$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf257d1e-09ec-3053-be33-24e7868472e2.roa File: cf257d1e-09ec-3053-be33-24e7868472e2.roa (raw, json) Hash identifier: 0DK/pXQnEY8MIrNz+8L6NmERLsXGQ4Add7nUf4cku9I= Subject key identifier: FF:E7:C1:16:AA:E3:AD:9C:88:04:B2:31:6A:F7:11:B2:0C:EC:3C:CF Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584E94EA7F815CB2FB9430823000 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf257d1e-09ec-3053-be33-24e7868472e2.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 54113 IP address blocks: 199.232.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:7f:81:5c:b2:fb:94:30:82:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=29395d61-6d1a-4cbd-a340-03bfec2311b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:00:90:d9:53:2b:a8:0b:17:aa:5e:c1:e5:80: f3:cb:cc:df:26:f0:c6:fe:8a:39:fb:b8:2d:d8:54: 72:3f:71:70:5f:58:b2:76:00:a9:cf:d0:e4:14:14: 09:49:71:ed:65:d3:2d:54:44:cf:ef:3e:ee:e7:b1: 8a:a8:26:95:9d:77:45:f7:3a:d1:2e:44:b6:f2:ac: b4:d9:00:78:e0:89:c6:c2:1d:53:7f:83:f1:5c:26: 63:58:bd:95:40:3c:b7:cd:04:2b:f6:53:2b:b4:fa: b4:54:14:cb:06:0b:20:e6:0a:3e:e7:d3:7f:a1:57: 03:66:3e:47:03:c2:1f:30:31:1c:dc:df:a6:2e:6d: 90:ad:02:72:10:3d:d3:bf:07:15:22:e0:40:8e:d6: f8:4a:28:b4:7c:c0:cc:6a:df:43:43:a8:61:b3:88: bd:65:cd:be:95:78:39:bb:6f:9f:c5:eb:d9:32:c7: c6:46:94:28:7d:63:10:8b:26:37:76:36:83:a1:1f: 95:c5:ff:4d:f8:2b:9b:2f:04:c3:a6:a5:38:00:8c: 2c:56:df:59:80:65:47:09:4b:8c:01:c6:00:19:0b: e0:3e:62:55:7e:57:e9:70:4d:6f:8e:a6:96:76:a8: 3b:7d:ec:72:13:d0:5d:3a:9e:9c:56:f8:ad:b7:ad: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:C1:16:AA:E3:AD:9C:88:04:B2:31:6A:F7:11:B2:0C:EC:3C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf257d1e-09ec-3053-be33-24e7868472e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:18:53:4b:4c:db:e9:81:18:a8:c6:9d:05:7d:9b:9b:64:03: be:c7:fb:84:4c:03:5b:70:27:4d:71:ed:9e:68:b9:f5:8e:8d: fa:ee:12:2d:63:8c:ea:92:9a:09:ab:73:ee:2e:11:a0:16:72: 12:2b:8c:e3:02:76:d4:80:f5:7e:9b:68:0b:63:05:de:5b:09: bf:21:a4:f1:63:1c:9e:ed:be:35:7b:17:38:78:7a:38:dc:f7: d1:6e:aa:71:5d:1a:b5:4b:aa:2e:26:3a:d2:58:17:82:08:d9: a5:2f:ab:51:df:cd:ee:f3:dd:71:f2:a1:da:eb:f7:ec:71:d3: 34:0d:16:98:44:66:c3:89:8a:15:1e:0a:26:10:d7:20:af:87: bd:3c:06:1c:81:3f:5f:29:94:87:cc:81:1e:05:44:a7:4e:65: 42:56:b6:da:a0:77:0f:46:73:24:b5:5e:e4:98:f6:bc:f3:19: 5c:37:fd:4d:29:90:87:38:4a:33:19:db:ec:12:9a:58:52:10: 68:ce:73:45:58:2e:71:09:02:2b:4f:e0:14:ca:63:18:5e:d2: 54:a1:e6:0e:98:47:43:f2:7b:3f:fe:d3:ef:7c:54:62:a6:09: 03:9c:b6:c5:79:04:19:75:ad:aa:61:7b:50:a8:37:d5:45:25: b3:79:68:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6n+BXLL7lDCCMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk MjkzOTVkNjEtNmQxYS00Y2JkLWEzNDAtMDNiZmVjMjMxMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQCQ2VMrqAsXql7B5YDzy8zfJvDG/oo5+7gt 2FRyP3FwX1iydgCpz9DkFBQJSXHtZdMtVETP7z7u57GKqCaVnXdF9zrRLkS28qy0 2QB44InGwh1Tf4PxXCZjWL2VQDy3zQQr9lMrtPq0VBTLBgsg5go+59N/oVcDZj5H A8IfMDEc3N+mLm2QrQJyED3TvwcVIuBAjtb4Sii0fMDMat9DQ6hhs4i9Zc2+lXg5 u2+fxevZMsfGRpQofWMQiyY3djaDoR+Vxf9N+CubLwTDpqU4AIwsVt9ZgGVHCUuM AcYAGQvgPmJVflfpcE1vjqaWdqg7fexyE9BdOp6cVvitt61AxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/nwRaq462ciASyMWr3EbIM7DzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvY2YyNTdkMWUtMDllYy0z MDUzLWJlMzMtMjRlNzg2ODQ3MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMYU0tM2+mBGKjGnQV9m5tkA77H+4RMA1twJ01x7Z5oufWOjfruEi1j jOqSmgmrc+4uEaAWchIrjOMCdtSA9X6baAtjBd5bCb8hpPFjHJ7tvjV7Fzh4ejjc 99FuqnFdGrVLqi4mOtJYF4II2aUvq1Hfze7z3XHyodrr9+xx0zQNFphEZsOJihUe CiYQ1yCvh708BhyBP18plIfMgR4FRKdOZUJWttqgdw9GcyS1XuSY9rzzGVw3/U0p kIc4SjMZ2+wSmlhSEGjOc0VYLnEJAitP4BTKYxhe0lSh5g6YR0Pyez/+0+98VGKm CQOctsV5BBl1raphe1CoN9VFJbN5aCc= -----END CERTIFICATE-----Generated at Fri Jul 24 15:21:07 2026 by rpki-client