$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa File: 301ebb24-b7d4-3833-bc01-534ced8fe634.roa (raw, json) Hash identifier: +8pP/iYhq+gZncVVwjYt0e8G7A05/Jrb95GKsMF7c7M= Subject key identifier: C2:9A:93:4B:1F:79:D6:60:E4:F9:FB:6B:E6:E6:8E:99:E0:10:0D:2B Certificate issuer: /CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Certificate serial: 010D0C9F4328584E8C8A4E7E4AA9D0BC8F27F0C0 Authority key identifier: E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 395704 IP address blocks: 199.212.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:4e:7e:4a:a9:d0:bc:8f:27:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=a4043ddf-d533-4e2b-b224-3e163c7d3ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:62:7b:24:12:d7:bd:cc:76:7d:76:62:0e: 0c:7d:65:76:0e:fc:59:5a:7a:92:94:53:9d:8b:22: 12:ff:2c:d8:c3:10:2a:dc:e6:18:2e:f5:63:90:76: e3:3a:b6:c2:11:8a:33:69:2f:bd:56:41:eb:85:20: 49:e7:d5:f9:a1:7f:eb:e4:09:7e:01:a9:a3:00:db: 3e:48:46:ae:11:f9:80:b5:38:e6:10:cc:ae:79:97: 75:c6:8c:77:e6:8f:26:a4:ed:20:4c:24:79:44:25: 48:7d:3f:f2:11:16:54:fa:5e:78:23:2c:27:42:01: 47:a2:9e:c8:9c:8f:25:2e:07:53:a9:2c:3d:96:74: f7:b6:b0:6f:8e:9e:93:51:c7:1f:09:b9:60:12:22: 66:e0:14:31:c5:3c:e0:97:41:e5:cf:7c:c3:6c:2f: c0:f6:f2:a3:93:db:9c:79:10:9b:97:c9:f7:23:78: f4:b2:f3:81:c8:33:46:3d:92:65:77:9c:b1:e4:80: 6d:45:88:91:40:a8:d4:1d:a3:56:7c:15:af:23:4a: 18:92:88:e5:1e:e4:16:46:5f:52:c9:98:ad:e1:6c: 85:bb:4b:a4:66:aa:a6:64:30:5b:e4:3e:ed:b5:26: 8a:22:31:39:66:c2:9b:82:14:ff:05:e3:5e:a4:0d: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9A:93:4B:1F:79:D6:60:E4:F9:FB:6B:E6:E6:8E:99:E0:10:0D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl X509v3 Authority Key Identifier: keyid:E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer sbgp-ipAddrBlock: critical IPv4: 199.212.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0f:51:26:ba:4b:47:72:66:b6:29:4f:53:b9:e2:89:f4:46: 97:11:68:7a:19:bd:8a:df:65:96:34:5e:c4:46:42:d2:38:a8: 08:a4:f2:0c:67:8e:f6:5d:af:63:7f:81:5f:1c:d4:20:f1:60: fb:79:72:12:f7:eb:32:5c:88:6f:43:d7:38:55:8e:33:4d:20: ef:f3:93:05:16:2c:a0:5b:e0:79:df:a6:66:54:bb:b3:e8:26: bb:5a:87:2a:7c:d7:e2:52:90:16:f8:0d:b6:93:2e:50:06:c3: 4a:50:07:e9:d6:8f:14:f0:c0:6f:7e:00:41:38:00:90:cc:41: 18:80:79:0c:09:5d:3c:24:c1:0a:bb:5f:e0:6e:09:b8:23:0e: 8b:32:9f:e0:e7:67:b1:24:5a:31:e1:9a:db:d4:17:e4:9a:b0: 9e:64:d2:d1:76:af:d8:39:cd:aa:0c:43:a2:bd:f7:64:6c:89: 50:b0:ba:46:14:f5:03:16:50:1a:6c:25:f5:98:a4:a0:23:bb: 17:b9:1d:91:7d:cc:be:7f:76:d7:f5:c5:a3:32:48:e1:02:d4: 59:7a:2e:7a:aa:34:f4:fd:1c:3a:0f:68:7f:28:5a:26:c3:9f: 45:15:07:8d:73:e2:4f:92:09:99:47:32:40:62:7f:c3:c0:24: 3a:ed:b6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mik5+SqnQvI8n8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmYTJmZTAtNTdiYS00NmM0LTlkMDAtNDFhODVjYzRl MjA0MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk YTQwNDNkZGYtZDUzMy00ZTJiLWIyMjQtM2UxNjNjN2QzYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJBieyQS173Mdn12Yg4MfWV2DvxZWnqSlFOd iyIS/yzYwxAq3OYYLvVjkHbjOrbCEYozaS+9VkHrhSBJ59X5oX/r5Al+AamjANs+ SEauEfmAtTjmEMyueZd1xox35o8mpO0gTCR5RCVIfT/yERZU+l54IywnQgFHop7I nI8lLgdTqSw9lnT3trBvjp6TUccfCblgEiJm4BQxxTzgl0Hlz3zDbC/A9vKjk9uc eRCbl8n3I3j0svOByDNGPZJld5yx5IBtRYiRQKjUHaNWfBWvI0oYkojlHuQWRl9S yZit4WyFu0ukZqqmZDBb5D7ttSaKIjE5ZsKbghT/BeNepA2k/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKak0sfedZg5Pn7a+bmjpngEA0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZh MmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4NWNjNGUyMDQvMzAxZWJiMjQtYjdkNC0z ODMzLWJjMDEtNTM0Y2VkOGZlNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGRmYTJmZTAtNTdiYS00NmM0LTlk MDAtNDFhODVjYzRlMjA0LzBkZmEyZmUwLTU3YmEtNDZjNC05ZDAwLTQxYTg1Y2M0 ZTIwNC5jcmwwHwYDVR0jBBgwFoAU6P4BDEj6X3iotRyz5rfBUkMKJK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZhMmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4 NWNjNGUyMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8PUSa6S0dyZrYpT1O54on0RpcRaHoZvYrfZZY0XsRGQtI4qAik8gxn jvZdr2N/gV8c1CDxYPt5chL36zJciG9D1zhVjjNNIO/zkwUWLKBb4HnfpmZUu7Po Jrtahyp81+JSkBb4DbaTLlAGw0pQB+nWjxTwwG9+AEE4AJDMQRiAeQwJXTwkwQq7 X+BuCbgjDosyn+DnZ7EkWjHhmtvUF+SasJ5k0tF2r9g5zaoMQ6K992RsiVCwukYU 9QMWUBpsJfWYpKAjuxe5HZF9zL5/dtf1xaMySOEC1Fl6LnqqNPT9HDoPaH8oWibD n0UVB41z4k+SCZlHMkBif8PAJDrttvQ= -----END CERTIFICATE-----Generated at Fri Jul 24 00:13:12 2026 by rpki-client