$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: a6qQAN3Vp3CQTRBm4M7rQpKYIqjUPM4/pnYlY50gfuU= Subject key identifier: 28:A9:64:B1:B2:43:0F:3D:FB:91:3B:63:6E:D9:2E:AE:7E:66:48:6F Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584EC371CB0A3F9D674570936100 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:cb:0a:3f:9d:67:45:70:93:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=8f7f024d-b5f6-4913-b884-b0d1d8438352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:72:7d:8f:e9:49:97:73:81:6c:59:3d:46: c5:45:6f:ba:9b:d4:74:5c:99:ba:f1:34:53:b7:97: 2d:3b:87:57:85:0b:51:b7:af:a2:66:5f:ff:48:fa: 3b:1c:89:f6:cc:4d:f8:d5:d8:e4:83:65:a3:5c:9d: 2a:0d:08:00:59:3b:34:90:6f:c1:52:7d:64:ac:bc: 9d:57:56:99:06:5e:de:82:e4:c2:92:34:cb:6b:8d: 79:45:55:34:99:d0:d1:89:3f:f8:33:5c:6d:b9:cf: 6b:23:4f:fc:e8:e9:f5:89:d5:8c:6e:f4:11:10:56: 3d:28:1c:83:0e:40:e7:ed:a5:10:d9:a1:96:7f:9e: d9:ec:9f:6e:4e:8b:1b:fd:34:62:24:fc:36:46:40: 5c:f7:ea:7e:56:c8:46:1e:26:2d:a8:7e:ec:98:9b: a5:1a:f1:d2:26:80:b9:9f:e4:6e:68:de:01:03:15: 67:e1:b8:89:28:5c:5f:30:93:2c:81:e8:2a:66:72: 89:1c:2b:98:af:cc:5e:7b:08:83:4c:f7:b0:52:cb: de:6b:1d:dd:2e:4f:23:92:8c:70:8a:29:93:ec:28: 30:13:cd:f7:6a:dd:3c:29:34:88:ca:ad:59:3e:bf: 8d:8d:15:83:36:8f:01:73:42:8c:ee:37:88:e7:70: c4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A9:64:B1:B2:43:0F:3D:FB:91:3B:63:6E:D9:2E:AE:7E:66:48:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:35:77:be:a8:aa:63:5c:bc:4a:c1:35:ca:f0:f6:f6:6c:6e: 46:fd:2e:99:99:d3:a5:2a:f4:28:fb:ed:f6:f1:fd:bf:55:14: 7a:9c:11:cb:af:e8:06:54:b1:67:cf:a0:fd:cd:cc:4a:3b:fb: ec:86:84:08:5d:21:0b:64:fc:c2:ac:70:72:9b:af:75:d7:98: ee:f2:15:ba:f5:c5:78:41:ca:88:56:ba:68:4c:a6:35:14:9e: 1d:a0:9a:2e:6b:a0:ec:91:6e:6d:e3:cf:3c:f3:58:a6:33:d4: fd:5d:8d:05:43:ed:25:19:08:9f:7b:cf:34:05:4e:d5:78:81: 9c:29:66:d2:cf:3b:6a:23:aa:fd:aa:52:2b:05:6a:f2:54:b6: 4b:0f:57:87:6c:80:52:b7:0c:38:a4:bc:77:33:47:d3:86:69: 85:1b:cb:0f:25:fc:57:b5:0a:c9:c0:30:ec:13:28:0d:bf:d9: 3c:56:11:72:5f:9f:05:71:1e:82:5e:ce:c8:2b:5e:53:94:89: 23:b8:e4:17:28:2d:ca:13:bb:f6:17:20:d7:b4:b4:f9:34:af: e4:82:79:15:09:7a:0d:47:e7:e9:ba:b0:47:9f:48:98:2c:55: bd:13:81:6e:21:af:14:84:a6:e4:4e:54:41:4f:26:f3:06:26: 54:4c:89:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccsKP51nRXCTYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk OGY3ZjAyNGQtYjVmNi00OTEzLWI4ODQtYjBkMWQ4NDM4MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugVyfY/pSZdzgWxZPUbFRW+6m9R0XJm68TRT t5ctO4dXhQtRt6+iZl//SPo7HIn2zE341djkg2WjXJ0qDQgAWTs0kG/BUn1krLyd V1aZBl7eguTCkjTLa415RVU0mdDRiT/4M1xtuc9rI0/86On1idWMbvQREFY9KByD DkDn7aUQ2aGWf57Z7J9uTosb/TRiJPw2RkBc9+p+VshGHiYtqH7smJulGvHSJoC5 n+RuaN4BAxVn4biJKFxfMJMsgegqZnKJHCuYr8xeewiDTPewUsveax3dLk8jkoxw iimT7CgwE833at08KTSIyq1ZPr+NjRWDNo8Bc0KM7jeI53DEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCipZLGyQw89+5E7Y27ZLq5+ZkhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK01d76oqmNcvErBNcrw9vZsbkb9LpmZ06Uq9Cj77fbx/b9VFHqcEcuv 6AZUsWfPoP3NzEo7++yGhAhdIQtk/MKscHKbr3XXmO7yFbr1xXhByohWumhMpjUU nh2gmi5roOyRbm3jzzzzWKYz1P1djQVD7SUZCJ97zzQFTtV4gZwpZtLPO2ojqv2q UisFavJUtksPV4dsgFK3DDikvHczR9OGaYUbyw8l/Fe1CsnAMOwTKA2/2TxWEXJf nwVxHoJezsgrXlOUiSO45BcoLcoTu/YXINe0tPk0r+SCeRUJeg1H5+m6sEefSJgs Vb0TgW4hrxSEpuROVEFPJvMGJlRMiYQ= -----END CERTIFICATE-----Generated at Thu Aug 27 04:53:32 2026 by rpki-client