$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6358ef20-dd34-30bc-84bf-9045e5b9b116.roa File: 6358ef20-dd34-30bc-84bf-9045e5b9b116.roa (raw, json) Hash identifier: d8vRRVg9t9zJgLfkIG0KPEDQY/Yi0IxOLWi8m2gSUic= Subject key identifier: D1:22:0A:B3:69:5D:32:1C:04:C2:96:B3:8A:F5:6E:2C:FE:B5:E4:D4 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584DA6B0105F1EF2E77A54A4B780 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6358ef20-dd34-30bc-84bf-9045e5b9b116.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 62907 IP address blocks: 199.168.149.0/24 maxlen: 24 199.168.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:10:5f:1e:f2:e7:7a:54:a4:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=55dd2385-43bd-4df9-8bc8-109dc38a3f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:81:b2:17:39:8a:f8:c1:b9:17:bc:be:2b: 53:37:c8:5b:3b:03:8d:05:87:18:f9:47:89:cd:e6: a2:0f:03:b4:c9:2a:ca:37:52:77:df:10:89:ab:ec: dc:74:9b:34:34:ff:8d:95:cc:48:f8:25:5c:dd:20: ce:e1:7e:db:4c:d5:e4:4c:09:d7:2a:04:3b:44:bd: fa:c2:08:d4:37:0e:2c:89:5e:d5:15:d0:50:27:c0: 7e:db:91:89:07:f6:2c:8a:2f:17:8f:fa:d9:65:99: de:1f:7e:fb:7a:66:2e:d9:10:85:de:d3:05:de:42: 6f:8b:a1:6c:b7:7f:26:0d:22:12:40:9e:05:a4:34: 2c:95:89:0a:ee:1e:4f:69:2e:76:60:41:7b:d4:64: 2d:87:05:6d:b0:14:99:65:8f:44:10:d5:68:b1:a2: 89:99:3a:d7:fc:ae:09:41:a3:2e:e4:16:e6:b3:e4: bd:4d:48:c8:c5:08:85:27:55:a3:79:4c:f6:60:3f: 19:59:56:2f:e5:5d:67:78:52:1e:97:f8:07:17:83: 38:40:71:b4:ad:ba:ed:df:14:43:47:82:86:e5:27: 23:32:2f:39:dd:ba:b1:ee:31:68:1e:11:ed:df:0c: 5d:bf:db:56:25:d8:88:84:31:70:7d:15:31:d5:58: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:0A:B3:69:5D:32:1C:04:C2:96:B3:8A:F5:6E:2C:FE:B5:E4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6358ef20-dd34-30bc-84bf-9045e5b9b116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 199.168.149.0-199.168.150.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b8:2f:42:45:7f:9c:5e:4e:59:09:36:f6:d0:64:9b:42:41: 52:95:1b:e1:70:0b:a4:03:be:24:a8:e7:1e:d9:66:e3:a6:14: 1e:73:14:f6:3c:5b:58:f1:e1:f0:fa:51:76:f8:4d:60:32:7b: 6a:98:05:7a:94:4d:8f:0d:d7:61:1d:d2:53:29:b3:2e:f4:b1: e0:94:65:2c:a2:6e:12:df:e3:55:4c:2d:60:5b:11:4a:01:c0: 8f:f4:74:a7:1f:c9:41:bd:6d:f5:c8:b9:6f:15:8b:54:82:ce: 90:98:96:47:5a:73:a4:1d:57:1c:12:3f:a9:7b:1c:06:dc:80: f1:60:13:f9:bc:05:06:6a:1f:ad:a8:6c:59:d5:19:58:69:5c: b7:53:0e:62:2d:8d:88:fd:27:8f:99:cb:a6:6d:cc:31:fc:04: 92:61:1f:a3:34:e9:9f:f3:be:a9:f9:bf:53:dc:d9:ee:a9:d2: 21:0f:c3:ce:e8:52:e0:4c:dc:57:73:be:f8:b4:b1:45:eb:8c: cf:6e:e0:df:0b:35:27:ec:df:ec:41:3f:46:e8:a7:aa:44:d3: 6c:5b:05:43:0c:5c:2d:e2:75:6d:3d:08:a9:b8:e8:bb:66:bc: a1:81:a5:a1:3c:f4:cd:bc:53:9e:b4:cb:34:c9:22:ed:9b:b7: 81:1a:e1:d6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2msBBfHvLnelSkt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTVkZDIzODUtNDNiZC00ZGY5LThiYzgtMTA5ZGMzOGEzZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEyBshc5ivjBuRe8vitTN8hbOwONBYcY+UeJ zeaiDwO0ySrKN1J33xCJq+zcdJs0NP+NlcxI+CVc3SDO4X7bTNXkTAnXKgQ7RL36 wgjUNw4siV7VFdBQJ8B+25GJB/Ysii8Xj/rZZZneH377emYu2RCF3tMF3kJvi6Fs t38mDSISQJ4FpDQslYkK7h5PaS52YEF71GQthwVtsBSZZY9EENVosaKJmTrX/K4J QaMu5Bbms+S9TUjIxQiFJ1WjeUz2YD8ZWVYv5V1neFIel/gHF4M4QHG0rbrt3xRD R4KG5ScjMi853bqx7jFoHhHt3wxdv9tWJdiIhDFwfRUx1VgHbQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNEiCrNpXTIcBMKWs4r1biz+teTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjM1OGVmMjAtZGQzNC0z MGJjLTg0YmYtOTA0NWU1YjliMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADHqJUD BADHqJYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAU7gvQkV/nF5OWQk29tBkm0JBUpUb4XALpAO+JKjnHtlm 46YUHnMU9jxbWPHh8PpRdvhNYDJ7apgFepRNjw3XYR3SUymzLvSx4JRlLKJuEt/j VUwtYFsRSgHAj/R0px/JQb1t9ci5bxWLVILOkJiWR1pzpB1XHBI/qXscBtyA8WAT +bwFBmofrahsWdUZWGlct1MOYi2NiP0nj5nLpm3MMfwEkmEfozTpn/O+qfm/U9zZ 7qnSIQ/DzuhS4EzcV3O++LSxReuMz27g3ws1J+zf7EE/RuinqkTTbFsFQwxcLeJ1 bT0Iqbjou2a8oYGloTz0zbxTnrTLNMki7Zu3gRrh1g== -----END CERTIFICATE-----Generated at Wed Apr 29 11:20:05 2026 by rpki-client