$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa File: d0fcc039-2f32-343e-aa66-e2094066ddfc.roa (raw, json) Hash identifier: GilO7j69SRD6gXE1orXiE97zo06DvLzh6lDeycq7sZE= Subject key identifier: FB:85:9A:29:2E:B0:84:4E:CE:2A:F0:FE:92:95:4D:89:6D:20:9F:30 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584E2AD45B61A5CE7995A3E04700 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 394353 IP address blocks: 199.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:5b:61:a5:ce:79:95:a3:e0:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=28fa3223-f431-455e-ae31-101bb65ce3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:f2:4a:6d:74:67:c8:0c:a5:14:68:2f:18: 21:4d:d5:e7:75:3f:c1:aa:2d:70:1e:35:02:ac:a9: 79:a1:e9:a8:e3:b4:80:a5:7a:13:f5:69:c6:86:35: a6:c2:e6:72:9b:c3:c1:5d:70:64:da:84:4f:e0:e8: 32:6d:a3:38:7e:13:c3:67:a6:6a:30:fd:40:dc:44: ac:ed:7f:e1:d5:76:fd:a5:3b:6c:35:d7:8d:f8:0c: dc:e4:55:68:3d:93:8e:f4:b2:73:60:5b:f6:66:5f: 77:6b:b0:db:64:b1:3d:d5:18:bb:80:9b:16:66:f0: d9:34:55:f7:80:54:f3:bf:1e:3a:de:99:91:a6:8c: 4a:18:cb:84:86:ac:d3:56:21:3c:2a:7e:f0:20:5c: c0:79:fe:b3:94:36:f9:e4:b9:5f:f2:0e:ba:a8:57: 14:f5:86:0a:cb:9c:66:85:f4:16:00:c1:00:56:c0: fb:2b:60:58:fb:d0:7e:f2:f1:38:11:c2:d2:91:1b: 64:af:d0:5b:f8:52:ac:2f:7c:60:79:e5:05:52:28: 22:05:ff:d5:7e:0d:e5:54:02:27:dd:37:3a:29:42: c9:b0:52:2b:e0:2d:d6:4e:ce:53:67:26:4e:2b:f1: b0:7e:c3:f9:d8:45:06:3e:61:23:f1:52:b9:a6:88: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:9A:29:2E:B0:84:4E:CE:2A:F0:FE:92:95:4D:89:6D:20:9F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f1:91:50:bf:a1:58:2f:67:9f:94:b7:17:11:7b:04:af:65: b6:44:47:5b:9c:b2:f0:55:1a:24:86:d3:2e:e7:6e:d2:b7:90: b9:1a:10:bb:79:ce:28:06:a6:cb:51:2b:d9:89:fa:02:ff:6a: 1e:0e:a5:ab:ef:2e:13:61:8e:d9:69:9e:e4:8e:ae:29:7d:e6: 59:d6:e0:58:32:99:10:64:ef:81:bc:59:6a:b4:e4:15:60:d8: 8d:c5:15:5c:c2:f2:9e:79:1a:cd:73:d9:4c:89:40:0c:36:8f: 5c:7b:9f:d8:79:70:ca:ea:f0:3a:b4:a2:10:94:cc:d9:7d:f0: 5c:23:44:a7:8e:f2:80:95:ed:93:ef:25:81:cc:16:8d:4b:d7: 0e:22:56:8e:25:23:50:47:0f:43:0c:09:4b:18:15:38:a6:cd: 2a:a6:2f:66:26:83:15:c9:d7:24:15:71:0f:a7:34:61:55:a0: 56:f3:d1:57:f8:33:26:59:1e:01:32:d7:32:7d:10:2f:73:82: 79:83:74:0d:59:2e:5d:89:f8:67:5b:e1:6e:0a:f2:30:89:61: 39:2c:2f:0a:b1:74:16:59:fe:2a:3c:a0:1c:42:54:3b:a8:82: 37:68:b8:ad:ad:7e:f8:e5:4e:9d:5b:ae:dd:a4:31:03:18:1f: c8:07:2f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1Fthpc55laPgRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk MjhmYTMyMjMtZjQzMS00NTVlLWFlMzEtMTAxYmI2NWNlM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz/ySm10Z8gMpRRoLxghTdXndT/Bqi1wHjUC rKl5oemo47SApXoT9WnGhjWmwuZym8PBXXBk2oRP4OgybaM4fhPDZ6ZqMP1A3ESs 7X/h1Xb9pTtsNdeN+Azc5FVoPZOO9LJzYFv2Zl93a7DbZLE91Ri7gJsWZvDZNFX3 gFTzvx463pmRpoxKGMuEhqzTViE8Kn7wIFzAef6zlDb55Llf8g66qFcU9YYKy5xm hfQWAMEAVsD7K2BY+9B+8vE4EcLSkRtkr9Bb+FKsL3xgeeUFUigiBf/Vfg3lVAIn 3Tc6KULJsFIr4C3WTs5TZyZOK/GwfsP52EUGPmEj8VK5pog0BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuFmikusIROzirw/pKVTYltIJ8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZDBmY2MwMzktMmYzMi0z NDNlLWFhNjYtZTIwOTQwNjZkZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXxkVC/oVgvZ5+UtxcRewSvZbZER1ucsvBVGiSG0y7nbtK3kLkaELt5 zigGpstRK9mJ+gL/ah4OpavvLhNhjtlpnuSOril95lnW4FgymRBk74G8WWq05BVg 2I3FFVzC8p55Gs1z2UyJQAw2j1x7n9h5cMrq8Dq0ohCUzNl98FwjRKeO8oCV7ZPv JYHMFo1L1w4iVo4lI1BHD0MMCUsYFTimzSqmL2YmgxXJ1yQVcQ+nNGFVoFbz0Vf4 MyZZHgEy1zJ9EC9zgnmDdA1ZLl2J+Gdb4W4K8jCJYTksLwqxdBZZ/io8oBxCVDuo gjdouK2tfvjlTp1brt2kMQMYH8gHLxg= -----END CERTIFICATE-----Generated at Tue Jul 14 11:54:31 2026 by rpki-client