$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa File: ce3942cf-da09-348f-8f5b-ea408d9b3772.roa (raw, json) Hash identifier: dWRNCynShL6Vele6NsiiLgN82z5rTYu3BymZfu+/VSk= Subject key identifier: 1F:77:C9:E7:C4:FA:7C:45:D7:19:42:DF:B6:64:19:B2:4E:A0:88:FA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EA792B9D4C6E17400F55D5200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12008 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:b9:d4:c6:e1:74:00:f5:5d:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e37483e8-2601-4e17-b079-be3239ecbe30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:ee:49:15:df:34:6d:d1:9d:eb:32:19:7d: 11:7b:9c:0e:03:e6:5e:b6:e3:a8:8e:4f:35:05:e8: a3:e2:fb:3c:4c:ad:63:45:c1:b3:1b:7c:8d:f0:fd: b3:b5:ff:bd:3e:d5:6a:89:15:e6:00:82:13:c6:bb: 05:4f:70:82:0f:27:ef:18:21:a4:e9:68:c1:4b:f0: b3:1d:62:79:82:f4:a8:04:ea:fc:e9:ec:e0:7c:16: 5c:81:8d:cb:07:2b:3c:6d:9d:eb:c1:56:48:ff:92: 25:33:4f:e5:da:b9:83:6c:e7:90:0e:3f:87:d4:8c: 0b:06:cd:2d:70:68:b6:b2:d5:c8:db:b8:75:c4:fa: cf:42:a6:e4:fd:c7:0e:b8:f6:74:2c:56:f2:e0:73: 1e:38:fb:18:fa:19:3d:0c:10:5e:c4:8c:91:5d:74: c6:c0:73:ad:d0:cf:a6:25:be:d9:41:59:3f:63:df: f5:7f:09:18:a1:43:dc:24:9c:a1:cd:7a:29:46:56: 34:06:de:ba:28:30:1f:73:c5:ec:fa:53:12:46:73: a6:45:f0:18:e1:77:5b:4e:ff:75:9f:bb:af:de:a3: 3e:6b:9f:24:9e:24:df:49:e2:d0:3b:65:00:fd:bf: 20:07:3c:70:7a:9c:1a:7b:c2:ed:9d:07:e8:e2:01: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:C9:E7:C4:FA:7C:45:D7:19:42:DF:B6:64:19:B2:4E:A0:88:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce3942cf-da09-348f-8f5b-ea408d9b3772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f3:81:f2:74:20:47:da:1f:9b:10:f9:17:81:2e:d2:93:e8: 5d:bf:4d:94:f8:bf:0d:0d:4d:2a:d5:16:ab:1e:51:c6:23:92: 2f:6b:e5:e2:f6:98:4d:6c:23:6e:24:c0:fa:6e:79:9e:0c:f2: 9c:d8:85:d9:a4:64:7d:ec:e0:d2:cb:92:45:a5:c8:a2:bc:dc: 88:2d:e9:22:41:14:4c:c9:db:1c:08:0c:bb:69:bc:46:fa:4d: 5f:e0:f3:3b:40:8a:4f:15:3e:26:9a:7c:52:fd:e0:f1:56:c1: 3e:12:ae:cf:50:dd:42:b3:7e:f0:85:7b:49:62:df:71:83:cd: 72:13:29:94:28:b8:26:4b:fc:4e:b6:aa:fb:e0:42:54:7f:3a: b9:1f:25:63:db:c2:d2:8a:ce:8a:32:34:1b:f9:f6:3a:a4:51: 57:c4:42:9b:af:02:8d:9f:46:0c:eb:a1:91:39:27:c4:f5:0c: 92:8e:ac:55:09:d6:a8:39:31:7f:d7:c7:62:98:0a:ff:fc:d7: ef:eb:1f:5b:85:d3:07:f0:dc:90:44:a3:39:91:39:19:58:a3: b8:64:9e:8a:aa:9b:53:b4:32:ff:92:fb:98:3f:3b:4d:41:c2: 47:c3:b3:06:93:d2:3b:32:1d:a3:88:a4:31:28:c7:8d:5d:fe: 43:d3:cb:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkrnUxuF0APVdUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTM3NDgzZTgtMjYwMS00ZTE3LWIwNzktYmUzMjM5ZWNiZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS3uSRXfNG3RnesyGX0Re5wOA+ZetuOojk81 Beij4vs8TK1jRcGzG3yN8P2ztf+9PtVqiRXmAIITxrsFT3CCDyfvGCGk6WjBS/Cz HWJ5gvSoBOr86ezgfBZcgY3LBys8bZ3rwVZI/5IlM0/l2rmDbOeQDj+H1IwLBs0t cGi2stXI27h1xPrPQqbk/ccOuPZ0LFby4HMeOPsY+hk9DBBexIyRXXTGwHOt0M+m Jb7ZQVk/Y9/1fwkYoUPcJJyhzXopRlY0Bt66KDAfc8Xs+lMSRnOmRfAY4XdbTv91 n7uv3qM+a58kniTfSeLQO2UA/b8gBzxwepwae8LtnQfo4gHcAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB93yefE+nxF1xlC37ZkGbJOoIj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2UzOTQyY2YtZGEwOS0z NDhmLThmNWItZWE0MDhkOWIzNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPzgfJ0IEfaH5sQ+ReBLtKT6F2/TZT4vw0NTSrVFqseUcYjki9r5eL2 mE1sI24kwPpueZ4M8pzYhdmkZH3s4NLLkkWlyKK83Igt6SJBFEzJ2xwIDLtpvEb6 TV/g8ztAik8VPiaafFL94PFWwT4Srs9Q3UKzfvCFe0li33GDzXITKZQouCZL/E62 qvvgQlR/OrkfJWPbwtKKzooyNBv59jqkUVfEQpuvAo2fRgzroZE5J8T1DJKOrFUJ 1qg5MX/Xx2KYCv/81+/rH1uF0wfw3JBEozmRORlYo7hknoqqm1O0Mv+S+5g/O01B wkfDswaT0jsyHaOIpDEox41d/kPTy5w= -----END CERTIFICATE-----Generated at Thu Sep 10 17:33:05 2026 by rpki-client