$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json) Hash identifier: qo2W0fWUQKN1ba9tH+lwT13QWj7hdyihv8gOsWFO4Bw= Subject key identifier: FA:03:C0:EC:11:65:D2:14:E0:48:78:2E:5E:81:D3:E8:7D:7C:9A:A2 Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Certificate serial: 010D0C9F4328584E6F3A1BF7C858DA043D3963C0 Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 397681 IP address blocks: 192.219.99.0/24 maxlen: 24 198.168.2.0/24 maxlen: 24 199.202.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:1b:f7:c8:58:da:04:3d:39:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=03a989b7-dd95-4966-b956-acef6c77f67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:de:01:3d:7d:90:e3:b8:8b:2b:05:60:eb: b2:81:70:4a:f7:ce:e9:48:93:a1:9a:27:8a:d6:b4: 12:77:68:f9:17:fb:d9:4a:6d:c9:ca:a6:f1:49:51: 90:17:7f:cc:54:aa:b9:1c:5a:e6:79:00:bf:a3:73: 6d:88:65:6e:19:15:fb:68:d5:ed:a6:50:15:5b:8c: ff:4a:aa:55:60:9f:9e:6a:12:a7:71:45:86:19:6d: 58:d8:56:a6:bd:20:34:a6:ed:6f:09:d1:97:b5:d2: 28:e0:13:c8:99:08:97:7f:66:83:b0:36:0e:1b:b1: be:7f:2e:ce:f2:a5:e2:c9:00:53:00:5d:90:68:4c: bc:9f:16:89:76:70:0c:df:b6:4d:aa:29:39:d4:de: 52:38:9e:8d:7e:3d:f7:39:cb:b1:51:d2:f8:be:ac: 5d:a3:2e:fe:18:b2:25:9c:b3:6d:38:23:4d:e1:dc: 83:12:b1:47:06:e0:78:5e:7f:2d:bb:63:ef:6c:7b: ad:a4:57:aa:31:5f:90:ee:23:eb:d3:4c:77:c6:f3: 13:0d:0d:78:72:de:ed:08:27:cf:1d:fa:e4:3f:b7: ed:0b:82:dc:1f:25:ef:30:56:f4:97:b1:ef:22:da: ba:d5:ec:ce:2d:6a:fe:cd:4f:48:17:2a:b7:41:0b: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:03:C0:EC:11:65:D2:14:E0:48:78:2E:5E:81:D3:E8:7D:7C:9A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl X509v3 Authority Key Identifier: keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer sbgp-ipAddrBlock: critical IPv4: 192.219.99.0/24 198.168.2.0/24 199.202.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e2:de:9e:cd:54:04:7a:30:de:79:dd:fd:60:25:e1:c6:fc: 86:d4:8d:d9:d4:6f:88:0a:5e:e2:83:d5:6a:c8:c2:7a:ec:1a: 65:75:ba:0b:c8:3d:41:5e:f5:a3:a1:c3:a2:30:ca:09:26:c8: bf:af:a4:b5:63:77:56:94:d1:c8:54:75:e3:cc:4d:d6:64:fe: 50:cf:55:03:85:2e:a8:70:ef:ad:59:04:cb:cc:44:2d:86:7a: 02:51:bb:0a:e9:c6:e8:71:d1:35:be:fc:e1:de:82:63:81:ab: 6d:c0:d0:9e:8a:7c:73:98:20:2d:fe:09:44:54:6a:58:b2:ab: 34:59:de:1f:6a:df:49:fb:01:c3:cb:6e:d4:a3:26:a3:ac:a6: aa:16:b3:94:f1:2f:58:96:fe:48:57:b0:ff:b5:e6:c7:04:72: a4:42:c6:05:e9:21:e1:6e:e0:4b:8e:5a:03:ba:9b:ee:91:ea: 34:d0:ce:34:25:7c:51:07:24:b5:87:89:59:df:6e:af:cd:40: 38:ea:6f:c0:d9:18:06:39:60:ed:0a:35:e1:7c:61:af:25:89: e9:3f:77:aa:ec:43:75:23:d5:e5:e3:70:32:31:e5:5e:2d:e6: ac:32:21:ad:e2:c8:bc:eb:91:03:47:d6:40:b1:d4:c8:32:38: d6:12:55:ec -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5vOhv3yFjaBD05Y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5NGFmMzAtYThlOC00MmI0LTllNDMtNjQ5NDM3YzBj YWM3MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MDNhOTg5YjctZGQ5NS00OTY2LWI5NTYtYWNlZjZjNzdmNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWLeAT19kOO4iysFYOuygXBK987pSJOhmieK 1rQSd2j5F/vZSm3JyqbxSVGQF3/MVKq5HFrmeQC/o3NtiGVuGRX7aNXtplAVW4z/ SqpVYJ+eahKncUWGGW1Y2FamvSA0pu1vCdGXtdIo4BPImQiXf2aDsDYOG7G+fy7O 8qXiyQBTAF2QaEy8nxaJdnAM37ZNqik51N5SOJ6Nfj33OcuxUdL4vqxdoy7+GLIl nLNtOCNN4dyDErFHBuB4Xn8tu2PvbHutpFeqMV+Q7iPr00x3xvMTDQ14ct7tCCfP HfrkP7ftC4LcHyXvMFb0l7HvItq61ezOLWr+zU9IFyq3QQtd2wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPoDwOwRZdIU4Eh4Ll6B0+h9fJqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0 YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0MzdjMGNhYzcvODM4NjQzZDUtN2ZmZS0z OGJmLWI1MWYtNWFmZGNkMmE1NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGY5NGFmMzAtYThlOC00MmI0LTll NDMtNjQ5NDM3YzBjYWM3L2RmOTRhZjMwLWE4ZTgtNDJiNC05ZTQzLTY0OTQzN2Mw Y2FjNy5jcmwwHwYDVR0jBBgwFoAUSlVhvCQAUxXcn0jPVU/W2Iri/LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0 MzdjMGNhYzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwNtjAwQA xqgCAwQAx8pbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIvi3p7NVAR6MN553f1gJeHG/IbUjdnUb4gKXuKD 1WrIwnrsGmV1ugvIPUFe9aOhw6IwygkmyL+vpLVjd1aU0chUdePMTdZk/lDPVQOF Lqhw761ZBMvMRC2GegJRuwrpxuhx0TW+/OHegmOBq23A0J6KfHOYIC3+CURUaliy qzRZ3h9q30n7AcPLbtSjJqOspqoWs5TxL1iW/khXsP+15scEcqRCxgXpIeFu4EuO WgO6m+6R6jTQzjQlfFEHJLWHiVnfbq/NQDjqb8DZGAY5YO0KNeF8Ya8liek/d6rs Q3Uj1eXjcDIx5V4t5qwyIa3iyLzrkQNH1kCx1MgyONYSVew= -----END CERTIFICATE-----Generated at Fri Jul 24 09:31:41 2026 by rpki-client