$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa File: 295fda47-ec78-359b-8a00-77909cf1ddfb.roa (raw, json) Hash identifier: zJ9wAsziUttgpfj3l8OQaDX2XiAkOANMT3rX7SzfqSs= Subject key identifier: 15:87:03:CE:48:04:46:41:37:5E:4A:47:4A:6F:4D:2F:B9:EF:B0:2B Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584E7E9504A7F290BCD368CF7CA0 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 199.7.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:04:a7:f2:90:bc:d3:68:cf:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=e3e3a313-cca4-4d7a-91f8-f36a70ddf98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:d6:38:dd:51:e2:47:66:8a:f9:e1:1d:6e: ad:16:ee:0d:a9:ec:64:b0:f9:94:92:1b:86:b8:c9: 77:3f:ca:26:97:cc:80:8c:b1:aa:da:2e:ca:69:b4: bb:e5:b7:03:a3:f3:51:f2:4f:dd:6d:7d:6d:b8:ba: c2:06:49:08:4b:36:6a:f0:a2:9a:03:80:7f:50:dd: c9:17:f8:49:85:f0:47:74:11:f6:67:5f:4c:c7:3f: 92:5f:db:51:f4:d0:7c:34:d3:dd:8d:76:d9:e3:d1: 5c:b1:5a:75:a3:e9:8b:e5:00:c1:4b:a7:58:d4:18: e2:d7:8a:88:5b:7a:c2:6d:28:42:60:00:e0:45:51: 92:23:ae:cc:d0:68:5d:48:4a:03:ff:de:c0:02:e6: 91:28:cf:1c:b6:46:1b:84:5a:cf:6c:c2:d2:7f:ec: 32:3d:d2:a0:59:f4:94:2e:e3:e5:24:3f:90:26:f3: ff:da:39:19:5e:97:af:77:3e:32:0d:fc:fb:30:36: cc:48:c9:b5:fc:b7:ac:41:2a:21:a5:25:03:9f:54: 65:e6:cd:e8:fb:77:fc:ab:2e:36:9c:04:73:87:b8: 4d:6c:66:a2:d9:55:17:17:82:09:8a:3d:9d:1d:3f: 30:0e:51:9d:05:1f:1e:42:cb:00:5f:30:3c:40:1d: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:87:03:CE:48:04:46:41:37:5E:4A:47:4A:6F:4D:2F:B9:EF:B0:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8e:7b:1e:80:7d:89:d5:a4:2e:f1:3f:87:7e:1e:71:a4:e0: f1:68:d9:cc:6e:df:3a:20:06:d1:b1:86:74:81:18:4a:cc:56: c8:d9:62:8a:9c:d7:bc:35:7d:5c:9e:1a:0c:63:7e:14:44:79: 34:ce:a1:6e:29:c2:67:fe:1b:3a:97:10:3d:a1:86:09:71:ff: 22:15:b0:58:88:a1:cc:f2:ee:a9:5e:80:f5:72:ff:3a:18:76: d9:1f:34:16:11:40:d3:f6:46:72:9e:24:87:e6:d1:76:65:24: d9:97:ac:a6:12:bd:89:84:2a:19:6b:ea:b6:91:c5:93:3d:60: 36:be:24:fe:24:8b:48:9c:3a:f4:e6:c7:b3:aa:1a:50:0a:51: f5:5c:31:44:9a:6a:e3:95:55:3b:e1:45:f4:a9:6e:b8:e1:68: 9f:f2:23:70:64:4d:d8:55:92:10:e4:ec:1d:d9:a9:3e:4a:ce: 2f:5d:56:c9:55:60:8a:33:d1:40:3e:1d:0f:92:f0:79:73:c5: 55:08:b2:3b:6c:ff:7e:06:cc:92:21:62:22:8c:e9:a2:52:a8: e5:4a:77:3b:42:ad:c7:c7:ea:03:9d:51:86:fc:1b:7e:87:91: 73:58:e4:f8:3d:c0:68:d5:3e:20:f1:d9:ae:51:38:fb:de:72: 5f:4a:79:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQSn8pC802jPfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZTNlM2EzMTMtY2NhNC00ZDdhLTkxZjgtZjM2YTcwZGRmOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1TWON1R4kdmivnhHW6tFu4NqexksPmUkhuG uMl3P8oml8yAjLGq2i7KabS75bcDo/NR8k/dbX1tuLrCBkkISzZq8KKaA4B/UN3J F/hJhfBHdBH2Z19Mxz+SX9tR9NB8NNPdjXbZ49FcsVp1o+mL5QDBS6dY1Bji14qI W3rCbShCYADgRVGSI67M0GhdSEoD/97AAuaRKM8ctkYbhFrPbMLSf+wyPdKgWfSU LuPlJD+QJvP/2jkZXpevdz4yDfz7MDbMSMm1/LesQSohpSUDn1Rl5s3o+3f8qy42 nARzh7hNbGai2VUXF4IJij2dHT8wDlGdBR8eQssAXzA8QB20HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWHA85IBEZBN15KR0pvTS+577ArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvMjk1ZmRhNDctZWM3OC0z NTliLThhMDAtNzc5MDljZjFkZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiOex6AfYnVpC7xP4d+HnGk4PFo2cxu3zogBtGxhnSBGErMVsjZYoqc 17w1fVyeGgxjfhREeTTOoW4pwmf+GzqXED2hhglx/yIVsFiIoczy7qlegPVy/zoY dtkfNBYRQNP2RnKeJIfm0XZlJNmXrKYSvYmEKhlr6raRxZM9YDa+JP4ki0icOvTm x7OqGlAKUfVcMUSaauOVVTvhRfSpbrjhaJ/yI3BkTdhVkhDk7B3ZqT5Kzi9dVslV YIoz0UA+HQ+S8HlzxVUIsjts/34GzJIhYiKM6aJSqOVKdztCrcfH6gOdUYb8G36H kXNY5Pg9wGjVPiDx2a5ROPvecl9KebA= -----END CERTIFICATE-----Generated at Fri Jul 24 07:02:43 2026 by rpki-client