$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa874606-4a4d-336f-862e-a519b3b90e75.roa File: aa874606-4a4d-336f-862e-a519b3b90e75.roa (raw, json) Hash identifier: f/LHT+i0PfWFgyNZX4aXvZVEiSBLIGJAQPTny31DbAY= Subject key identifier: 27:38:86:F0:8C:77:4D:B7:15:54:B7:95:FC:55:E2:D2:DE:4A:D2:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A777FD6C1315896C6F8080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa874606-4a4d-336f-862e-a519b3b90e75.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 10515 IP address blocks: 199.7.76.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:77:fd:6c:13:15:89:6c:6f:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=39e50fde-6aa2-4592-9418-ebd4e3fb726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:ed:36:48:21:3c:82:59:1b:b5:b7:6c:4c: bb:5c:d2:b0:f7:79:5c:d9:f8:b0:54:64:38:f9:c5: db:3a:bf:88:f1:81:1b:07:5b:91:28:20:e0:c4:a2: ed:fa:96:4b:bd:9b:1e:06:48:73:f6:44:6a:4f:e4: cf:1e:f7:26:20:11:a8:3f:06:14:d0:13:8a:0e:a6: c2:51:5a:62:94:f5:d9:8f:2b:c6:be:e3:bd:d0:5c: 27:d2:53:45:37:1c:15:48:27:05:3a:c6:24:de:5e: ed:23:39:fb:e7:95:93:fc:91:92:9a:cd:44:3a:7b: 12:79:e4:e9:e2:96:42:02:f1:29:ab:84:40:dc:78: 3f:b1:39:76:80:42:48:7d:61:dd:0c:2f:31:3d:cf: fa:03:3a:da:17:ac:46:20:d0:df:b3:00:92:6e:2f: af:66:86:6c:80:57:3a:d6:de:f5:f5:52:ec:5a:ca: 83:05:f9:54:dd:c4:32:90:51:e1:9f:46:5b:28:0c: 9d:50:1a:bb:80:09:95:42:ef:8e:d4:d6:ec:a3:cd: 07:f4:8b:0e:76:dd:e9:fb:11:ae:8a:79:29:0e:bb: 0b:df:e3:74:3a:5d:7c:ff:dd:e1:4e:94:65:26:b5: be:c5:c1:29:f2:2d:a6:21:af:5d:43:76:39:13:78: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:38:86:F0:8C:77:4D:B7:15:54:B7:95:FC:55:E2:D2:DE:4A:D2:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa874606-4a4d-336f-862e-a519b3b90e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.76.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5b:62:84:2a:47:00:a9:f7:16:42:bd:26:0b:d4:43:f8:94: 8c:f9:31:fc:b2:47:a9:6f:3c:3b:5d:62:85:e5:31:70:ef:56: f0:dc:31:94:65:6e:dc:c6:f4:d1:d3:c2:51:21:b5:76:c3:25: e3:35:a7:3a:e6:91:0d:7d:0a:84:54:c9:fd:c1:dd:17:86:99: f6:05:41:a5:f1:c3:fd:65:e5:c6:f2:b3:27:9c:36:b6:1e:28: 2c:e0:4b:49:9c:80:3c:8e:d5:b0:29:17:41:4f:88:79:93:4d: 8f:b9:53:d2:34:0b:f5:63:f9:b6:41:63:98:db:6c:63:c6:eb: a7:15:e0:eb:80:58:5d:52:60:e6:5d:58:a0:bd:fa:b3:dc:54: 3b:9d:b5:2c:0d:1d:50:08:0f:2b:a3:40:ea:26:0b:59:be:9f: 43:c1:da:6d:43:62:dd:90:a6:a0:a5:51:a3:bc:93:6c:c1:19: 0a:07:74:d9:ed:47:54:71:29:16:ff:b8:fd:37:d0:a5:c3:d8: 41:ec:91:53:c2:9e:e0:8d:b1:5e:82:a7:fb:9d:c7:0a:5c:7a: 0c:dd:1c:df:81:aa:fa:8e:0a:3a:75:a3:4f:a3:60:31:f0:cc: ed:f4:00:94:95:bb:c4:65:2b:66:16:48:a2:5b:65:8b:1e:d8: fc:bf:db:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp3f9bBMViWxvgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MzllNTBmZGUtNmFhMi00NTkyLTk0MTgtZWJkNGUzZmI3MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJHtNkghPIJZG7W3bEy7XNKw93lc2fiwVGQ4 +cXbOr+I8YEbB1uRKCDgxKLt+pZLvZseBkhz9kRqT+TPHvcmIBGoPwYU0BOKDqbC UVpilPXZjyvGvuO90Fwn0lNFNxwVSCcFOsYk3l7tIzn755WT/JGSms1EOnsSeeTp 4pZCAvEpq4RA3Hg/sTl2gEJIfWHdDC8xPc/6AzraF6xGINDfswCSbi+vZoZsgFc6 1t719VLsWsqDBflU3cQykFHhn0ZbKAydUBq7gAmVQu+O1Nbso80H9IsOdt3p+xGu inkpDrsL3+N0Ol18/93hTpRlJrW+xcEp8i2mIa9dQ3Y5E3hSRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCc4hvCMd023FVS3lfxV4tLeStKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE4NzQ2MDYtNGE0ZC0z MzZmLTg2MmUtYTUxOWIzYjkwZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4W2KEKkcAqfcWQr0mC9RD+JSM+TH8skepbzw7XWKF5TFw71bw3DGU ZW7cxvTR08JRIbV2wyXjNac65pENfQqEVMn9wd0Xhpn2BUGl8cP9ZeXG8rMnnDa2 Higs4EtJnIA8jtWwKRdBT4h5k02PuVPSNAv1Y/m2QWOY22xjxuunFeDrgFhdUmDm XVigvfqz3FQ7nbUsDR1QCA8ro0DqJgtZvp9DwdptQ2LdkKagpVGjvJNswRkKB3TZ 7UdUcSkW/7j9N9Clw9hB7JFTwp7gjbFegqf7nccKXHoM3Rzfgar6jgo6daNPo2Ax 8Mzt9ACUlbvEZStmFkiiW2WLHtj8v9tm -----END CERTIFICATE-----Generated at Sat Sep 26 08:19:40 2026 by rpki-client