$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa File: 5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa (raw, json) Hash identifier: JUfJ9Ho0+3o+JR4+805u0QAtkihNSjYZyDOMgYpVVtI= Subject key identifier: D9:4F:22:BC:80:F2:9D:89:6D:B6:02:DF:4E:0C:ED:33:E7:26:9A:18 Certificate issuer: /CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5 Certificate serial: 010D0C9F4328584ECBD1E629A118D0DB99EFE9C0 Authority key identifier: 36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 46920 IP address blocks: 199.229.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e6:29:a1:18:d0:db:99:ef:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=67c307c8-7f6d-43ed-b655-743067015f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0b:0e:f1:6a:73:4b:7c:68:78:fa:83:a6:bf: 58:a4:2f:f3:62:ca:68:4e:ee:30:48:54:b1:28:43: 4c:e5:d5:8a:78:0c:0f:6e:73:ec:51:42:81:40:41: a7:d3:ce:61:28:84:e7:b4:73:25:28:38:6a:08:2e: 35:cd:68:46:fa:7c:58:a2:bc:e3:e2:a7:d5:56:d6: 04:10:15:ef:48:b9:02:87:dd:8c:a8:6b:97:ed:0b: f2:d4:b4:26:87:2d:dc:d9:5f:1a:30:e8:2b:1e:f3: e4:dc:a4:95:37:b2:e8:ff:f8:8d:e3:ed:9f:96:30: 33:cd:ed:38:5c:72:25:c5:ef:9d:23:2b:4a:a2:be: e8:bc:ac:f9:6d:c3:c6:a4:1a:47:91:10:25:03:f6: 8e:22:9e:96:71:31:1e:bf:c0:c2:23:26:42:d5:5c: 40:9f:14:8a:13:b7:35:56:0e:cf:7b:c5:a0:c1:a0: ba:59:6c:f8:a1:8c:e8:19:56:ee:e1:cd:c9:38:4e: 81:ba:ae:76:a3:5b:78:ad:fc:84:11:9c:a9:2a:96: 6c:ea:db:e9:77:37:7d:aa:f5:2a:bc:3b:a1:e2:48: ea:33:5e:d9:9b:99:7a:47:90:11:79:fa:98:71:b9: d9:cd:4c:18:30:97:c9:48:9a:94:17:7d:2b:ef:96: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4F:22:BC:80:F2:9D:89:6D:B6:02:DF:4E:0C:ED:33:E7:26:9A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/5d4bfb3c-1fc7-3ec2-a7c6-a6154134294f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl X509v3 Authority Key Identifier: keyid:36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer sbgp-ipAddrBlock: critical IPv4: 199.229.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c7:57:10:11:de:c0:06:bf:a6:4c:1c:92:88:83:21:1a:75: f7:93:c8:86:9f:c8:f1:78:9c:b0:40:6e:ad:5f:3e:78:98:47: 7b:a9:7f:5b:ee:a0:89:25:3d:a9:f7:2e:93:0c:7c:4a:de:52: b0:48:41:36:ba:31:ac:e9:d0:03:8b:e8:b6:01:83:81:f5:59: 68:9f:c8:ba:9f:68:2b:cf:2a:d2:7d:8b:50:fc:8b:b0:b5:17: b5:dd:db:23:b4:d3:95:65:7f:18:2d:90:16:d2:e8:3d:b0:dd: 39:20:cb:d8:4b:dc:ae:f4:b3:18:9e:55:79:5a:78:93:b6:0b: 5c:22:a4:f2:b9:29:1a:15:e5:12:07:cc:76:28:81:e7:fc:42: 45:7b:e2:bc:9d:df:d0:08:16:92:fc:51:14:8b:76:8d:c7:3d: b2:b8:de:d3:96:92:ca:a1:64:ed:56:0c:11:cf:47:53:08:31: 71:5b:25:3f:b8:8c:c3:36:6d:b4:1d:97:3a:e6:67:ad:6d:ae: 86:9f:b5:7a:15:da:9e:d6:e3:54:a8:84:50:82:c5:61:12:f5: c6:bc:3b:17:1c:b5:da:e7:54:9a:ec:04:1b:bf:bb:a6:95:38: f1:a4:d4:b7:35:a8:29:0b:ea:8d:44:dd:4f:5e:4d:b0:ec:00: 64:94:71:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eYpoRjQ25nv6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3MmE4MmYtZWI1Mi00NGJmLWIzOGYtZjA5ZmMzMTNk N2Q1MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NjdjMzA3YzgtN2Y2ZC00M2VkLWI2NTUtNzQzMDY3MDE1ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gsO8WpzS3xoePqDpr9YpC/zYspoTu4wSFSx KENM5dWKeAwPbnPsUUKBQEGn085hKITntHMlKDhqCC41zWhG+nxYorzj4qfVVtYE EBXvSLkCh92MqGuX7Qvy1LQmhy3c2V8aMOgrHvPk3KSVN7Lo//iN4+2fljAzze04 XHIlxe+dIytKor7ovKz5bcPGpBpHkRAlA/aOIp6WcTEev8DCIyZC1VxAnxSKE7c1 Vg7Pe8WgwaC6WWz4oYzoGVbu4c3JOE6Buq52o1t4rfyEEZypKpZs6tvpdzd9qvUq vDuh4kjqM17Zm5l6R5ARefqYcbnZzUwYMJfJSJqUF30r75a8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlPIryA8p2JbbYC304M7TPnJpoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83Njcy YTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlmYzMxM2Q3ZDUvNWQ0YmZiM2MtMWZjNy0z ZWMyLWE3YzYtYTYxNTQxMzQyOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzY3MmE4MmYtZWI1Mi00NGJmLWIz OGYtZjA5ZmMzMTNkN2Q1Lzc2NzJhODJmLWViNTItNDRiZi1iMzhmLWYwOWZjMzEz ZDdkNS5jcmwwHwYDVR0jBBgwFoAUNhNWEeaY5tisTL3f8+7a+xmsbQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83NjcyYTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlm YzMxM2Q3ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPHVxAR3sAGv6ZMHJKIgyEadfeTyIafyPF4nLBAbq1fPniYR3upf1vu oIklPan3LpMMfEreUrBIQTa6Mazp0AOL6LYBg4H1WWifyLqfaCvPKtJ9i1D8i7C1 F7Xd2yO005VlfxgtkBbS6D2w3Tkgy9hL3K70sxieVXlaeJO2C1wipPK5KRoV5RIH zHYogef8QkV74ryd39AIFpL8URSLdo3HPbK43tOWksqhZO1WDBHPR1MIMXFbJT+4 jMM2bbQdlzrmZ61troaftXoV2p7W41SohFCCxWES9ca8OxcctdrnVJrsBBu/u6aV OPGk1Lc1qCkL6o1E3U9eTbDsAGSUcaQ= -----END CERTIFICATE-----Generated at Mon Aug 31 10:24:16 2026 by rpki-client