$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/768518d5-3ec1-3630-a79e-aa6386404597.roa File: 768518d5-3ec1-3630-a79e-aa6386404597.roa (raw, json) Hash identifier: 0oxn+r2WIXW3nm2oSe/PMjo6gUTCMgdkTCm1sLbYnfU= Subject key identifier: 16:FA:3B:76:57:84:1A:52:F5:02:D7:B7:F7:E3:74:FC:D2:71:1E:AC Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584E4559F2A0AF60353C129017C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/768518d5-3ec1-3630-a79e-aa6386404597.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 399063 IP address blocks: 170.199.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:f2:a0:af:60:35:3c:12:90:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=d3ba2940-703c-4827-baf1-8b737f4aab86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:12:8b:ec:b6:51:ec:3d:45:5b:b4:bc:86: 5e:f4:ba:dc:6c:b8:0f:59:30:54:b0:36:7c:4f:84: a2:ee:86:21:ce:35:80:d7:f8:f6:a0:12:cf:da:f8: 3e:1a:cc:bc:67:c8:7d:4e:79:14:67:91:90:9f:f0: 85:92:66:ce:f7:af:e3:8e:74:0b:6e:df:9b:4a:74: bb:f9:57:ff:be:b8:20:c7:5f:1c:04:65:33:30:0b: 2a:8f:db:36:10:e0:3b:be:71:de:35:64:9b:9d:fc: 58:3b:6a:3a:b7:9a:78:61:0f:7c:e9:90:5a:04:8b: 59:09:c5:87:22:39:c8:cc:14:49:f4:51:d8:9b:4f: 82:a8:51:d2:ff:53:d5:1d:f1:94:36:20:0d:65:09: 80:7d:47:0a:56:c3:ca:44:66:8d:90:0f:2f:b1:23: cc:c9:06:f5:c0:6f:16:3a:30:82:98:90:fd:66:02: f3:e1:6d:6a:47:57:6d:cb:6f:be:ef:15:a6:c5:c1: 9b:9e:1e:8d:43:0f:b0:79:9b:36:63:f1:0c:5f:0b: 10:d4:52:44:61:97:cb:ab:e4:08:c8:85:2b:ca:97: 51:a6:b6:1b:de:bc:aa:0f:b9:4d:84:89:8d:f2:d6: 23:04:d8:8b:d8:9c:13:3a:cd:68:7d:c5:b5:b2:75: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:3B:76:57:84:1A:52:F5:02:D7:B7:F7:E3:74:FC:D2:71:1E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/768518d5-3ec1-3630-a79e-aa6386404597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 170.199.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:73:e4:7b:f8:2f:fb:07:8b:86:06:c3:d3:3c:1c:0b:10:a6: 3e:b4:9a:2d:ac:6b:f6:47:99:3a:00:33:25:03:a8:b1:f5:78: cf:10:f8:2d:ed:f6:17:93:5c:da:2b:c5:22:14:97:7c:5c:db: 51:41:c3:f4:9a:c3:f8:0b:05:1f:da:da:61:d7:c8:a8:f8:a1: 97:39:cf:28:46:07:ae:1d:f2:ee:9f:75:99:3e:6c:d9:43:a6: 5a:e0:ed:d7:25:99:03:ba:c6:fe:eb:d0:27:4e:9b:2d:53:bc: e6:47:84:97:b4:c4:9a:20:3d:24:33:91:80:2f:61:da:b7:b4: 80:12:1c:23:2e:98:94:b1:11:d8:08:8b:7e:96:0d:7f:d2:9e: da:5a:9a:01:78:8e:cc:20:7f:4a:54:4d:ba:c8:1d:17:82:76: d7:e8:98:89:33:81:f9:65:d8:8a:2b:e9:99:a4:15:e5:72:b2: 82:b1:f9:72:29:13:a4:e7:ad:4b:fe:21:6d:3f:ee:99:07:40: 7e:f8:39:36:e8:59:72:54:6e:0a:f6:bb:07:eb:4f:29:7e:23: d4:03:79:aa:6e:cb:cd:0a:a6:db:5c:71:5f:19:7c:4b:00:61: 25:aa:4a:50:79:a3:1d:2a:92:fe:8c:70:dd:6d:a0:65:50:0d: 85:db:94:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWfKgr2A1PBKQF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZDNiYTI5NDAtNzAzYy00ODI3LWJhZjEtOGI3MzdmNGFhYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSwSi+y2Uew9RVu0vIZe9LrcbLgPWTBUsDZ8 T4Si7oYhzjWA1/j2oBLP2vg+Gsy8Z8h9TnkUZ5GQn/CFkmbO96/jjnQLbt+bSnS7 +Vf/vrggx18cBGUzMAsqj9s2EOA7vnHeNWSbnfxYO2o6t5p4YQ986ZBaBItZCcWH IjnIzBRJ9FHYm0+CqFHS/1PVHfGUNiANZQmAfUcKVsPKRGaNkA8vsSPMyQb1wG8W OjCCmJD9ZgLz4W1qR1dty2++7xWmxcGbnh6NQw+weZs2Y/EMXwsQ1FJEYZfLq+QI yIUrypdRprYb3ryqD7lNhImN8tYjBNiL2JwTOs1ofcW1snVnjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb6O3ZXhBpS9QLXt/fjdPzScR6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNzY4NTE4ZDUtM2VjMS0z NjMwLWE3OWUtYWE2Mzg2NDA0NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsf1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFz5Hv4L/sHi4YGw9M8HAsQpj60mi2sa/ZHmToAMyUDqLH1eM8Q+C3t 9heTXNorxSIUl3xc21FBw/Saw/gLBR/a2mHXyKj4oZc5zyhGB64d8u6fdZk+bNlD plrg7dclmQO6xv7r0CdOmy1TvOZHhJe0xJogPSQzkYAvYdq3tIASHCMumJSxEdgI i36WDX/SntpamgF4jswgf0pUTbrIHReCdtfomIkzgfll2Ior6ZmkFeVysoKx+XIp E6TnrUv+IW0/7pkHQH74OTboWXJUbgr2uwfrTyl+I9QDeapuy80KpttccV8ZfEsA YSWqSlB5ox0qkv6McN1toGVQDYXblOs= -----END CERTIFICATE-----Generated at Fri Jul 24 09:38:55 2026 by rpki-client