$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/3cb6cfae-e9fd-33fc-a8f1-026cbed0bfa1.roa File: 3cb6cfae-e9fd-33fc-a8f1-026cbed0bfa1.roa (raw, json) Hash identifier: SQImMOAOp0GMg7zapaPX7uJ+UpuYNJh2Fiup2w562vM= Subject key identifier: C1:00:DB:22:E6:40:0C:E6:12:8F:07:EC:3E:E6:87:21:9D:51:61:3E Certificate issuer: /CN=ac0ea4e2-e63b-46cd-93e8-df596b5aa776 Certificate serial: 010D0C9F4328584DD521E9A792FA1A0CDD2169C0 Authority key identifier: 45:37:40:A5:3A:77:D5:5C:4A:AF:00:BB:9F:B3:BE:E8:58:E8:51:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/3cb6cfae-e9fd-33fc-a8f1-026cbed0bfa1.roa Signing time: Thu 14 May 2026 16:17:05 +0000 ROA not before: Thu 14 May 2026 16:17:05 +0000 ROA not after: Wed 12 Aug 2026 15:45:37 +0000 asID: 20058 IP address blocks: 199.30.48.0/21 maxlen: 21 199.30.48.0/24 maxlen: 24 199.30.49.0/24 maxlen: 24 199.30.50.0/24 maxlen: 24 199.30.51.0/24 maxlen: 24 199.30.52.0/24 maxlen: 24 199.30.53.0/24 maxlen: 24 199.30.54.0/24 maxlen: 24 199.30.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d5:21:e9:a7:92:fa:1a:0c:dd:21:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0ea4e2-e63b-46cd-93e8-df596b5aa776 Validity Not Before: May 14 16:17:05 2026 GMT Not After : Aug 12 15:45:37 2026 GMT Subject: CN=2a41c7fe-21cd-4738-9ea6-8aa6521715a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:aa:eb:07:e9:d2:3e:72:a5:50:34:dc:cd: 31:c2:80:ec:21:5e:6e:12:ab:12:dd:fb:c5:75:94: cb:1f:01:b9:7a:c2:c4:c4:11:ec:40:89:43:b0:94: 67:fa:a2:d6:f2:64:41:e1:79:b6:8b:af:a1:a0:f4: 61:8e:7b:e1:29:22:79:3d:a5:1e:2a:fd:25:5d:82: 6d:f5:42:ad:70:0f:5b:a1:29:bd:44:75:f2:e8:cf: ba:7c:a2:24:c6:45:97:0e:59:c3:77:20:f0:d5:f9: 41:f3:eb:48:fb:bb:87:dd:94:cd:48:cd:c7:c9:b0: 7e:e8:13:8f:7d:82:2d:e2:e2:f8:cd:c7:96:3d:fe: 68:21:ec:a0:62:5b:c3:b5:c9:79:04:9b:78:15:17: 4a:08:91:8f:07:41:23:9e:08:1d:34:7b:de:41:c5: 87:18:59:58:a0:38:fc:eb:21:69:b6:d0:22:a9:e2: 96:0b:dc:4f:23:ee:28:95:91:dd:d1:68:11:8a:1a: c0:1a:37:79:ea:57:8b:3f:6c:7e:8c:99:5c:aa:31: 88:b4:76:1d:01:bc:d3:ea:8e:28:f2:dd:c1:ca:de: 79:3c:92:c6:5d:f4:5a:55:0e:11:65:e9:4f:bc:79: 0c:e5:3a:6d:1f:dd:a1:02:ae:48:97:b3:7c:41:d9: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:00:DB:22:E6:40:0C:E6:12:8F:07:EC:3E:E6:87:21:9D:51:61:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/3cb6cfae-e9fd-33fc-a8f1-026cbed0bfa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.crl X509v3 Authority Key Identifier: keyid:45:37:40:A5:3A:77:D5:5C:4A:AF:00:BB:9F:B3:BE:E8:58:E8:51:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ac0ea4e2-e63b-46cd-93e8-df596b5aa776.cer sbgp-ipAddrBlock: critical IPv4: 199.30.