$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa File: 2f1823ea-88a6-3688-8d20-3d497228f9cc.roa (raw, json) Hash identifier: ci0Mo1DcWRq25AwTTg95b14Y+jwkSnlN6b8wa0PI6Hg= Subject key identifier: 0A:B1:1D:A8:CA:6B:51:D2:58:51:9D:BB:B5:24:90:59:56:39:BE:E4 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584EA7882A387B3FE88D9E706800 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40342 IP address blocks: 199.47.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:2a:38:7b:3f:e8:8d:9e:70:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9fdce956-e0c3-4319-878d-93e6a7b75b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:13:c4:51:8f:a5:c8:4f:85:bf:b0:77:89: 65:74:5b:7e:79:94:af:46:d6:62:30:cf:f6:ae:47: 3d:6e:86:c0:f6:27:e6:4d:f9:e0:3d:87:62:e8:40: 7a:9c:2a:7f:52:5a:99:a2:be:e7:00:08:cf:32:8d: dc:55:5b:b0:1e:78:df:42:9a:02:34:3c:6c:c5:4f: ba:7e:38:92:c9:6e:ce:83:c3:b5:d7:90:57:e5:57: 9f:a9:04:ad:88:f9:f1:39:9e:b9:ce:0e:80:37:49: ad:f3:65:ab:2d:a6:a6:f6:cf:4b:c1:1e:40:33:b5: f3:ad:f2:b8:f5:81:76:c0:57:73:60:7e:31:fb:0e: 55:50:d0:e2:df:8a:8a:d4:b3:86:89:83:2b:d2:48: d3:e8:d9:71:8d:cc:72:08:e3:29:10:e8:46:f7:f5: 2f:97:e2:f0:95:02:1f:a4:94:58:1d:50:c1:84:1d: 2b:3d:5c:d2:ed:3a:c0:5d:41:b1:dd:d8:52:5b:e3: 0f:f5:be:4e:94:1d:5b:04:38:6b:59:33:7e:2a:c8: 8d:ab:1d:19:a4:46:dc:7b:fc:78:20:de:6a:fc:e1: a8:bb:42:11:55:e9:97:f4:f8:bb:09:59:37:53:bf: 3f:d7:0f:5c:b5:42:2b:86:45:13:30:b7:49:72:59: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:1D:A8:CA:6B:51:D2:58:51:9D:BB:B5:24:90:59:56:39:BE:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b0:e2:f3:13:33:03:7e:3a:b4:7a:7a:7f:78:23:b5:24:6c: 8a:a5:b6:27:ed:1b:2a:42:6f:7f:cf:80:33:6c:01:8b:08:ed: 6a:6f:fd:c7:84:8f:30:72:f2:36:d3:98:32:14:1e:f2:c0:d8: d4:05:6d:dc:cb:ae:9c:8b:05:9c:3a:5d:8b:08:97:15:1a:74: db:ab:ff:ac:ca:5d:92:85:0c:ed:a5:da:c1:22:97:c0:13:3d: 34:0e:f4:8d:a0:7d:7c:e9:8e:df:24:a8:a6:7b:0b:71:ce:3c: 7f:1b:2e:c0:37:7e:07:e9:e5:78:4b:da:df:4f:82:72:04:05: 9f:31:2c:0f:bc:14:ec:23:0f:5b:2a:e3:33:c6:b3:09:22:80: 4b:9d:0b:99:3e:95:56:46:6c:0d:97:12:5c:47:a5:9e:c1:20: 2a:e6:55:fc:e3:f3:67:d0:16:cb:42:7f:37:e6:a9:e4:49:cc: 1b:30:1d:1a:7a:fa:d5:fa:db:94:f4:f7:5e:83:8f:bf:05:1c: e0:11:f7:e0:50:9f:b9:56:9e:3e:64:f5:a5:18:db:3b:d2:e9: 13:cb:02:fb:21:1e:72:12:4f:3f:cd:6a:40:1a:a6:81:cf:0e: b3:e8:4f:f7:6d:92:2c:8c:2c:62:08:ce:ed:5b:44:c3:2e:c5: 62:57:51:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCo4ez/ojZ5waAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWZkY2U5NTYtZTBjMy00MzE5LTg3OGQtOTNlNmE3Yjc1YjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu8TxFGPpchPhb+wd4lldFt+eZSvRtZiMM/2 rkc9bobA9ifmTfngPYdi6EB6nCp/UlqZor7nAAjPMo3cVVuwHnjfQpoCNDxsxU+6 fjiSyW7Og8O115BX5VefqQStiPnxOZ65zg6AN0mt82WrLaam9s9LwR5AM7XzrfK4 9YF2wFdzYH4x+w5VUNDi34qK1LOGiYMr0kjT6NlxjcxyCOMpEOhG9/Uvl+LwlQIf pJRYHVDBhB0rPVzS7TrAXUGx3dhSW+MP9b5OlB1bBDhrWTN+KsiNqx0ZpEbce/x4 IN5q/OGou0IRVemX9Pi7CVk3U78/1w9ctUIrhkUTMLdJclm8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqxHajKa1HSWFGdu7UkkFlWOb7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMmYxODIzZWEtODhhNi0z Njg4LThkMjAtM2Q0OTcyMjhmOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSw4vMTMwN+OrR6en94I7UkbIqltiftGypCb3/PgDNsAYsI7Wpv/ceE jzBy8jbTmDIUHvLA2NQFbdzLrpyLBZw6XYsIlxUadNur/6zKXZKFDO2l2sEil8AT PTQO9I2gfXzpjt8kqKZ7C3HOPH8bLsA3fgfp5XhL2t9PgnIEBZ8xLA+8FOwjD1sq 4zPGswkigEudC5k+lVZGbA2XElxHpZ7BICrmVfzj82fQFstCfzfmqeRJzBswHRp6 +tX625T0916Dj78FHOAR9+BQn7lWnj5k9aUY2zvS6RPLAvshHnISTz/NakAapoHP DrPoT/dtkiyMLGIIzu1bRMMuxWJXUcU= -----END CERTIFICATE-----Generated at Fri Aug 21 02:01:39 2026 by rpki-client