$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa File: df51f702-a91e-30cf-988e-dca1dd4d9a92.roa (raw, json) Hash identifier: FpaRqcmDx8cpAJlSshd/k5fT0oknge9axaP++ohMFG0= Subject key identifier: 92:88:D8:A9:1D:DC:CA:65:47:D1:20:29:50:42:72:B7:0D:B6:DA:65 Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584E7E9504BFD567780A7C0A5880 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 199.7.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:04:bf:d5:67:78:0a:7c:0a:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=6c89ad93-4004-462e-8b78-4c10c89ce617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:0a:38:a4:99:ab:ee:88:d5:2c:dc:3f:05: 00:27:e8:59:e4:f8:19:4b:63:40:07:ad:38:d1:89: 4b:36:d5:79:66:0d:d6:cf:f9:42:8c:e7:8b:9b:51: 16:49:e5:c5:1c:ee:55:78:5c:ac:21:e6:d1:d2:f3: 32:6a:98:75:1f:dc:e3:44:21:6b:f1:1a:d9:45:6d: 3d:d2:e5:5c:5e:02:5b:65:57:19:52:6b:0b:2c:cf: 91:b5:2b:a3:34:5a:c0:b7:15:05:1c:8e:40:ad:77: 40:14:2d:d2:36:a7:5a:b0:66:1b:5b:70:4f:69:9e: 3c:82:cf:b9:9f:48:0b:80:a5:c3:69:59:03:2f:3e: 5e:b9:05:0f:7c:87:d0:55:47:99:60:43:44:95:15: 46:a1:cc:42:61:36:85:37:f0:ac:97:ff:27:50:99: d9:de:6e:af:d4:8a:0e:61:55:0a:61:76:fc:38:8e: f9:f3:36:75:2b:61:6b:d7:ea:e2:6d:b0:cd:c6:0a: 3d:89:17:3e:b0:30:e8:01:c7:3d:43:25:3f:f2:2c: 91:cd:14:76:09:6f:e0:66:24:6e:c1:83:cd:f1:54: 0d:10:92:33:54:95:d6:6d:df:e0:d2:b5:87:28:8c: 5b:8a:3b:db:cb:f5:9b:4c:f1:ee:4c:30:83:c5:e5: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:88:D8:A9:1D:DC:CA:65:47:D1:20:29:50:42:72:B7:0D:B6:DA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:87:bc:47:6c:42:c5:01:5d:8b:25:f9:d4:39:28:e2:50:7b: 28:d3:ec:0b:09:0f:34:32:52:35:98:8b:89:31:b9:cf:98:16: 45:f6:98:b7:6f:92:60:1a:dd:47:b7:da:98:35:da:d6:a7:47: ac:88:21:76:22:4e:3d:41:ba:2a:99:da:e9:0b:39:3f:62:16: 2a:4a:e0:e0:00:7b:de:62:a3:e0:ef:aa:57:ff:6d:61:1e:a2: 44:90:2d:46:20:73:4f:2b:47:ac:1d:49:88:43:d8:25:7e:9f: 50:3b:1c:4a:1a:cf:50:c4:9a:6a:20:a9:14:fc:40:06:89:6c: e4:84:e3:2e:5d:b2:06:99:00:97:ab:21:5d:50:9c:01:b7:65: 8f:29:0e:55:e8:95:8e:34:7f:ea:90:46:93:ee:0c:8e:20:ff: 18:4c:ed:32:d1:32:9e:71:c8:fd:12:ab:4e:29:99:07:ec:d3: 14:d4:3a:20:7b:25:c3:e5:03:cd:f1:f5:2c:43:5b:27:e7:3f: 6b:ef:54:eb:66:53:31:73:30:5a:c2:be:37:28:ed:5e:2d:c7: 9a:9e:f1:00:67:8a:95:bb:b0:a5:bd:00:1e:58:69:cc:ce:28: 7c:26:13:8c:87:2d:ec:64:48:cc:bf:31:83:60:31:81:d8:3f: 8a:52:03:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQS/1Wd4CnwKWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NmM4OWFkOTMtNDAwNC00NjJlLThiNzgtNGMxMGM4OWNlNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KYKOKSZq+6I1SzcPwUAJ+hZ5PgZS2NAB604 0YlLNtV5Zg3Wz/lCjOeLm1EWSeXFHO5VeFysIebR0vMyaph1H9zjRCFr8RrZRW09 0uVcXgJbZVcZUmsLLM+RtSujNFrAtxUFHI5ArXdAFC3SNqdasGYbW3BPaZ48gs+5 n0gLgKXDaVkDLz5euQUPfIfQVUeZYENElRVGocxCYTaFN/Csl/8nUJnZ3m6v1IoO YVUKYXb8OI758zZ1K2Fr1+ribbDNxgo9iRc+sDDoAcc9QyU/8iyRzRR2CW/gZiRu wYPN8VQNEJIzVJXWbd/g0rWHKIxbijvby/WbTPHuTDCDxeWdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKI2Kkd3MplR9EgKVBCcrcNttplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvZGY1MWY3MDItYTkxZS0z MGNmLTk4OGUtZGNhMWRkNGQ5YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImHvEdsQsUBXYsl+dQ5KOJQeyjT7AsJDzQyUjWYi4kxuc+YFkX2mLdv kmAa3Ue32pg12tanR6yIIXYiTj1BuiqZ2ukLOT9iFipK4OAAe95io+Dvqlf/bWEe okSQLUYgc08rR6wdSYhD2CV+n1A7HEoaz1DEmmogqRT8QAaJbOSE4y5dsgaZAJer IV1QnAG3ZY8pDlXolY40f+qQRpPuDI4g/xhM7TLRMp5xyP0Sq04pmQfs0xTUOiB7 JcPlA83x9SxDWyfnP2vvVOtmUzFzMFrCvjco7V4tx5qe8QBnipW7sKW9AB5YaczO KHwmE4yHLexkSMy/MYNgMYHYP4pSA9s= -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:30 2026 by rpki-client