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f6:12:58:56:3a:58:c3:5f:54:58:c0:4d:63:a8:c6:b5:ea: 6d:f5:14:c3:b6:eb:15:9c:3c:2d:d7:c5:82:9e:21:bb:e2:83: e6:a6:03:45:a8:98:dd:0a:d1:33:ed:ee:af:f4:db:9a:9e:ee: d3:8a:d3:32:ad:b9:cd:8e:5f:df:e4:d9:3b:58:5e:ad:02:3a: eb:21:38:37:09:4f:3d:38:7a:2d:09:fe:2d:94:38:6f:39:74: d8:dc:85:d6:cb:11:c1:42:35:2e:2c:b2:83:a8:57:f2:b6:59: 13:c7:d0:a0:f9:b9:bb:00:f0:4b:7c:3a:2d:42:40:35:3b:fd: 60:08:c4:7e:cf:e9:b5:0c:34:f5:51:f5:87:de:c9:b3:fb:85: d4:8f:86:9a:e2:9e:c6:53:50:35:9e:87:89:59:90:e8:2d:7c: ca:1b:46:8c:ef:41:5d:8f:b8:07:a3:ba:de:d9:08:0e:af:30: 0c:29:93:e3:37:9f:00:a2:a6:5c:02:5d:4b:5d:14:73:42:36: 41:29:eb:3b:1e:46:32:65:e2:e5:16:10:5d:9d:9e:ae:92:d7: 06:7d:be:5e:4f:41:ab:b4:f8:cc:de:a3:4a:8f:6a:8f:72:a5: 17:d6:bf:a1:06:8f:bb:12:8a:27:26:28:94:c4:60:b0:d0:c5: d1:25:be:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3VIemnkvoaDN0hacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMwZWE0ZTItZTYzYi00NmNkLTkzZTgtZGY1OTZiNWFh Nzc2MB4XDTI2MDUxNDE2MTcwNVoXDTI2MDgxMjE1NDUzN1owLzEtMCsGA1UEAxMk MmE0MWM3ZmUtMjFjZC00NzM4LTllYTYtOGFhNjUyMTcxNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Wq6wfp0j5ypVA03M0xwoDsIV5uEqsS3fvF dZTLHwG5esLExBHsQIlDsJRn+qLW8mRB4Xm2i6+hoPRhjnvhKSJ5PaUeKv0lXYJt 9UKtcA9boSm9RHXy6M+6fKIkxkWXDlnDdyDw1flB8+tI+7uH3ZTNSM3HybB+6BOP fYIt4uL4zceWPf5oIeygYlvDtcl5BJt4FRdKCJGPB0EjnggdNHveQcWHGFlYoDj8 6yFpttAiqeKWC9xPI+4olZHd0WgRihrAGjd56leLP2x+jJlcqjGItHYdAbzT6o4o 8t3Byt55PJLGXfRaVQ4RZelPvHkM5TptH92hAq5Il7N8QdmE/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEA2yLmQAzmEo8H7D7mhyGdUWE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hYzBl YTRlMi1lNjNiLTQ2Y2QtOTNlOC1kZjU5NmI1YWE3NzYvM2NiNmNmYWUtZTlmZC0z M2ZjLWE4ZjEtMDI2Y2JlZDBiZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWMwZWE0ZTItZTYzYi00NmNkLTkz ZTgtZGY1OTZiNWFhNzc2L2FjMGVhNGUyLWU2M2ItNDZjZC05M2U4LWRmNTk2YjVh YTc3Ni5jcmwwHwYDVR0jBBgwFoAURTdApTp31VxKrwC7n7O+6FjoUVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hYzBlYTRlMi1lNjNiLTQ2Y2QtOTNlOC1kZjU5 NmI1YWE3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxx4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb2ElhWOljDX1RYwE1jqMa16m31FMO26xWcPC3XxYKeIbvig+amA0Wo mN0K0TPt7q/025qe7tOK0zKtuc2OX9/k2TtYXq0COushODcJTz04ei0J/i2UOG85 dNjchdbLEcFCNS4ssoOoV/K2WRPH0KD5ubsA8Et8Oi1CQDU7/WAIxH7P6bUMNPVR 9YfeybP7hdSPhprinsZTUDWeh4lZkOgtfMobRozvQV2PuAejut7ZCA6vMAwpk+M3 nwCiplwCXUtdFHNCNkEp6zseRjJl4uUWEF2dnq6S1wZ9vl5PQau0+Mzeo0qPao9y pRfWv6EGj7sSiicmKJTEYLDQxdElvmo= -----END CERTIFICATE-----Generated at Fri May 15 06:14:15 2026 by rpki-client