$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa File: 4f545dde-b5f0-3c58-88f5-c42965201063.roa (raw, json) Hash identifier: q3bIBLmKja/bhPBvXeqKCyRjNaBw2zs28HVMxrJ/VOk= Subject key identifier: B5:AB:3C:0F:15:E6:FE:5E:DC:C8:51:01:9D:84:91:62:76:FF:AA:F1 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584E9BE509E493671F3626EF0D00 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 4809 IP address blocks: 199.114.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:09:e4:93:67:1f:36:26:ef:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=a6e4ae49-87a9-4007-8f2a-97c1797bd3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:3d:48:db:d2:b2:50:5b:96:ec:92:20:e5: 62:c0:f9:04:3d:96:2b:d4:af:a1:94:9a:8e:59:91: d7:2d:1c:2b:89:d5:d8:4c:00:b9:b0:91:e2:bf:48: 1c:b5:4e:34:7f:57:b1:d0:16:08:d3:84:00:ef:ab: 46:93:e2:dc:3c:23:db:35:40:ec:b3:86:0c:4c:7a: 9f:07:06:62:18:35:63:71:a8:fb:48:87:7a:69:34: 9b:25:ad:cf:95:00:d3:2e:d9:cb:f4:f3:88:2b:ab: 8c:e7:55:b7:fc:75:40:61:01:e6:7b:28:12:63:20: af:6d:13:48:4e:2b:53:19:94:6f:67:0c:0b:6e:7f: 34:d7:75:59:b7:50:3a:2f:a4:09:bd:d2:f7:71:fa: 8f:02:10:d6:5a:bb:05:78:1b:ea:64:ea:0c:1f:4d: bf:0a:e7:3f:ab:28:2c:76:31:e7:a1:2b:ad:ff:25: 48:e0:a0:bc:34:e9:5c:1f:3d:18:8f:6e:95:ec:21: ac:5f:28:85:3b:b0:72:18:94:8d:29:a3:d6:de:fc: 00:eb:ea:b8:50:e2:fa:cc:29:83:ae:92:43:3b:ab: 32:6f:0b:ae:79:d0:2d:7d:de:f1:ac:7e:81:59:6d: 42:7a:9c:61:2c:df:2b:06:78:12:ec:ac:34:01:75: 80:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AB:3C:0F:15:E6:FE:5E:DC:C8:51:01:9D:84:91:62:76:FF:AA:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 199.114.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0e:a2:67:ce:03:30:79:cf:32:ac:98:9d:c0:a0:8e:10:f4: ba:dd:ec:1f:7d:84:b5:f9:a2:f1:f0:fb:a4:2d:09:8f:05:c1: 44:93:d5:01:f9:f9:b9:f5:14:7d:29:45:d5:9c:b3:de:0f:05: 14:ce:9d:59:df:51:c6:9c:5e:d1:da:2c:b1:81:27:4e:8e:05: 3c:9b:01:7c:90:e2:12:ff:29:5a:87:f7:15:13:d3:6a:b5:d6: 32:50:78:9c:26:a6:ec:30:1b:94:73:f6:b4:48:68:ad:8d:64: c4:4b:53:7b:08:bd:6f:fe:42:ae:24:83:05:46:64:6a:0c:0d: f6:6a:95:0f:54:55:3e:43:af:c2:0e:01:ab:3c:3d:17:a7:0d: a9:91:d6:0b:10:60:94:0c:6d:76:35:99:e6:da:47:b9:81:6c: 80:ad:74:d1:e0:3c:73:74:3d:14:78:78:25:ab:90:b5:0d:14: c0:aa:a3:4e:09:45:7a:62:8e:9b:22:09:fc:e2:c1:e3:1d:94: 26:15:c3:4d:1e:97:a5:46:cc:4c:1f:bf:ec:46:ac:17:90:f7: 36:1d:87:96:df:63:fa:50:5d:48:b7:0a:46:9a:5f:b0:14:18: f8:9f:60:46:66:ae:b0:ea:3b:3c:c0:d4:46:b8:f0:1e:ab:20: f5:04:15:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Qnkk2cfNibvDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YTZlNGFlNDktODdhOS00MDA3LThmMmEtOTdjMTc5N2JkM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyk9SNvSslBbluySIOViwPkEPZYr1K+hlJqO WZHXLRwridXYTAC5sJHiv0gctU40f1ex0BYI04QA76tGk+LcPCPbNUDss4YMTHqf BwZiGDVjcaj7SId6aTSbJa3PlQDTLtnL9POIK6uM51W3/HVAYQHmeygSYyCvbRNI TitTGZRvZwwLbn8013VZt1A6L6QJvdL3cfqPAhDWWrsFeBvqZOoMH02/Cuc/qygs djHnoSut/yVI4KC8NOlcHz0Yj26V7CGsXyiFO7ByGJSNKaPW3vwA6+q4UOL6zCmD rpJDO6sybwuuedAtfd7xrH6BWW1CepxhLN8rBngS7Kw0AXWAhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWrPA8V5v5e3MhRAZ2EkWJ2/6rxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvNGY1NDVkZGUtYjVmMC0z YzU4LTg4ZjUtYzQyOTY1MjAxMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4OomfOAzB5zzKsmJ3AoI4Q9Lrd7B99hLX5ovHw+6QtCY8FwUST1QH5 +bn1FH0pRdWcs94PBRTOnVnfUcacXtHaLLGBJ06OBTybAXyQ4hL/KVqH9xUT02q1 1jJQeJwmpuwwG5Rz9rRIaK2NZMRLU3sIvW/+Qq4kgwVGZGoMDfZqlQ9UVT5Dr8IO Aas8PRenDamR1gsQYJQMbXY1mebaR7mBbICtdNHgPHN0PRR4eCWrkLUNFMCqo04J RXpijpsiCfziweMdlCYVw00el6VGzEwfv+xGrBeQ9zYdh5bfY/pQXUi3CkaaX7AU GPifYEZmrrDqOzzA1Ea48B6rIPUEFaQ= -----END CERTIFICATE-----Generated at Mon Jul 27 10:29:37 2026 by rpki-client