$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/b7990b25-9556-3a81-9453-eaf7466eb0e3.roa File: b7990b25-9556-3a81-9453-eaf7466eb0e3.roa (raw, json) Hash identifier: tN69Jj/ygUqmeR4RRnvHxBjQ4Jz6r336hEs1bPmVlb4= Subject key identifier: EA:9E:E8:C1:99:55:2D:36:78:99:3E:E1:AD:08:2A:66:F1:2D:AC:99 Certificate issuer: /CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Certificate serial: 010D0C9F4328584E51E9FEB95EC470D49E6EBDA0 Authority key identifier: E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/b7990b25-9556-3a81-9453-eaf7466eb0e3.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 5650 IP address blocks: 199.30.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:fe:b9:5e:c4:70:d4:9e:6e:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9823d1f6-b1fd-48bd-89c4-da4e5d93f209 Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=1fc8f2f1-ab37-44cf-9003-e38ed123db88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:14:94:b6:1c:96:87:4a:7b:27:af:0e:b0: b9:26:e2:2f:8d:3b:c3:d0:14:ab:e7:6c:02:8a:fc: 73:9b:56:c3:e1:39:6a:85:ac:b7:1b:a3:2b:f3:43: e3:fd:3e:ea:2d:6f:40:63:32:6a:ff:a1:2d:12:95: 6d:26:5a:ce:b8:b8:f7:13:3b:2f:b8:b5:f7:f8:03: c3:dc:74:4b:72:be:9d:6c:7a:bf:b4:58:10:46:da: 2d:50:fc:62:73:af:9a:e7:5f:94:98:f2:6b:b5:cf: 2e:78:a9:49:ee:57:a1:37:2f:b9:d2:91:00:91:e9: 65:30:03:6f:83:61:c2:38:56:6c:2a:1d:83:62:35: d3:2f:8e:4c:d7:3f:94:61:eb:71:8e:f4:af:14:79: f0:ce:8d:03:ca:cc:52:79:3e:ed:1d:e5:f9:23:5e: 8b:ec:48:fa:5b:f6:8a:b3:a6:c1:8f:d4:94:0d:e2: f4:85:9b:77:5c:c4:e7:aa:84:f0:e8:ff:8b:45:57: c6:f3:1d:90:43:0e:2b:73:a4:6a:01:62:d3:10:54: 0e:9a:22:f9:14:89:ba:e4:fb:ea:f2:af:20:f6:f4: 3f:67:7e:8a:2a:61:70:01:a3:f3:21:90:63:ab:d6: ce:87:a9:89:60:26:54:d5:ad:ff:d2:5d:b8:eb:76: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:E8:C1:99:55:2D:36:78:99:3E:E1:AD:08:2A:66:F1:2D:AC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/b7990b25-9556-3a81-9453-eaf7466eb0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.crl X509v3 Authority Key Identifier: keyid:E1:FC:D9:80:9C:52:D6:91:C3:6B:04:29:AA:A4:06:9D:37:D5:3B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9823d1f6-b1fd-48bd-89c4-da4e5d93f209.cer sbgp-ipAddrBlock: critical IPv4: 199.30.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:73:b0:a0:84:ed:a6:84:1e:c2:ee:39:f4:96:73:f9:86:86: cb:30:d0:e0:e3:98:e6:79:a8:2d:30:99:8c:83:b8:6b:0f:9f: 0a:15:42:3c:7a:67:da:30:29:8d:ab:79:50:34:17:72:ff:95: 23:6c:b7:de:81:16:74:2a:ce:75:b8:fa:5a:9c:0d:32:3d:fd: cd:b1:66:01:8b:c0:28:66:12:c2:e7:d1:bf:9b:99:27:42:c3: bf:77:f9:6d:70:17:73:fd:32:74:66:64:61:80:f1:9b:86:0c: a8:9f:1f:46:48:3f:cc:b7:7d:72:b6:a7:0f:45:03:0d:cb:52: 5c:ce:9a:22:d1:0d:98:97:57:96:c9:30:da:b5:85:be:37:9e: e7:b2:ec:2a:9e:2b:ff:88:f2:7b:b0:73:98:ac:2d:bc:2b:b7: 57:a6:8f:a0:e1:1a:51:ad:2e:32:8c:57:27:18:a5:0a:a4:1e: 2e:42:32:01:e9:4c:58:d0:c9:43:47:fd:f4:50:39:7a:44:fb: 46:de:22:d2:79:27:a9:33:1b:f2:14:26:15:cd:78:8a:f8:3c: 62:40:5b:b0:57:74:4f:17:62:71:95:56:bd:38:f0:8d:32:06: ca:47:f0:3f:c5:db:9c:08:12:8d:eb:7a:75:01:e5:ab:f5:63: 9a:51:a0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6f65XsRw1J5uvaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyM2QxZjYtYjFmZC00OGJkLTg5YzQtZGE0ZTVkOTNm MjA5MB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk MWZjOGYyZjEtYWIzNy00NGNmLTkwMDMtZTM4ZWQxMjNkYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW4UlLYclodKeyevDrC5JuIvjTvD0BSr52wC ivxzm1bD4Tlqhay3G6Mr80Pj/T7qLW9AYzJq/6EtEpVtJlrOuLj3EzsvuLX3+APD 3HRLcr6dbHq/tFgQRtotUPxic6+a51+UmPJrtc8ueKlJ7lehNy+50pEAkellMANv g2HCOFZsKh2DYjXTL45M1z+UYetxjvSvFHnwzo0DysxSeT7tHeX5I16L7Ej6W/aK s6bBj9SUDeL0hZt3XMTnqoTw6P+LRVfG8x2QQw4rc6RqAWLTEFQOmiL5FIm65Pvq 8q8g9vQ/Z36KKmFwAaPzIZBjq9bOh6mJYCZU1a3/0l2463YqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqe6MGZVS02eJk+4a0IKmbxLayZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIz ZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRlNWQ5M2YyMDkvYjc5OTBiMjUtOTU1Ni0z YTgxLTk0NTMtZWFmNzQ2NmViMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTgyM2QxZjYtYjFmZC00OGJkLTg5 YzQtZGE0ZTVkOTNmMjA5Lzk4MjNkMWY2LWIxZmQtNDhiZC04OWM0LWRhNGU1ZDkz ZjIwOS5jcmwwHwYDVR0jBBgwFoAU4fzZgJxS1pHDawQpqqQGnTfVO/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ODIzZDFmNi1iMWZkLTQ4YmQtODljNC1kYTRl NWQ5M2YyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJzsKCE7aaEHsLuOfSWc/mGhssw0ODjmOZ5qC0wmYyDuGsPnwoVQjx6 Z9owKY2reVA0F3L/lSNst96BFnQqznW4+lqcDTI9/c2xZgGLwChmEsLn0b+bmSdC w793+W1wF3P9MnRmZGGA8ZuGDKifH0ZIP8y3fXK2pw9FAw3LUlzOmiLRDZiXV5bJ MNq1hb43nuey7CqeK/+I8nuwc5isLbwrt1emj6DhGlGtLjKMVycYpQqkHi5CMgHp TFjQyUNH/fRQOXpE+0beItJ5J6kzG/IUJhXNeIr4PGJAW7BXdE8XYnGVVr048I0y BspH8D/F25wIEo3renUB5av1Y5pRoA4= -----END CERTIFICATE-----Generated at Wed Jul 15 01:48:36 2026 by rpki-client