$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa File: bd8c4790-3fa7-3392-86ba-87e9adece526.roa (raw, json) Hash identifier: NqdP3/oCRlWD6L7xtcwFubvWAu7CPN6B94vr6o3b4Gc= Subject key identifier: 6A:5F:ED:01:80:FB:BA:0B:C3:CA:6C:77:4A:DD:0C:CE:13:AD:F9:66 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584E78FF7F78D884A80A702793C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 199.36.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7f:78:d8:84:a8:0a:70:27:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=8de46ca3-d5c2-4fe1-8bc1-a89bca47763b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:0f:7e:8c:a2:eb:dc:75:da:f7:3d:c5:32: 84:c7:10:65:0e:1c:e8:12:2f:7d:84:ee:48:42:d3: 15:ed:ef:5a:65:37:f8:4e:18:ec:ac:a4:74:e6:26: 02:7d:e8:96:38:f9:dd:d0:6b:ed:26:7b:b9:25:03: 9b:a4:e6:2f:a6:7f:91:98:58:cb:d1:b5:74:b7:05: fa:54:e1:d2:50:1d:cc:1b:8b:2f:be:32:b7:8b:86: 2d:06:2e:be:ca:08:b3:c4:00:d0:02:15:1e:d3:c1: 67:dd:18:c2:66:e0:56:58:a7:9b:38:e7:e6:94:d4: cf:ef:d5:28:68:8a:b4:ca:06:0d:3a:b2:13:22:dd: 11:07:35:d4:2e:fc:e0:f5:77:57:b8:ec:c6:f9:30: ae:f9:a8:c8:09:30:ba:4c:8d:71:32:6e:47:03:67: 77:55:d7:d3:ea:bc:43:25:f4:ec:ca:3c:fb:86:62: 7b:9d:c2:f7:35:2a:ac:b6:58:be:42:83:97:6a:47: f0:d4:b4:5e:61:2e:1e:e8:eb:3e:b9:12:df:7a:ff: 42:fb:d5:27:83:21:de:eb:a9:ea:6e:b0:6f:ee:8b: ac:ee:0c:64:37:d5:a4:cb:c6:92:e1:0f:64:81:ff: f9:b0:c5:55:01:42:03:2b:32:36:b2:3f:7d:46:ec: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5F:ED:01:80:FB:BA:0B:C3:CA:6C:77:4A:DD:0C:CE:13:AD:F9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:35:11:b6:9e:f4:7b:0a:ee:94:71:52:9c:46:4d:90:53:9d: cd:8f:61:33:f8:90:e9:dc:21:0f:53:63:69:52:fb:ca:6e:d5: 00:6c:95:09:03:16:84:e2:52:b7:44:6c:c8:25:93:7e:34:a0: a3:21:cf:6d:a8:5e:82:6d:6f:84:8d:07:ce:41:4c:47:7c:ec: 29:0f:21:10:c0:3c:d2:f9:22:b1:b2:73:bb:da:e3:4c:d1:2b: 2e:2e:46:d2:a8:4a:3b:b3:63:55:60:2b:63:b9:2e:d6:44:fc: 2b:97:bd:52:40:ac:4b:40:34:38:62:46:b0:97:ff:86:fe:68: fd:15:e9:4f:7a:ac:83:fc:a7:1b:98:fa:51:6b:db:1d:5e:8e: db:41:b8:b3:da:73:45:6b:30:8b:f2:57:52:74:5b:d9:2e:de: 5b:dd:99:53:85:8e:01:aa:46:8f:2a:a9:6d:22:86:8b:49:d0: f6:47:e3:fa:ae:68:e9:b2:4a:ac:be:88:be:af:9a:ad:bc:c7: a7:34:e4:34:ee:4f:0d:69:24:d0:39:39:3a:8a:9a:1b:e1:81: 99:60:28:07:7c:d2:82:88:ef:09:d8:10:d1:b4:97:14:ea:ce: 04:bb:45:ca:28:50:ac:9c:09:46:2a:67:2f:69:b7:5b:1e:7d: fd:13:ba:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3942ISoCnAnk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk OGRlNDZjYTMtZDVjMi00ZmUxLThiYzEtYTg5YmNhNDc3NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkgPfoyi69x12vc9xTKExxBlDhzoEi99hO5I QtMV7e9aZTf4ThjsrKR05iYCfeiWOPnd0GvtJnu5JQObpOYvpn+RmFjL0bV0twX6 VOHSUB3MG4svvjK3i4YtBi6+ygizxADQAhUe08Fn3RjCZuBWWKebOOfmlNTP79Uo aIq0ygYNOrITIt0RBzXULvzg9XdXuOzG+TCu+ajICTC6TI1xMm5HA2d3VdfT6rxD JfTsyjz7hmJ7ncL3NSqstli+QoOXakfw1LReYS4e6Os+uRLfev9C+9UngyHe66nq brBv7ous7gxkN9Wky8aS4Q9kgf/5sMVVAUIDKzI2sj99RuzQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpf7QGA+7oLw8psd0rdDM4TrflmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmQ4YzQ3OTAtM2ZhNy0z MzkyLTg2YmEtODdlOWFkZWNlNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM1Ebae9HsK7pRxUpxGTZBTnc2PYTP4kOncIQ9TY2lS+8pu1QBslQkD FoTiUrdEbMglk340oKMhz22oXoJtb4SNB85BTEd87CkPIRDAPNL5IrGyc7va40zR Ky4uRtKoSjuzY1VgK2O5LtZE/CuXvVJArEtANDhiRrCX/4b+aP0V6U96rIP8pxuY +lFr2x1ejttBuLPac0VrMIvyV1J0W9ku3lvdmVOFjgGqRo8qqW0ihotJ0PZH4/qu aOmySqy+iL6vmq28x6c05DTuTw1pJNA5OTqKmhvhgZlgKAd80oKI7wnYENG0lxTq zgS7RcooUKycCUYqZy9pt1seff0Tuo4= -----END CERTIFICATE-----Generated at Fri Jul 24 14:31:22 2026 by rpki-client