$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa File: aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa (raw, json) Hash identifier: 13cJoZn8RwsfBAofi9hCxLeY2l7BXy75L2NTS8ttlkA= Subject key identifier: C5:2E:9D:68:56:7C:38:33:ED:27:DF:4A:74:A7:F6:39:05:75:D8:64 Certificate issuer: /CN=4f12be01-5f55-4434-8f8a-921808f7c306 Certificate serial: 010D0C9F4328584ED2CC7875922A7B30127604C0 Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 62582 IP address blocks: 199.5.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:78:75:92:2a:7b:30:12:76:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=07399755-f769-46ec-9ce9-99267384a31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c5:fe:0d:9e:e6:33:5f:5a:13:15:ae:e7:f1: 72:f5:2b:9f:30:3d:a5:44:b5:c7:78:3c:f1:5a:f0: b0:e2:0e:06:3c:05:02:73:5a:40:4f:e1:1d:9c:e1: 65:e7:a5:dc:27:7a:e4:8f:81:88:5f:54:c6:6f:2b: ab:99:29:38:b5:3c:1a:b0:58:e8:dd:fe:cf:cc:f8: 26:f9:43:6d:70:0c:36:d5:93:75:7a:c8:91:e3:41: 98:09:4f:59:c5:c0:c1:3b:41:3b:18:4b:49:fd:f6: fc:ca:b5:98:c9:f4:f2:a9:c8:ab:28:42:42:0a:6e: 8c:ca:f9:89:a3:8a:e8:b6:bb:e9:a4:1f:7b:ea:09: 35:54:fa:c5:73:95:97:7e:d9:b0:03:af:44:7f:00: e4:d2:9e:03:3c:a0:56:52:85:44:95:43:ac:72:88: b5:98:8c:ea:0b:2e:83:e4:a4:d2:af:60:e6:42:cb: df:a8:60:7f:ed:69:47:bc:95:77:c0:37:12:11:fc: 7e:8c:f1:20:df:5f:df:70:4f:e7:05:72:f0:2e:a9: 2d:a4:07:2e:4c:79:ba:67:24:54:ce:6f:73:7f:9f: af:a5:9e:aa:6c:1b:1e:2e:af:83:55:24:e5:25:29: ca:49:17:3d:f5:fb:1b:5b:2c:03:2e:46:bb:32:ac: 5b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:9D:68:56:7C:38:33:ED:27:DF:4A:74:A7:F6:39:05:75:D8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl X509v3 Authority Key Identifier: keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer sbgp-ipAddrBlock: critical IPv4: 199.5.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cb:3d:50:cd:54:43:f7:0f:c9:5a:cc:a3:10:f0:25:95:9e: ae:11:9c:78:de:97:7f:e3:d9:19:a9:2c:31:5f:62:ab:1e:6d: 0c:2e:d0:4b:ff:3b:38:f1:ba:98:4b:3c:14:28:70:42:aa:91: cc:67:fc:d3:9f:30:10:bb:8a:45:eb:53:9f:0d:ab:5f:d7:43: ad:d8:37:b6:79:c4:98:36:19:4f:f8:23:48:0f:e6:7d:6c:9a: cc:ad:11:c2:88:70:58:bf:b7:e2:1e:f1:31:30:cf:4d:3a:61: d0:13:f1:20:88:71:65:6a:df:50:4c:b5:34:9d:4f:03:8b:8d: 50:e1:82:84:09:5a:2c:fb:62:fc:1d:fb:66:d3:0a:75:94:ae: 2d:98:b1:53:c9:91:f1:6d:d4:96:b6:ed:6b:62:df:a5:00:14: a6:c3:d9:af:3f:89:2e:85:0b:f0:a0:5c:1a:13:43:b3:a1:7b: 2e:84:a1:1b:53:d7:75:5c:0c:ea:f1:41:0a:5a:80:27:26:3a: 4f:f2:f3:d0:a6:22:fe:6f:7e:58:55:34:d9:ab:2b:11:34:13: e1:46:b9:bd:84:a3:54:8b:87:98:f7:6b:aa:b5:72:89:9b:f1: d5:1b:51:49:22:72:22:48:bc:f6:91:a6:c6:c4:3b:70:0c:82: 33:f6:3e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHh1kip7MBJ2BMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj MzA2MB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk MDczOTk3NTUtZjc2OS00NmVjLTljZTktOTkyNjczODRhMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sX+DZ7mM19aExWu5/Fy9SufMD2lRLXHeDzx WvCw4g4GPAUCc1pAT+EdnOFl56XcJ3rkj4GIX1TGbyurmSk4tTwasFjo3f7PzPgm +UNtcAw21ZN1esiR40GYCU9ZxcDBO0E7GEtJ/fb8yrWYyfTyqcirKEJCCm6MyvmJ o4rotrvppB976gk1VPrFc5WXftmwA69EfwDk0p4DPKBWUoVElUOscoi1mIzqCy6D 5KTSr2DmQsvfqGB/7WlHvJV3wDcSEfx+jPEg31/fcE/nBXLwLqktpAcuTHm6ZyRU zm9zf5+vpZ6qbBseLq+DVSTlJSnKSRc99fsbWywDLka7MqxbKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUunWhWfDgz7SffSnSn9jkFddhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvYWE5MGUwOWUtODExMy0z ZTMzLWJlYWUtMWEzYjQ3Y2RjMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3 YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4 MDhmN2MzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/LPVDNVEP3D8lazKMQ8CWVnq4RnHjel3/j2RmpLDFfYqsebQwu0Ev/ OzjxuphLPBQocEKqkcxn/NOfMBC7ikXrU58Nq1/XQ63YN7Z5xJg2GU/4I0gP5n1s msytEcKIcFi/t+Ie8TEwz006YdAT8SCIcWVq31BMtTSdTwOLjVDhgoQJWiz7Yvwd +2bTCnWUri2YsVPJkfFt1Ja27Wti36UAFKbD2a8/iS6FC/CgXBoTQ7Ohey6EoRtT 13VcDOrxQQpagCcmOk/y89CmIv5vflhVNNmrKxE0E+FGub2Eo1SLh5j3a6q1comb 8dUbUUkiciJIvPaRpsbEO3AMgjP2PsE= -----END CERTIFICATE-----Generated at Sat Aug 15 04:43:26 2026 by rpki-client