$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa File: 4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa (raw, json) Hash identifier: DZHCiq+vz0whYAAUXC5LoNShLTeWDzIbH0lY8qKDYus= Subject key identifier: AA:E7:DE:30:DD:CC:9E:51:05:01:49:4A:24:7D:B5:3A:71:F7:41:01 Certificate issuer: /CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Certificate serial: 010D0C9F4328584E3A2F2B569E698C7A0C1CBD80 Authority key identifier: DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 199.188.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:2b:56:9e:69:8c:7a:0c:1c:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=e2b88456-8e87-4c9d-ba02-03db5375bdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:ab:72:29:ca:86:81:85:23:b6:dc:64:32: 71:fe:79:0c:5b:86:96:30:89:c2:b6:67:05:8e:04: 2b:24:22:33:50:7f:47:0b:22:90:48:2b:ed:75:57: 66:cd:de:0c:f9:fa:c9:f1:b2:49:c1:74:0d:ed:96: dd:1a:31:b1:eb:d5:22:9b:4e:b2:c1:cb:93:e4:d9: f1:06:2f:70:76:25:b3:7b:c4:b3:e6:69:3b:92:9a: f7:0f:1d:d6:cd:4c:ae:f7:6f:21:07:00:f3:3a:59: 59:4c:72:71:95:47:1a:ee:61:fa:a3:ef:74:98:7c: d6:87:7a:2e:21:e6:95:ff:a3:15:53:7d:44:89:8d: 8e:5e:fd:d6:a6:e9:d8:9e:b9:50:c2:f9:40:05:28: c4:31:70:7b:a5:bb:59:37:ef:3b:6a:42:a9:40:1e: bb:e7:bd:d7:d0:32:e5:c1:5d:b8:bc:1a:f2:bb:32: b6:77:71:ca:0d:79:4b:64:f5:65:5d:ad:ec:04:cf: c4:9e:85:40:68:da:02:b7:14:7f:07:9b:5a:32:1e: 7d:c2:ea:f5:e5:5a:a0:d0:08:38:31:4a:13:d1:85: c2:7d:47:63:43:2e:43:bc:f1:76:0c:5a:ee:be:84: d9:98:18:15:07:76:ab:f7:b8:2d:af:53:48:97:4f: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E7:DE:30:DD:CC:9E:51:05:01:49:4A:24:7D:B5:3A:71:F7:41:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl X509v3 Authority Key Identifier: keyid:DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer sbgp-ipAddrBlock: critical IPv4: 199.188.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e9:c6:29:44:19:9c:5a:9e:93:6a:eb:ef:17:c7:79:29:e0: f9:45:04:f9:aa:06:a7:f2:6d:40:f7:57:bb:fa:bf:b9:01:19: 0e:cd:00:a0:f4:6f:10:34:ca:73:b3:50:d7:34:08:a1:68:8d: 9e:88:c9:ee:c1:f0:63:30:d5:b6:ed:d6:21:8c:7a:b8:62:31: ce:db:c2:05:8a:5a:16:99:89:e0:b5:d7:19:8d:4e:4e:91:f8: aa:83:79:06:43:06:9f:2d:a0:06:60:b6:46:7f:ee:53:42:ae: 21:bb:ab:bc:d8:63:99:36:e9:2a:38:66:23:9e:86:09:f1:47: 44:b0:c2:b1:f6:99:7f:ec:8f:9e:db:44:83:d5:cd:87:05:01: 02:dd:55:be:cc:70:eb:c4:6f:76:f8:85:a9:cd:fb:02:50:e8: 70:96:fe:09:04:29:b2:9c:4a:d8:b3:7f:35:fd:94:1b:24:e2: 69:02:d0:e8:e3:95:ad:f8:ea:1b:a2:b5:ef:a0:37:d1:36:2b: 68:81:2c:fe:56:6c:85:9e:8e:02:26:25:32:09:62:da:23:6b: 39:ce:a3:bd:b8:16:68:05:d2:c3:c9:93:73:df:d2:d6:75:6b: 0f:f3:e7:f9:d6:d1:f9:68:24:de:4f:af:2a:63:0f:4b:7b:3f: 37:fe:a5:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LytWnmmMegwcvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkMGVkOGYtZmRmNC00YjI3LThkNGUtZWI0NGYyMWY3 ODcxMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZTJiODg0NTYtOGU4Ny00YzlkLWJhMDItMDNkYjUzNzViZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdqrcinKhoGFI7bcZDJx/nkMW4aWMInCtmcF jgQrJCIzUH9HCyKQSCvtdVdmzd4M+frJ8bJJwXQN7ZbdGjGx69Uim06ywcuT5Nnx Bi9wdiWze8Sz5mk7kpr3Dx3WzUyu928hBwDzOllZTHJxlUca7mH6o+90mHzWh3ou IeaV/6MVU31EiY2OXv3WpunYnrlQwvlABSjEMXB7pbtZN+87akKpQB67573X0DLl wV24vBryuzK2d3HKDXlLZPVlXa3sBM/EnoVAaNoCtxR/B5taMh59wur15Vqg0Ag4 MUoT0YXCfUdjQy5DvPF2DFruvoTZmBgVB3ar97gtr1NIl0+kJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrn3jDdzJ5RBQFJSiR9tTpx90EBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWQw ZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0ZjIxZjc4NzEvNDE5MWE4NDAtYzNkNi0z ZWE5LWFkZDMtY2QyZmY3YzlhNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkMGVkOGYtZmRmNC00YjI3LThk NGUtZWI0NGYyMWY3ODcxL2I1ZDBlZDhmLWZkZjQtNGIyNy04ZDRlLWViNDRmMjFm Nzg3MS5jcmwwHwYDVR0jBBgwFoAU3GoVKg+iMFSCmPRmY0OX7mPE+28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWQwZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0 ZjIxZjc4NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7ydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITpxilEGZxanpNq6+8Xx3kp4PlFBPmqBqfybUD3V7v6v7kBGQ7NAKD0 bxA0ynOzUNc0CKFojZ6Iye7B8GMw1bbt1iGMerhiMc7bwgWKWhaZieC11xmNTk6R +KqDeQZDBp8toAZgtkZ/7lNCriG7q7zYY5k26So4ZiOehgnxR0SwwrH2mX/sj57b RIPVzYcFAQLdVb7McOvEb3b4hanN+wJQ6HCW/gkEKbKcStizfzX9lBsk4mkC0Ojj la346huite+gN9E2K2iBLP5WbIWejgImJTIJYtojaznOo724FmgF0sPJk3Pf0tZ1 aw/z5/nW0floJN5PrypjD0t7Pzf+peA= -----END CERTIFICATE-----Generated at Wed Jun 24 22:21:10 2026 by rpki-client