$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/594de24c-0066-3579-b8c4-a5c19c2363b0.roa File: 594de24c-0066-3579-b8c4-a5c19c2363b0.roa (raw, json) Hash identifier: cxDRMqd7aDRk+JwTlJVE1WEy1XC8AlZ8WQnvJxvF7sY= Subject key identifier: 22:2D:92:33:ED:1A:48:5A:07:B8:FA:24:F0:D6:E9:2F:AE:2C:E1:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A84AF66E5BF16A582E2FC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/594de24c-0066-3579-b8c4-a5c19c2363b0.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396580 IP address blocks: 199.7.76.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:4a:f6:6e:5b:f1:6a:58:2e:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=252005b8-85b0-4d0a-a8a5-8d8b361dc125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:69:48:a1:27:c4:7c:5f:a6:ed:4b:ca:c4: 2b:2b:82:e6:06:3c:0e:a4:e8:d1:eb:ff:dd:79:f5: 80:e6:f2:98:1e:6d:1b:69:f4:04:6c:7c:66:21:36: e9:76:5d:57:b3:21:7b:39:33:d4:f4:4c:13:e7:72: 5c:a9:53:3b:b1:d4:30:13:77:4b:32:d8:6d:01:99: 35:5e:27:71:52:bc:b7:55:4f:75:e6:8c:4a:60:71: ec:d5:0a:b1:1d:21:74:ab:08:39:3b:12:50:4b:cf: b2:1d:83:4b:d0:57:f2:94:ba:04:05:27:7d:35:eb: f6:35:81:aa:06:97:c0:6f:ab:e3:84:c6:5f:7b:1f: ec:97:c5:3a:14:52:7e:3d:ea:cf:51:55:c5:70:ea: 76:6c:eb:dd:a2:28:ed:2a:b6:94:5d:47:6b:fe:d0: 0e:ea:7f:7f:94:4d:4f:40:26:85:a9:43:77:b6:82: ae:f4:84:97:ed:c6:3a:f7:5b:72:40:73:98:2b:ea: 84:12:69:71:71:35:ba:f6:8c:aa:a4:fe:25:f4:2e: 68:e6:8a:10:81:d8:2f:67:49:ea:96:79:d9:3c:f2: 9e:34:14:dc:3d:1e:7f:ca:cf:2f:dd:e3:17:f3:95: a7:9c:7c:90:92:63:7f:12:af:7d:c8:cb:05:10:a0: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2D:92:33:ED:1A:48:5A:07:B8:FA:24:F0:D6:E9:2F:AE:2C:E1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/594de24c-0066-3579-b8c4-a5c19c2363b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:61:33:62:da:d9:ba:82:11:4a:fd:a5:a1:55:1c:de:54:a1: 00:bd:e2:e5:51:8c:64:35:b3:8f:74:0d:11:8d:4b:d8:5a:4f: b7:ea:72:9b:7f:2c:2c:ca:63:10:13:b2:63:cc:31:b5:a9:b6: b5:1d:0f:1f:01:06:9f:ac:1b:51:c1:13:c8:8e:9e:db:95:a0: f0:e5:00:1e:4b:1e:05:bb:76:72:75:49:6a:96:1c:be:1e:23: 85:64:ad:21:f5:c9:2b:d5:93:02:4c:d1:b4:51:1e:e0:e9:cc: b5:aa:4e:cf:dd:94:be:32:60:97:1a:64:cd:e2:83:03:bb:0e: 63:90:5c:2b:31:87:3a:03:9f:f8:83:03:14:f1:f5:48:9e:96: c7:2d:25:19:12:36:d7:16:1b:e6:e9:5f:c6:6b:82:3e:5f:bc: 90:6b:60:28:19:09:37:3f:11:15:41:60:b4:64:60:25:da:37: 2d:14:f6:a8:55:30:d4:59:3c:fe:fb:62:60:f3:86:eb:ef:21: 46:93:7c:46:61:bc:53:9b:54:a0:c6:ab:33:f4:92:35:42:77: d9:82:70:43:68:06:f0:ed:a6:5b:3a:bf:82:ab:60:31:71:03: a2:ee:b7:fc:2f:f1:ab:ae:b3:58:84:2d:b9:f9:d9:fd:a7:e4: fe:44:59:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8DqEr2blvxalguL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MjUyMDA1YjgtODViMC00ZDBhLWE4YTUtOGQ4YjM2MWRjMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ppSKEnxHxfpu1LysQrK4LmBjwOpOjR6//d efWA5vKYHm0bafQEbHxmITbpdl1XsyF7OTPU9EwT53JcqVM7sdQwE3dLMthtAZk1 XidxUry3VU915oxKYHHs1QqxHSF0qwg5OxJQS8+yHYNL0FfylLoEBSd9Nev2NYGq BpfAb6vjhMZfex/sl8U6FFJ+PerPUVXFcOp2bOvdoijtKraUXUdr/tAO6n9/lE1P QCaFqUN3toKu9ISX7cY691tyQHOYK+qEEmlxcTW69oyqpP4l9C5o5ooQgdgvZ0nq lnnZPPKeNBTcPR5/ys8v3eMX85WnnHyQkmN/Eq99yMsFEKA1AQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCItkjPtGkhaB7j6JPDW6S+uLOHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTk0ZGUyNGMtMDA2Ni0z NTc5LWI4YzQtYTVjMTljMjM2M2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIYTNi2tm6ghFK/aWhVRzeVKEAveLlUYxkNbOPdA0RjUvYWk+36nKb fywsymMQE7JjzDG1qba1HQ8fAQafrBtRwRPIjp7blaDw5QAeSx4Fu3ZydUlqlhy+ HiOFZK0h9ckr1ZMCTNG0UR7g6cy1qk7P3ZS+MmCXGmTN4oMDuw5jkFwrMYc6A5/4 gwMU8fVInpbHLSUZEjbXFhvm6V/Ga4I+X7yQa2AoGQk3PxEVQWC0ZGAl2jctFPao VTDUWTz++2Jg84br7yFGk3xGYbxTm1Sgxqsz9JI1QnfZgnBDaAbw7aZbOr+Cq2Ax cQOi7rf8L/GrrrNYhC25+dn9p+T+RFkv -----END CERTIFICATE-----Generated at Thu Sep 24 15:29:14 2026 by rpki-client