$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/7ddf5706-9a04-3677-91b7-e563b56a6e35.roa File: 7ddf5706-9a04-3677-91b7-e563b56a6e35.roa (raw, json) Hash identifier: YjRETwUde8ZXAPSG32uXNF1VGYcvpV4onJBnc8iCXLQ= Subject key identifier: 27:33:4C:6D:FB:64:75:6B:2F:A1:91:43:C6:EB:F1:8D:7E:7A:D8:6B Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584D905AA44570D2126AD0B1DB80 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/7ddf5706-9a04-3677-91b7-e563b56a6e35.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 15296 IP address blocks: 199.216.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a4:45:70:d2:12:6a:d0:b1:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=1217ccc8-8de1-43dd-9b77-602a90ab5192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9b:86:29:6c:08:16:2c:58:fe:33:ad:46:b1: 77:90:cb:df:e5:de:46:5d:38:be:16:88:0e:60:6e: 13:9e:a3:4d:cb:fc:58:4c:81:68:ea:99:a8:f6:0e: 8c:1a:a7:86:b0:46:22:53:a9:32:f0:f0:b3:3f:dd: 4b:e3:56:4b:01:6e:04:77:8a:fb:f5:9f:0b:44:21: 81:d2:77:f8:c6:8e:ae:73:dc:c4:b7:6e:db:df:10: 66:81:e4:a0:e0:fd:b2:57:98:be:a6:66:5c:3c:bb: 38:10:04:8e:c5:d3:45:61:2a:66:89:26:6c:ba:a9: 88:e6:49:3c:74:4c:94:ef:d1:bd:ef:71:3d:2f:c5: 92:55:18:25:1c:aa:63:2c:ea:61:29:42:84:f2:e8: cc:f6:58:4d:ce:c4:56:cb:d1:9b:a4:72:27:ac:ef: 47:fb:91:14:46:91:b8:82:0a:c1:be:7c:c4:03:59: 28:b4:11:b6:e9:cb:29:bc:1a:e0:b9:c3:1d:15:37: 0c:ad:a5:41:ce:20:4a:14:a6:92:1b:e6:5c:c1:9a: 77:42:fd:9e:49:5f:6f:af:d2:81:75:9c:c9:eb:91: ef:72:ea:e1:94:c1:a5:6b:6c:79:91:1c:93:2d:33: 2d:c7:19:b9:6c:09:df:82:3c:17:44:78:4a:3f:1f: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:4C:6D:FB:64:75:6B:2F:A1:91:43:C6:EB:F1:8D:7E:7A:D8:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/7ddf5706-9a04-3677-91b7-e563b56a6e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a7:fd:84:02:1f:04:5a:22:3d:f7:67:69:80:d2:0f:d0:35: 4a:d8:c7:43:df:a1:07:17:e2:6f:88:51:d4:ca:72:83:4a:5e: c3:3a:4c:57:1d:de:7e:90:81:c3:95:f0:65:58:69:2f:8f:cb: 76:86:4d:fc:a7:b5:a2:05:a2:ef:37:3f:45:da:aa:aa:5b:ee: 82:68:2f:6f:79:2d:62:81:b1:6d:3e:da:00:12:0e:ce:c6:32: 60:fa:9a:91:49:91:9a:65:21:eb:a8:ea:c2:83:38:6d:10:14: 70:f6:d4:2d:12:bf:9e:cc:d6:1e:6a:19:ed:69:82:58:8f:a2: 60:5c:1d:12:e9:ac:5a:ee:59:c1:cd:66:45:d4:c3:91:97:9e: 52:97:67:b5:62:ec:c3:f9:10:1b:a2:79:89:66:2f:5c:6d:a0: de:84:2d:53:fd:61:16:51:c9:8c:b2:3f:92:f2:ea:a1:90:35: 19:64:55:d1:7d:2f:96:f6:dc:07:29:85:f4:a1:b9:32:7e:2a: bf:11:ef:8f:41:32:8f:54:88:80:a8:1b:97:70:1b:0d:07:6f: 76:f5:49:f9:1f:a7:b2:11:fa:ea:09:63:8a:dc:33:49:45:a9: ee:50:b9:89:b4:a2:d9:dc:2c:1b:19:09:90:3a:dd:d3:0c:b5: 0c:e7:b0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqRFcNISatCx24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MTIxN2NjYzgtOGRlMS00M2RkLTliNzctNjAyYTkwYWI1MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZuGKWwIFixY/jOtRrF3kMvf5d5GXTi+FogO YG4TnqNNy/xYTIFo6pmo9g6MGqeGsEYiU6ky8PCzP91L41ZLAW4Ed4r79Z8LRCGB 0nf4xo6uc9zEt27b3xBmgeSg4P2yV5i+pmZcPLs4EASOxdNFYSpmiSZsuqmI5kk8 dEyU79G973E9L8WSVRglHKpjLOphKUKE8ujM9lhNzsRWy9GbpHInrO9H+5EURpG4 ggrBvnzEA1kotBG26cspvBrgucMdFTcMraVBziBKFKaSG+ZcwZp3Qv2eSV9vr9KB dZzJ65HvcurhlMGla2x5kRyTLTMtxxm5bAnfgjwXRHhKPx9T7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCczTG37ZHVrL6GRQ8br8Y1+ethrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvN2RkZjU3MDYtOWEwNC0z Njc3LTkxYjctZTU2M2I1NmE2ZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9hjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFan/YQCHwRaIj33Z2mA0g/QNUrYx0PfoQcX4m+IUdTKcoNKXsM6TFcd 3n6QgcOV8GVYaS+Py3aGTfyntaIFou83P0Xaqqpb7oJoL295LWKBsW0+2gASDs7G MmD6mpFJkZplIeuo6sKDOG0QFHD21C0Sv57M1h5qGe1pgliPomBcHRLprFruWcHN ZkXUw5GXnlKXZ7Vi7MP5EBuieYlmL1xtoN6ELVP9YRZRyYyyP5Ly6qGQNRlkVdF9 L5b23AcphfShuTJ+Kr8R749BMo9UiICoG5dwGw0Hb3b1Sfkfp7IR+uoJY4rcM0lF qe5QuYm0otncLBsZCZA63dMMtQznsHE= -----END CERTIFICATE-----Generated at Wed May 13 07:21:22 2026 by rpki-client