5: 83:99:f1:51:8e:4a:6d:46:01:84:f6:79:6f:77:88: d1:ff:1e:35:85:cd:5e:bb:8b:4b:ef:38:e9:22:dc: 12:26:d9:db:34:ff:78:7b:74:22:aa:ed:31:54:42: 46:bc:0f:73:23:0d:db:7e:09:bf:b4:a7:fe:94:90: a4:73:a9:d5:9b:f4:7b:66:a1:f4:7b:9e:06:bd:46: f2:6d:ca:11:8d:90:48:45:3c:0f:33:b3:f8:93:c5: 88:cb:0a:5c:54:ea:45:4e:89:0b:06:99:b0:6d:20: e8:39:15:d4:52:f5:00:aa:6a:80:90:03:e3:70:b8: 04:14:b5:1f:26:ac:fb:f0:cb:d2:f8:cc:d1:21:e9: 01:4d:cc:55:de:ca:0f:87:8b:82:d1:43:a8:ef:51: 4c:d5:45:b0:4d:d9:dd:16:22:96:d3:86:e4:b8:54: 17:0f:89:62:77:65:0b:3f:3e:bc:b6:2a:59:49:66: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:10:B5:C5:D3:A5:77:EB:9A:14:64:36:71:7B:79:CE:A6:41:B9:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl X509v3 Authority Key Identifier: keyid:71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer sbgp-ipAddrBlock: critical IPv4: 199.67.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8a:71:fd:47:51:b5:f1:47:0a:8b:06:54:af:34:0c:4b:5f: 51:5f:f6:d2:cc:af:11:4b:3f:3c:c3:54:39:72:12:68:ec:d3: 7e:0b:b2:68:ce:a9:83:57:37:c6:f5:02:62:60:90:c3:99:a6: 4b:3d:88:13:ca:e6:14:f4:5a:f9:8a:6c:7d:82:49:42:38:74: f4:e4:4d:63:99:b9:3a:07:e8:e5:8a:f7:44:8a:d4:bf:f7:81: cd:7e:0f:07:0b:50:d7:9d:5e:36:8f:ac:8b:c7:27:f2:d9:35: 88:10:ab:eb:c3:82:5b:63:ae:ba:42:e2:d5:3d:8e:a1:fe:80: a8:d3:f4:fa:71:03:08:6c:87:64:39:42:c8:43:7c:10:cd:4d: bd:a5:9c:ad:05:cd:fe:9b:52:23:e4:15:93:dd:75:12:30:0c: dc:f5:36:03:f5:52:4d:8e:56:d0:ac:e7:3f:3e:18:99:5d:0f: 87:33:2b:75:86:07:83:6c:d9:e2:30:43:cb:82:9c:53:75:9c: db:5a:52:17:90:6d:4d:bb:b4:02:5c:6b:c2:19:43:a4:eb:0c: 13:a7:31:4b:cf:d9:b7:7d:e6:a4:9d:74:08:b6:92:9d:c1:dc: 9c:86:40:fe:d8:08:15:59:ad:98:ca:4e:b1:9c:b9:f5:09:d7: d7:03:1f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ppLOE/8WAO5sbGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmNmI0YWEtOGZlZC00MjFiLWJkNWMtODM4NWMwNTA0 YzFkMB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk YWEzYTU1NDgtMmUxZC00MzViLTllZjAtMjQ0MWJmYzA0ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaTUF5+3pketZTAhVUwDucTPmkhiyO/XK1Ao QGDMavvaPACYWdrR3bIPS74lLy7g90cHcX4kljO/y1P3E7tgSp3oMBOHDPS9gNWD mfFRjkptRgGE9nlvd4jR/x41hc1eu4tL7zjpItwSJtnbNP94e3Qiqu0xVEJGvA9z Iw3bfgm/tKf+lJCkc6nVm/R7ZqH0e54GvUbybcoRjZBIRTwPM7P4k8WIywpcVOpF TokLBpmwbSDoORXUUvUAqmqAkAPjcLgEFLUfJqz78MvS+MzRIekBTcxV3soPh4uC 0UOo71FM1UWwTdndFiKW04bkuFQXD4lid2ULPz68tipZSWbAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwQtcXTpXfrmhRkNnF7ec6mQbnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2 YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1YzA1MDRjMWQvNzdlMzQyMzUtMWIwOC0z ZTI3LTg4YTgtZjdmYzBiZjQxZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGJmNmI0YWEtOGZlZC00MjFiLWJk NWMtODM4NWMwNTA0YzFkLzRiZjZiNGFhLThmZWQtNDIxYi1iZDVjLTgzODVjMDUw NGMxZC5jcmwwHwYDVR0jBBgwFoAUcckP4wgdVfg2iOcttJB4J8D0Zh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1 YzA1MDRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0PlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCKcf1HUbXxRwqLBlSvNAxLX1Ff9tLMrxFLPzzDVDlyEmjs034LsmjO qYNXN8b1AmJgkMOZpks9iBPK5hT0WvmKbH2CSUI4dPTkTWOZuToH6OWK90SK1L/3 gc1+DwcLUNedXjaPrIvHJ/LZNYgQq+vDgltjrrpC4tU9jqH+gKjT9PpxAwhsh2Q5 QshDfBDNTb2lnK0Fzf6bUiPkFZPddRIwDNz1NgP1Uk2OVtCs5z8+GJldD4czK3WG B4Ns2eIwQ8uCnFN1nNtaUheQbU27tAJca8IZQ6TrDBOnMUvP2bd95qSddAi2kp3B 3JyGQP7YCBVZrZjKTrGcufUJ19cDH0k= -----END CERTIFICATE-----Generated at Wed Jul 15 03:05:51 2026 by rpki-client