$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa File: 5c71001e-a55c-33db-bcc0-223bccba2b97.roa (raw, json) Hash identifier: L2v9ZUQFdSz7WHGpvYPdwOchUQe2y83GAOxMSidnFMg= Subject key identifier: E3:6A:2C:37:C7:B3:2A:73:FB:75:14:AE:EB:06:F8:7D:68:90:62:32 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584E7FFA32B5AF478B368C7EA018 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 393220 IP address blocks: 199.71.0.0/24 maxlen: 24 2001:500:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:32:b5:af:47:8b:36:8c:7e:a0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=38461ccc-5df1-46a0-8f1b-cb5046e130f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:9b:41:bf:d3:7e:6b:26:ac:f2:5d:82:4d: 95:0e:49:3d:be:dd:dd:03:b6:d4:33:e1:64:24:5c: a7:1a:92:c4:6a:fc:4e:14:53:63:e3:a7:04:17:c8: 48:13:cd:00:4d:0a:91:ee:21:29:ea:73:5f:71:04: 3b:5b:8a:2d:fd:1f:08:a5:ac:db:b7:9a:0a:4e:6c: a0:c0:f1:99:08:89:6c:11:77:f5:63:df:66:88:3b: 70:0c:2e:2a:fc:6e:12:9c:1d:9e:73:9a:4c:17:a9: 8f:cf:a4:6d:fb:07:e2:16:cc:1a:85:d8:7a:24:39: c3:05:be:b8:7c:ab:9e:9c:60:25:c4:a2:19:dc:ac: 21:be:3b:4e:9f:b8:a1:9a:0a:a4:e7:b2:3a:08:cd: d1:df:2d:2e:73:8d:98:37:6a:65:1a:35:4d:bd:f8: a2:48:53:d4:e5:be:7a:86:30:80:0b:75:c3:40:57: 67:73:f2:ad:4b:d0:46:26:2a:3b:10:8c:94:8c:0f: 78:1d:ca:b2:64:4b:3f:aa:73:ea:08:e2:0a:ef:f3: 6d:23:7b:fa:bd:85:c6:6c:1e:65:31:22:1f:7b:c1: c3:16:a3:cf:3c:77:a3:b7:5c:82:1f:31:66:8b:f0: 81:bf:e0:8f:f6:43:6c:0d:24:ba:9b:65:b5:51:82: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6A:2C:37:C7:B3:2A:73:FB:75:14:AE:EB:06:F8:7D:68:90:62:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.71.0.0/24 IPv6: 2001:500:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b7:61:79:3d:13:b3:f3:f8:9e:44:06:3c:05:b4:ae:09:0e: 37:51:a9:4b:d4:0e:1c:af:5f:09:e3:f3:19:56:2f:ff:ee:0a: c5:a8:5c:64:75:56:90:6e:3a:85:24:2e:9f:63:09:73:24:f6: a0:80:cb:33:4f:83:81:1d:27:83:e2:ba:05:03:6a:b1:aa:32: a1:19:90:a4:88:de:5c:35:80:72:13:61:60:ff:c7:42:9b:f7: dd:6e:4c:14:f2:eb:12:d7:88:b8:f3:84:2c:bb:4b:f2:8e:67: cf:b8:7f:da:c9:f8:2e:54:70:b9:ca:ca:a1:da:5c:0f:93:df: de:77:a2:17:13:d3:74:9e:ba:a0:5b:18:a1:89:40:19:67:da: ab:77:34:2b:ab:24:ed:0b:b8:f8:16:c4:11:ae:d9:4c:3a:23: 09:bc:e6:72:b6:5b:38:cb:77:09:71:6c:ab:de:c8:8f:e1:e7: 16:45:5b:bc:80:cc:1e:f1:28:b5:8b:24:bf:36:aa:ba:9c:c4: 45:ef:2f:d8:6d:3c:5b:e4:d6:34:93:68:64:69:38:60:9a:14: 3e:44:c6:5b:43:e5:67:8e:2e:97:f4:ee:f8:38:76:0a:79:c2: bd:e4:17:e6:3e:52:f6:b4:41:74:8c:99:51:69:7c:d2:c2:a4: 72:f1:03:65 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5/+jK1r0eLNox+oBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk Mzg0NjFjY2MtNWRmMS00NmEwLThmMWItY2I1MDQ2ZTEzMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GqbQb/TfmsmrPJdgk2VDkk9vt3dA7bUM+Fk JFynGpLEavxOFFNj46cEF8hIE80ATQqR7iEp6nNfcQQ7W4ot/R8Ipazbt5oKTmyg wPGZCIlsEXf1Y99miDtwDC4q/G4SnB2ec5pMF6mPz6Rt+wfiFswahdh6JDnDBb64 fKuenGAlxKIZ3KwhvjtOn7ihmgqk57I6CM3R3y0uc42YN2plGjVNvfiiSFPU5b56 hjCAC3XDQFdnc/KtS9BGJio7EIyUjA94HcqyZEs/qnPqCOIK7/NtI3v6vYXGbB5l MSIfe8HDFqPPPHejt1yCHzFmi/CBv+CP9kNsDSS6m2W1UYKK3QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFONqLDfHsypz+3UUrusG+H1okGIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNWM3MTAwMWUtYTU1Yy0z M2RiLWJjYzAtMjIzYmNjYmEyYjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx0cAMA8E AgACMAkDBwAgAQUAADEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb7dheT0Ts/P4nkQGPAW0rgkON1GpS9QO HK9fCePzGVYv/+4KxahcZHVWkG46hSQun2MJcyT2oIDLM0+DgR0ng+K6BQNqsaoy oRmQpIjeXDWAchNhYP/HQpv33W5MFPLrEteIuPOELLtL8o5nz7h/2sn4LlRwucrK odpcD5Pf3neiFxPTdJ66oFsYoYlAGWfaq3c0K6sk7Qu4+BbEEa7ZTDojCbzmcrZb OMt3CXFsq97Ij+HnFkVbvIDMHvEotYskvzaqupzERe8v2G08W+TWNJNoZGk4YJoU PkTGW0PlZ44ul/Tu+Dh2CnnCveQX5j5S9rRBdIyZUWl80sKkcvEDZQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:57:42 2026 by rpki-client