$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/3299068b-d57f-3607-b224-6b1548d188dc.roa File: 3299068b-d57f-3607-b224-6b1548d188dc.roa (raw, json) Hash identifier: h4O7i8YhG3pJTUdbqu92vqC0DJy+aR6ExYgzjZC7I6c= Subject key identifier: 8B:E5:C7:44:D0:F8:6C:E5:D4:E4:C8:92:77:77:59:18:17:7F:DD:D7 Certificate issuer: /CN=53990068-555c-4a99-a422-303d3cb064f7 Certificate serial: 010D0C9F4328584EA7874B7A7E1AB7E508C80100 Authority key identifier: C8:6D:5B:B8:71:C8:22:C3:3A:11:D0:A0:6D:6E:E9:A1:0F:1E:0C:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/3299068b-d57f-3607-b224-6b1548d188dc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 199.7.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:4b:7a:7e:1a:b7:e5:08:c8:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53990068-555c-4a99-a422-303d3cb064f7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0cb3d464-525f-4c2a-a610-0411ef8bc54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:47:59:6a:7c:ba:02:16:04:08:97:e6:13:f8: b3:ed:f7:1b:8f:62:63:e0:06:7b:ad:40:b4:3e:84: 70:c7:69:5f:51:ab:47:fd:71:f0:6b:d2:20:52:f8: d9:3a:58:c2:bf:c8:68:3a:1e:24:cf:26:1e:66:5c: 2c:4e:af:b6:04:60:62:b4:18:1a:3e:b4:62:9a:39: b3:04:e6:22:b7:a0:dc:dd:2f:65:dc:a1:db:de:48: a0:1f:66:3f:a8:73:48:9f:7e:fe:70:ed:83:93:a5: 1b:6e:9f:82:a9:f1:f5:a9:99:71:96:06:c6:4b:29: a3:a2:b5:c0:12:06:cf:dd:3b:60:92:00:62:11:1e: c6:76:e4:fd:81:90:5e:8f:96:cf:b3:94:01:b8:d6: 6c:05:6c:a5:57:da:d9:6b:e6:a2:fe:dd:b0:95:0c: 2e:29:d4:72:85:ff:ad:a5:5f:8e:ad:e7:db:01:c7: 96:11:1e:bf:2e:11:c8:f1:ca:d9:a1:35:9e:57:fd: 66:64:0c:aa:5c:81:80:61:71:56:dc:33:a5:65:e1: f1:94:66:83:88:b4:51:cb:31:1b:70:ef:db:5f:73: 66:c6:37:ed:37:e1:df:3e:53:7b:32:ac:ff:32:8a: 86:be:63:4d:ee:b7:fe:42:b8:70:9d:51:ae:58:e5: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E5:C7:44:D0:F8:6C:E5:D4:E4:C8:92:77:77:59:18:17:7F:DD:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/3299068b-d57f-3607-b224-6b1548d188dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.crl X509v3 Authority Key Identifier: keyid:C8:6D:5B:B8:71:C8:22:C3:3A:11:D0:A0:6D:6E:E9:A1:0F:1E:0C:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7.cer sbgp-ipAddrBlock: critical IPv4: 199.7.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2e:81:cb:43:30:58:e9:ae:5f:c2:bc:0c:47:30:dc:10:da: 1d:35:49:c0:f1:c1:2c:bd:33:bf:f8:01:26:d4:a7:f7:fa:8c: 07:22:f4:31:04:cb:d8:d2:d9:b9:85:b4:e8:d8:8d:fb:20:4f: be:41:26:3f:2b:01:4d:5c:b0:f6:3d:49:e9:37:67:08:84:f0: cd:aa:78:40:4c:e5:3b:b0:97:35:1a:f8:bc:ac:34:99:e9:a6: 20:c0:18:15:d1:28:52:ef:84:ca:0c:38:4d:60:59:ca:ca:81: fd:a4:b9:8e:38:95:b6:9a:73:19:1c:95:65:54:cb:f8:2a:08: 3e:7f:83:50:c1:87:37:82:45:e4:ce:b6:36:57:9d:bd:be:e8: 5d:9d:5c:11:d9:97:5e:1f:60:13:e1:e4:3f:c7:8a:a9:b4:84: a7:41:85:cb:98:fb:55:53:03:5b:16:d3:c1:af:03:1b:db:13: 8e:51:e6:a9:94:13:08:7a:c4:b5:c9:a0:29:b5:74:ae:c6:37: 61:c3:91:8c:db:d3:eb:36:df:55:fa:1c:8c:b6:32:42:38:c0: 24:2d:d6:7f:02:d5:66:a5:6c:77:24:d7:17:c7:23:d8:66:20: 6d:d4:17:22:d3:9b:31:68:10:4a:32:b4:e7:a3:6a:0d:73:b7: f9:15:43:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0t6fhq35QjIAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTM5OTAwNjgtNTU1Yy00YTk5LWE0MjItMzAzZDNjYjA2 NGY3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGNiM2Q0NjQtNTI1Zi00YzJhLWE2MTAtMDQxMWVmOGJjNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UdZany6AhYECJfmE/iz7fcbj2Jj4AZ7rUC0 PoRwx2lfUatH/XHwa9IgUvjZOljCv8hoOh4kzyYeZlwsTq+2BGBitBgaPrRimjmz BOYit6Dc3S9l3KHb3kigH2Y/qHNIn37+cO2Dk6Ubbp+CqfH1qZlxlgbGSymjorXA EgbP3TtgkgBiER7GduT9gZBej5bPs5QBuNZsBWylV9rZa+ai/t2wlQwuKdRyhf+t pV+OrefbAceWER6/LhHI8crZoTWeV/1mZAyqXIGAYXFW3DOlZeHxlGaDiLRRyzEb cO/bX3NmxjftN+HfPlN7Mqz/MoqGvmNN7rf+QrhwnVGuWOXlVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvlx0TQ+Gzl1OTIknd3WRgXf93XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mzk5 MDA2OC01NTVjLTRhOTktYTQyMi0zMDNkM2NiMDY0ZjcvMzI5OTA2OGItZDU3Zi0z NjA3LWIyMjQtNmIxNTQ4ZDE4OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTM5OTAwNjgtNTU1Yy00YTk5LWE0 MjItMzAzZDNjYjA2NGY3LzUzOTkwMDY4LTU1NWMtNGE5OS1hNDIyLTMwM2QzY2Iw NjRmNy5jcmwwHwYDVR0jBBgwFoAUyG1buHHIIsM6EdCgbW7poQ8eDM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81Mzk5MDA2OC01NTVjLTRhOTktYTQyMi0zMDNk M2NiMDY0ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxweUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkugctDMFjprl/CvAxHMNwQ2h01ScDxwSy9M7/4ASbUp/f6jAci9DEE y9jS2bmFtOjYjfsgT75BJj8rAU1csPY9Sek3ZwiE8M2qeEBM5TuwlzUa+LysNJnp piDAGBXRKFLvhMoMOE1gWcrKgf2kuY44lbaacxkclWVUy/gqCD5/g1DBhzeCReTO tjZXnb2+6F2dXBHZl14fYBPh5D/Hiqm0hKdBhcuY+1VTA1sW08GvAxvbE45R5qmU Ewh6xLXJoCm1dK7GN2HDkYzb0+s231X6HIy2MkI4wCQt1n8C1WalbHck1xfHI9hm IG3UFyLTmzFoEEoytOejag1zt/kVQ6c= -----END CERTIFICATE-----Generated at Tue Sep 1 02:54:03 2026 by rpki-client