$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5bda293-21e5-33c7-a371-249089d16d5f.roa File: a5bda293-21e5-33c7-a371-249089d16d5f.roa (raw, json) Hash identifier: /2FFk6d7wBv+k1iTE4E+fFzUKbkabco+jsMTR5T57Hg= Subject key identifier: 2D:6F:7B:B0:A5:67:B4:27:10:99:E4:30:E1:71:D5:D9:A1:40:F2:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A841BD999710143D173200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5bda293-21e5-33c7-a371-249089d16d5f.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 397195 IP address blocks: 199.7.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:41:bd:99:97:10:14:3d:17:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=aa813936-2c97-4885-860a-2d7efd42b6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:5c:c4:b9:24:15:a5:b4:77:ca:fb:48:12: a0:23:05:1a:d8:26:ac:18:a6:2c:bb:60:49:59:92: de:f3:9b:d4:65:74:32:b2:5e:22:6f:7e:9e:bc:ec: 9a:e1:a3:97:b4:10:36:7b:2f:54:85:df:ad:45:c9: 13:8d:1b:0a:9c:1b:a1:9d:bd:60:38:69:78:0b:68: 81:ae:77:32:62:22:41:5a:33:e6:0c:66:cc:3a:ff: 95:46:98:fe:c2:2a:80:fc:a7:f1:5e:51:87:4d:d9: 61:38:22:2f:73:20:ed:2c:52:46:d6:32:07:d1:df: 8c:1e:04:79:e7:95:d1:1f:9a:5a:8c:30:02:9e:0e: c1:1f:43:60:73:38:fa:22:87:d2:9f:80:69:9d:a2: 54:2e:58:11:66:85:10:6c:d5:6b:d1:c1:3b:06:9d: bb:9b:6b:55:82:7d:d1:b1:c0:b9:1f:44:38:82:f5: 31:ec:8d:6d:e6:e8:58:b6:81:52:b9:84:da:d7:14: 75:f4:02:cc:f9:1a:7b:57:8b:d7:21:08:bb:74:a8: 60:36:fd:30:fe:b4:ea:f1:df:24:6f:f7:1c:11:3e: da:2b:50:ea:aa:73:fe:05:00:aa:55:d8:78:29:cb: af:e2:29:c5:b1:12:97:91:f5:5f:29:7a:14:18:55: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6F:7B:B0:A5:67:B4:27:10:99:E4:30:E1:71:D5:D9:A1:40:F2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5bda293-21e5-33c7-a371-249089d16d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:84:0c:0f:98:3a:0e:83:20:73:dd:4f:e9:97:ed:09:db:84: d9:9d:6c:35:7f:97:45:32:75:42:0d:70:e0:21:ed:eb:e6:9d: 0c:c5:ee:8e:2b:92:a0:30:11:f2:48:98:60:de:d2:99:54:5a: 83:31:f4:ec:99:5f:23:f6:76:4a:72:15:ed:84:3b:93:b1:72: a1:98:1e:d2:de:8c:91:c8:46:01:b6:72:93:07:d4:f0:99:76: 27:0b:1b:75:b9:89:24:29:85:19:ec:15:3e:99:7f:d9:d4:ec: 26:21:3b:98:84:3f:8a:1d:18:d4:05:5e:03:0a:70:27:4d:5c: bf:32:f5:c9:2f:d9:23:51:93:54:42:c6:6a:ce:ff:fc:65:21: b5:ae:2b:78:4a:4c:ba:98:c2:b8:4f:4f:4b:bf:47:0e:3b:e7: 48:74:4f:87:47:7b:54:f1:70:b9:8f:01:6c:1c:64:fa:c5:0c: 4d:0e:d0:42:bd:f4:85:47:b6:42:1c:0b:9d:e9:d7:dc:e6:55: 62:5b:f1:54:dc:82:84:bc:3e:25:b2:b0:a8:af:9a:4d:d2:18: c3:9e:a2:00:38:5b:1a:d9:8a:06:70:67:99:e7:3f:b2:12:f5: ce:1d:41:ca:87:a3:87:b7:ce:78:21:b4:86:65:17:7a:18:f9: cb:b6:cd:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqEG9mZcQFD0XMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YWE4MTM5MzYtMmM5Ny00ODg1LTg2MGEtMmQ3ZWZkNDJiNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv15cxLkkFaW0d8r7SBKgIwUa2CasGKYsu2BJ WZLe85vUZXQysl4ib36evOya4aOXtBA2ey9Uhd+tRckTjRsKnBuhnb1gOGl4C2iB rncyYiJBWjPmDGbMOv+VRpj+wiqA/KfxXlGHTdlhOCIvcyDtLFJG1jIH0d+MHgR5 55XRH5pajDACng7BH0Ngczj6IofSn4BpnaJULlgRZoUQbNVr0cE7Bp27m2tVgn3R scC5H0Q4gvUx7I1t5uhYtoFSuYTa1xR19ALM+Rp7V4vXIQi7dKhgNv0w/rTq8d8k b/ccET7aK1DqqnP+BQCqVdh4Kcuv4inFsRKXkfVfKXoUGFVAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1ve7ClZ7QnEJnkMOFx1dmhQPI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTViZGEyOTMtMjFlNS0z M2M3LWEzNzEtMjQ5MDg5ZDE2ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSEDA+YOg6DIHPdT+mX7QnbhNmdbDV/l0UydUINcOAh7evmnQzF7o4r kqAwEfJImGDe0plUWoMx9OyZXyP2dkpyFe2EO5OxcqGYHtLejJHIRgG2cpMH1PCZ dicLG3W5iSQphRnsFT6Zf9nU7CYhO5iEP4odGNQFXgMKcCdNXL8y9ckv2SNRk1RC xmrO//xlIbWuK3hKTLqYwrhPT0u/Rw4750h0T4dHe1TxcLmPAWwcZPrFDE0O0EK9 9IVHtkIcC53p19zmVWJb8VTcgoS8PiWysKivmk3SGMOeogA4WxrZigZwZ5nnP7IS 9c4dQcqHo4e3znghtIZlF3oY+cu2zac= -----END CERTIFICATE-----Generated at Mon Sep 28 18:09:43 2026 by rpki-client