$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa File: 6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa (raw, json) Hash identifier: 6rhj5z8IjZxLNS3vRugNvckeQzYB3xPbiP/kvmANgpo= Subject key identifier: FD:C9:E9:66:F5:02:9B:00:37:C2:3E:8D:26:F1:AF:E7:0B:2E:29:26 Certificate issuer: /CN=adff0409-d8b3-46fb-a7e7-b062e9eb9abc Certificate serial: 010D0C9F4328584E4AEF32D9BE5DEB5322FB6480 Authority key identifier: 61:5A:FA:16:90:2D:E0:2A:46:B6:5B:C2:47:D3:18:35:58:11:B0:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 32478 IP address blocks: 199.19.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:32:d9:be:5d:eb:53:22:fb:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adff0409-d8b3-46fb-a7e7-b062e9eb9abc Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=08d4de1d-da18-43e3-9842-ba70ac525611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:59:bb:45:00:55:75:5b:77:ac:c5:d7:79: 4f:26:41:f8:5e:03:60:8b:8c:43:8a:3b:d0:2a:f7: 34:01:57:5c:96:b8:96:4c:83:78:4b:20:07:a9:d7: 9a:87:28:19:f9:45:62:55:cd:85:a4:4c:84:9e:54: 06:21:cc:96:bf:9a:d3:f1:91:f1:a7:1a:98:7e:14: a4:28:97:34:b7:d1:e0:bb:be:0b:01:49:e0:3f:ef: 65:74:8b:b3:27:ad:36:0e:ea:01:ae:39:1b:37:33: 93:b3:fb:40:69:44:bb:63:87:6b:f4:bd:ea:35:f1: 3e:71:8b:c4:b3:dc:e6:02:4e:1e:8b:74:a1:94:cc: d9:41:76:e6:93:c1:a4:74:b4:9e:08:01:98:d0:9e: 91:7b:69:05:43:41:82:31:98:f0:ef:f1:df:14:a4: ee:06:4a:56:2b:c9:dd:5a:bf:c7:42:55:33:a0:18: 99:f2:1e:9e:67:77:00:0f:e8:80:6a:d4:1c:0a:ba: 6b:7b:b4:56:f2:9f:12:8a:6a:33:5c:c9:20:06:43: 0d:83:79:42:68:01:12:3b:b5:1f:b5:3c:84:65:ba: 28:e5:51:5f:51:b3:3b:61:9a:a5:2d:54:1a:f8:89: 75:79:97:cb:3a:b1:24:f0:55:e4:99:6e:61:6a:1d: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C9:E9:66:F5:02:9B:00:37:C2:3E:8D:26:F1:AF:E7:0B:2E:29:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.crl X509v3 Authority Key Identifier: keyid:61:5A:FA:16:90:2D:E0:2A:46:B6:5B:C2:47:D3:18:35:58:11:B0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer sbgp-ipAddrBlock: critical IPv4: 199.19.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:61:c6:78:7b:5e:f3:70:5f:69:f1:17:29:03:83:7d:e7:85: a0:8d:7a:f3:aa:11:66:8d:fe:ba:bd:57:b3:fb:0e:b5:64:e6: cf:c4:e0:d3:c2:96:11:bf:2e:4b:dc:0a:12:05:9c:61:2d:6e: a6:90:8d:4d:d2:87:de:47:2b:1f:70:39:d8:30:71:65:bc:36: 81:64:40:7f:a6:31:9c:76:b2:6e:0f:73:4b:d5:77:09:37:0c: 5a:88:db:92:56:68:75:84:2c:6d:09:74:9b:c2:bc:f8:13:2b: 21:3d:32:fa:3b:e4:56:c2:e7:ce:c7:b1:db:66:de:5f:13:bb: 21:0b:82:7d:00:7f:c4:60:8a:70:88:20:96:7d:a2:3d:d9:0e: 71:b8:93:a4:32:df:47:b0:cd:2c:c1:f9:14:3d:bd:2e:45:c0: 4b:e5:36:07:bf:8c:34:80:ef:bf:30:25:25:42:da:08:64:cb: 99:68:d2:f7:4e:f8:15:eb:e6:f5:40:8c:00:6f:aa:81:9b:c4: d5:0b:10:91:38:05:9c:6b:23:21:d9:fb:f1:13:58:51:1b:31: 27:06:50:7f:44:db:91:9f:e3:26:c1:0f:24:5b:3b:21:01:58: 25:15:f0:36:d9:f8:3d:2c:d7:2b:b1:dc:26:e3:32:01:ab:70: 04:ed:c1:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7zLZvl3rUyL7ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRmZjA0MDktZDhiMy00NmZiLWE3ZTctYjA2MmU5ZWI5 YWJjMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MDhkNGRlMWQtZGExOC00M2UzLTk4NDItYmE3MGFjNTI1NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKNZu0UAVXVbd6zF13lPJkH4XgNgi4xDijvQ Kvc0AVdclriWTIN4SyAHqdeahygZ+UViVc2FpEyEnlQGIcyWv5rT8ZHxpxqYfhSk KJc0t9Hgu74LAUngP+9ldIuzJ602DuoBrjkbNzOTs/tAaUS7Y4dr9L3qNfE+cYvE s9zmAk4ei3ShlMzZQXbmk8GkdLSeCAGY0J6Re2kFQ0GCMZjw7/HfFKTuBkpWK8nd Wr/HQlUzoBiZ8h6eZ3cAD+iAatQcCrpre7RW8p8SimozXMkgBkMNg3lCaAESO7Uf tTyEZboo5VFfUbM7YZqlLVQa+Il1eZfLOrEk8FXkmW5hah3lFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3J6Wb1ApsAN8I+jSbxr+cLLikmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZGZm MDQwOS1kOGIzLTQ2ZmItYTdlNy1iMDYyZTllYjlhYmMvNmZmM2M3ZTctMTBiNi0z OTJiLTljOTktZjEzYzM2ZDhlNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWRmZjA0MDktZDhiMy00NmZiLWE3 ZTctYjA2MmU5ZWI5YWJjL2FkZmYwNDA5LWQ4YjMtNDZmYi1hN2U3LWIwNjJlOWVi OWFiYy5jcmwwHwYDVR0jBBgwFoAUYVr6FpAt4CpGtlvCR9MYNVgRsMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZGZmMDQwOS1kOGIzLTQ2ZmItYTdlNy1iMDYy ZTllYjlhYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZhxnh7XvNwX2nxFykDg33nhaCNevOqEWaN/rq9V7P7DrVk5s/E4NPC lhG/LkvcChIFnGEtbqaQjU3Sh95HKx9wOdgwcWW8NoFkQH+mMZx2sm4Pc0vVdwk3 DFqI25JWaHWELG0JdJvCvPgTKyE9Mvo75FbC587Hsdtm3l8TuyELgn0Af8RginCI IJZ9oj3ZDnG4k6Qy30ewzSzB+RQ9vS5FwEvlNge/jDSA778wJSVC2ghky5lo0vdO +BXr5vVAjABvqoGbxNULEJE4BZxrIyHZ+/ETWFEbMScGUH9E25Gf4ybBDyRbOyEB WCUV8DbZ+D0s1yux3CbjMgGrcATtwQQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:32:11 2026 by rpki-client