$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: sB/l5O6Ts28Eg05RYfQKA2UGDclIwovrqS2MM6sOfsI= Subject key identifier: 65:32:D9:43:E2:54:D8:05:44:9F:9C:A5:97:D4:4D:DC:1C:7C:FC:76 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584E6F3A21BD045951C8E962A2C0 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:21:bd:04:59:51:c8:e9:62:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=a03df656-2b7f-4d87-9203-a58e662d7065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:f7:2d:25:eb:bf:8f:d0:da:31:6e:5f:42: 5f:00:6e:ff:76:c4:57:b6:ce:1c:3f:55:f6:7c:7a: 16:b4:0d:47:0e:c7:28:55:7f:a6:01:74:e7:f1:ff: ee:43:7b:89:f8:ba:f3:38:b0:d1:62:dd:af:a6:9b: 41:2f:22:e9:69:57:14:a2:e1:67:bc:db:78:fe:1a: 87:d8:6f:2a:5f:96:58:58:5e:4c:c5:b1:45:a4:d5: ec:78:59:ec:da:f8:cb:8a:e8:e8:7f:8f:71:7c:f1: f4:51:b5:4d:11:a0:74:ee:b3:b3:ee:a3:11:b8:c2: b4:fa:ac:ac:a6:ff:4d:cf:1a:6b:0b:6e:21:0d:9c: 8e:b8:c1:93:0f:24:0a:a9:2b:26:b2:25:02:e0:fa: 71:17:99:ed:21:45:53:c1:28:8e:04:63:1d:88:01: 59:60:ec:dc:99:13:8a:33:b2:21:03:7a:46:99:34: aa:0c:3c:64:a5:27:92:0f:05:16:25:dc:9f:83:4a: 2b:c3:12:f1:a0:4b:99:47:13:b7:25:b0:e0:52:29: 72:7c:ec:a1:e6:63:48:18:e0:9f:f2:b5:bf:42:b3: e9:87:a7:66:79:68:76:d0:8a:7a:2e:69:0d:6d:c4: ba:da:2e:04:b5:b1:59:3e:d3:af:de:f4:42:64:ec: 61:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:32:D9:43:E2:54:D8:05:44:9F:9C:A5:97:D4:4D:DC:1C:7C:FC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:8d:fe:b8:3e:bc:aa:34:a9:0f:f3:dc:d8:65:4a:5b:d4:64: be:41:09:f1:a1:52:49:9c:be:c9:10:c8:f8:dc:f6:c6:08:7c: 7a:ce:43:d5:bd:f2:ad:94:5d:a9:f6:04:76:75:9f:d7:40:05: 68:4c:a7:d7:c8:1c:d5:d1:03:ba:9c:44:97:b3:22:30:50:01: 3e:b7:21:92:41:f3:3e:39:04:3e:ce:93:be:dd:73:64:8a:f9: 68:88:84:05:46:0d:48:e7:8d:57:80:24:e8:97:49:e0:35:db: b7:b6:13:96:da:bb:d0:42:ff:dc:f9:f8:90:94:fd:80:99:94: 3d:f7:63:94:77:75:72:83:a0:3d:37:51:ea:06:dd:c6:46:ea: 44:42:09:b4:d8:9b:6f:4c:7d:52:e1:9e:e4:1e:1d:2a:77:5a: ff:a8:5b:af:75:26:7e:77:68:0a:8e:fa:48:86:45:05:6f:4c: 82:81:f5:ab:67:08:5c:63:5e:6b:75:4b:a3:46:78:94:54:ed: e9:f4:df:da:04:0d:53:f2:d0:0b:16:08:06:9d:c1:b4:77:93: d2:cb:a0:81:9c:4d:ff:da:0f:0c:02:a2:ea:4c:10:e2:80:e9: 22:88:3d:88:03:b4:a5:f5:1e:42:d5:fa:7b:37:27:f1:e7:a6: 50:5f:48:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOiG9BFlRyOliosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YTAzZGY2NTYtMmI3Zi00ZDg3LTkyMDMtYTU4ZTY2MmQ3MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc73LSXrv4/Q2jFuX0JfAG7/dsRXts4cP1X2 fHoWtA1HDscoVX+mAXTn8f/uQ3uJ+LrzOLDRYt2vpptBLyLpaVcUouFnvNt4/hqH 2G8qX5ZYWF5MxbFFpNXseFns2vjLiujof49xfPH0UbVNEaB07rOz7qMRuMK0+qys pv9NzxprC24hDZyOuMGTDyQKqSsmsiUC4PpxF5ntIUVTwSiOBGMdiAFZYOzcmROK M7IhA3pGmTSqDDxkpSeSDwUWJdyfg0orwxLxoEuZRxO3JbDgUilyfOyh5mNIGOCf 8rW/QrPph6dmeWh20Ip6LmkNbcS62i4EtbFZPtOv3vRCZOxhiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUy2UPiVNgFRJ+cpZfUTdwcfPx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaN/rg+vKo0qQ/z3NhlSlvUZL5BCfGhUkmcvskQyPjc9sYIfHrOQ9W9 8q2UXan2BHZ1n9dABWhMp9fIHNXRA7qcRJezIjBQAT63IZJB8z45BD7Ok77dc2SK +WiIhAVGDUjnjVeAJOiXSeA127e2E5bau9BC/9z5+JCU/YCZlD33Y5R3dXKDoD03 UeoG3cZG6kRCCbTYm29MfVLhnuQeHSp3Wv+oW691Jn53aAqO+kiGRQVvTIKB9atn CFxjXmt1S6NGeJRU7en039oEDVPy0AsWCAadwbR3k9LLoIGcTf/aDwwCoupMEOKA 6SKIPYgDtKX1HkLV+ns3J/HnplBfSF0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:17:10 2026 by rpki-client