$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa File: cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa (raw, json) Hash identifier: W2IMTh1puEVpj4/QZ/hQiLdPg2po4quc/ws/aAMpR0A= Subject key identifier: 53:5C:C8:32:E9:07:80:EA:3D:A9:C3:06:68:EA:56:50:0F:50:52:C1 Certificate issuer: /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Certificate serial: 010D0C9F4328584E709F7C3182EA85A4A9CED030 Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 40346 IP address blocks: 199.48.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:7c:31:82:ea:85:a4:a9:ce:d0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=1e001ee5-4efd-471d-b186-62524617e6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e9:eb:43:69:ba:b4:73:bd:44:03:10:2a:8c: 95:9a:81:a9:72:24:e4:21:43:03:93:b2:12:1b:1e: a0:1d:b1:ca:66:ae:5b:e6:2e:59:65:b0:32:c9:16: 9d:95:44:00:db:72:43:17:4b:0b:a3:63:94:b3:85: 00:f9:12:18:55:ff:a0:ef:1c:d7:c6:12:07:05:8a: 71:45:22:e4:ce:f4:ba:e3:5e:94:82:1a:5f:a2:f6: ba:be:4b:a9:99:e7:79:b9:15:4b:b1:bf:02:8f:50: b4:3a:80:d9:71:90:b0:5b:3c:d4:ee:87:2c:39:dc: b7:08:c1:97:a9:9f:b2:fb:2e:5b:10:78:78:f7:e0: 54:0f:df:e6:a6:18:59:06:b7:81:fc:7e:cc:a4:c7: be:f9:3a:9a:ee:57:f6:95:59:e3:36:bc:81:20:65: 94:33:ea:20:0a:66:04:bd:36:e2:d8:25:f1:45:dd: 6f:2b:5d:c5:f2:87:49:4f:ac:eb:a2:06:b3:10:9a: 8a:70:55:91:38:f2:d1:12:7d:77:00:34:c9:64:55: c4:f8:40:ce:26:16:71:2d:50:aa:cb:97:e3:76:53: 14:c3:a8:3f:13:0e:91:0c:ff:83:ba:cd:02:61:3a: a3:a2:82:c7:27:4c:f9:61:13:e7:2c:85:d3:05:6b: 9f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:C8:32:E9:07:80:EA:3D:A9:C3:06:68:EA:56:50:0F:50:52:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl X509v3 Authority Key Identifier: keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer sbgp-ipAddrBlock: critical IPv4: 199.48.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b3:02:7e:df:bb:db:25:11:64:1c:20:00:21:96:95:48:76: 80:8e:a8:0b:ba:12:22:1a:a4:57:18:13:23:6a:8d:af:ec:9e: 41:6a:f2:90:84:01:23:ac:22:d2:51:5d:25:b3:89:50:79:60: e1:36:5a:f1:99:26:1f:dc:29:90:43:3d:55:90:b4:03:9d:16: b9:0f:5a:21:89:99:5c:88:ec:57:48:63:6f:15:8c:17:5e:72: d0:92:86:22:97:d6:eb:ad:a4:89:a3:c3:38:1c:f5:d0:bb:8c: d8:ba:f8:47:b4:0a:16:c8:a7:76:c7:d0:80:a7:26:fe:cb:99: 05:de:87:66:13:a6:a9:ec:69:a8:3b:9c:8e:f5:ef:fd:54:19: 07:af:67:dd:b3:91:fc:b9:d0:e8:d7:1e:e6:41:c3:c3:7e:d4: 95:bc:57:ab:d2:f0:32:81:8c:50:3e:38:5b:57:03:1f:e0:8a: b3:7f:15:26:17:be:60:61:06:31:28:d6:a7:a3:6c:43:b7:be: ca:1a:cb:98:f2:e9:01:a9:9a:60:c0:fe:57:f0:62:87:a9:ae: 19:97:7d:63:f1:88:7d:a7:f6:41:a0:41:13:32:55:19:3d:9d: 61:12:18:93:d1:8f:11:5b:05:ab:6d:b8:76:db:c3:d1:88:94: 72:dc:ee:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3wxguqFpKnO0DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNl ZTFjMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk MWUwMDFlZTUtNGVmZC00NzFkLWIxODYtNjI1MjQ2MTdlNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgenrQ2m6tHO9RAMQKoyVmoGpciTkIUMDk7IS Gx6gHbHKZq5b5i5ZZbAyyRadlUQA23JDF0sLo2OUs4UA+RIYVf+g7xzXxhIHBYpx RSLkzvS6416Ughpfova6vkupmed5uRVLsb8Cj1C0OoDZcZCwWzzU7ocsOdy3CMGX qZ+y+y5bEHh49+BUD9/mphhZBreB/H7MpMe++Tqa7lf2lVnjNryBIGWUM+ogCmYE vTbi2CXxRd1vK13F8odJT6zrogazEJqKcFWROPLREn13ADTJZFXE+EDOJhZxLVCq y5fjdlMUw6g/Ew6RDP+Dus0CYTqjooLHJ0z5YRPnLIXTBWufMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNcyDLpB4DqPanDBmjqVlAPUFLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWIy ZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvY2RkYmJkMWEtNmExNC0z YzQyLThmMWEtYzYzYzE3ZTI3OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODViMmRlNzMtMWQ0Mi00NTk1LThj YjEtOWU4MmQ4NzNlZTFjLzg1YjJkZTczLTFkNDItNDU5NS04Y2IxLTllODJkODcz ZWUxYy5jcmwwHwYDVR0jBBgwFoAUDZZu5jXUDNAQcPj1eFHCR/T2DC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgy ZDg3M2VlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqzAn7fu9slEWQcIAAhlpVIdoCOqAu6EiIapFcYEyNqja/snkFq8pCE ASOsItJRXSWziVB5YOE2WvGZJh/cKZBDPVWQtAOdFrkPWiGJmVyI7FdIY28VjBde ctCShiKX1uutpImjwzgc9dC7jNi6+Ee0ChbIp3bH0ICnJv7LmQXeh2YTpqnsaag7 nI717/1UGQevZ92zkfy50OjXHuZBw8N+1JW8V6vS8DKBjFA+OFtXAx/girN/FSYX vmBhBjEo1qejbEO3vsoay5jy6QGpmmDA/lfwYoeprhmXfWPxiH2n9kGgQRMyVRk9 nWESGJPRjxFbBattuHbbw9GIlHLc7uI= -----END CERTIFICATE-----Generated at Fri Jul 24 15:50:21 2026 by rpki-client