$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa File: 71d6f9d1-e76d-3468-8445-02e48e603140.roa (raw, json) Hash identifier: vQdaDRLHeorEvME9Cgr1dgEXFu6VgtctuVbfJLBlPb8= Subject key identifier: AE:4A:CE:35:3F:C5:96:40:71:1E:86:F3:84:6F:88:CD:CE:C1:10:56 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584E6CF8DE64FB51B6DC8E97CD70 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa Signing time: Wed 08 Jul 2026 01:37:15 +0000 ROA not before: Wed 08 Jul 2026 01:37:15 +0000 ROA not after: Fri 14 Aug 2026 23:04:24 +0000 asID: 1299 IP address blocks: 199.101.158.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:f8:de:64:fb:51:b6:dc:8e:97:cd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Jul 8 01:37:15 2026 GMT Not After : Aug 14 23:04:24 2026 GMT Subject: CN=d95211f2-5b91-4cd3-a1d8-281f07ab5c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:96:92:ba:5e:3a:eb:24:3f:0d:bb:b3:c8:90: fb:b5:9f:ed:af:11:c9:47:d5:8d:ff:5c:dd:c4:63: 2c:3f:f5:77:b5:74:e8:58:7f:37:2e:6d:c9:2e:99: dd:63:90:4e:38:2b:c7:a6:f4:fc:0d:92:a4:1e:33: de:02:6b:bb:57:ec:cf:a6:f6:b6:7b:32:1b:42:0e: 4b:b4:fe:fc:e2:ab:17:06:1e:35:eb:aa:6c:d8:73: 67:0b:de:f7:b5:9f:9c:43:54:2a:95:53:57:25:e8: f0:3d:6a:f5:12:cb:83:ea:a6:87:45:37:4c:d4:d9: 88:2c:95:97:e9:a8:66:dd:48:e6:1a:54:44:b6:ee: cb:71:b4:4c:41:ea:76:54:0d:2c:b0:b2:85:1e:ba: 88:f5:75:55:ee:e4:1c:8c:de:b3:ef:66:99:87:3f: 37:32:94:7b:e7:d4:da:8d:be:e6:1f:be:a3:76:01: f3:e2:86:be:ac:3d:d8:58:1d:22:d9:73:d2:d7:dc: 96:54:67:e2:f6:a6:25:58:24:c5:96:6f:ae:c7:4d: 8f:5a:6a:ca:bf:5c:af:18:21:a8:91:ed:18:39:ea: ad:53:94:9a:dd:7f:09:07:dd:4f:50:8c:d4:87:b2: 79:19:14:ed:22:76:e3:27:4d:f9:82:92:c7:80:34: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4A:CE:35:3F:C5:96:40:71:1E:86:F3:84:6F:88:CD:CE:C1:10:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:48:f3:3b:34:eb:26:47:7e:78:30:48:f5:a2:7c:26:1b:77: 53:28:8c:01:77:74:ee:fe:65:d8:2a:30:f8:33:e3:39:be:5c: 9d:6c:a1:2f:f4:24:5d:78:01:a4:c0:12:f0:2b:5e:24:76:06: 28:98:66:4b:b9:63:97:91:72:25:f9:6d:37:ea:3d:82:c5:dd: 81:f4:45:58:ff:c6:ed:db:b9:4e:14:29:b6:b5:98:92:50:1f: 32:46:88:7c:a2:10:c9:6d:72:7b:4d:59:a5:95:24:10:e7:3a: 47:d6:89:49:fb:93:b6:45:f3:f1:11:91:bd:47:c1:05:f5:83: 95:12:b0:d7:3d:a1:f4:f6:fb:26:27:88:c2:8e:94:98:6a:11: 9b:15:3a:26:04:59:88:2f:92:59:4b:24:4d:4c:bf:68:64:2a: 01:ac:a1:b4:85:cb:0d:93:06:83:02:44:4c:e6:62:02:82:1e: 3f:b8:ae:52:07:ae:71:a1:55:c8:a1:bf:48:19:aa:26:1a:cb: e7:3a:4b:76:df:68:a3:84:ae:dc:54:83:4b:de:a1:5c:47:9f: da:e2:78:73:d1:d5:14:b1:62:d9:d9:9c:fb:ab:2b:ab:22:6a: 88:4e:ff:18:12:e1:10:db:46:d4:e6:bf:72:59:7a:44:22:ad: 53:1c:a5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5s+N5k+1G23I6XzXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDcwODAxMzcxNVoXDTI2MDgxNDIzMDQyNFowLzEtMCsGA1UEAxMk ZDk1MjExZjItNWI5MS00Y2QzLWExZDgtMjgxZjA3YWI1YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4paSul466yQ/DbuzyJD7tZ/trxHJR9WN/1zd xGMsP/V3tXToWH83Lm3JLpndY5BOOCvHpvT8DZKkHjPeAmu7V+zPpva2ezIbQg5L tP784qsXBh4166ps2HNnC973tZ+cQ1QqlVNXJejwPWr1EsuD6qaHRTdM1NmILJWX 6ahm3UjmGlREtu7LcbRMQep2VA0ssLKFHrqI9XVV7uQcjN6z72aZhz83MpR759Ta jb7mH76jdgHz4oa+rD3YWB0i2XPS19yWVGfi9qYlWCTFlm+ux02PWmrKv1yvGCGo ke0YOeqtU5Sa3X8JB91PUIzUh7J5GRTtInbjJ035gpLHgDSsHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5KzjU/xZZAcR6G84RviM3OwRBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvNzFkNmY5ZDEtZTc2ZC0z NDY4LTg0NDUtMDJlNDhlNjAzMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlI8zs06yZHfngwSPWifCYbd1MojAF3dO7+ZdgqMPgz4zm+XJ1soS/0 JF14AaTAEvArXiR2BiiYZku5Y5eRciX5bTfqPYLF3YH0RVj/xu3buU4UKba1mJJQ HzJGiHyiEMltcntNWaWVJBDnOkfWiUn7k7ZF8/ERkb1HwQX1g5USsNc9ofT2+yYn iMKOlJhqEZsVOiYEWYgvkllLJE1Mv2hkKgGsobSFyw2TBoMCREzmYgKCHj+4rlIH rnGhVcihv0gZqiYay+c6S3bfaKOErtxUg0veoVxHn9rieHPR1RSxYtnZnPurK6si aohO/xgS4RDbRtTmv3JZekQirVMcpXM= -----END CERTIFICATE-----Generated at Tue Jul 21 14:03:43 2026 by rpki-client