$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa File: e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa (raw, json) Hash identifier: mK912wduTd/oLw1MZtJg1gpId6r3iqdpy8SPEYC6Ri8= Subject key identifier: D5:57:DE:51:E6:22:24:89:FA:41:EA:C1:D2:F3:84:5E:EA:79:CD:D2 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584DD8F08492251BEE4648300C20 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 30048 IP address blocks: 199.33.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:84:92:25:1b:ee:46:48:30:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=587ae54f-b71f-417f-aba0-166ca95e2c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:8a:30:72:d0:b1:b9:33:e7:4c:c9:26:63: ee:0c:44:80:1f:d6:e1:9d:5d:74:73:6f:51:64:25: 9a:ff:66:f9:b3:d9:a6:da:cd:5d:d5:f7:95:89:83: 75:fc:10:4a:76:92:b7:85:97:bd:78:41:dd:be:22: cb:31:b5:96:08:75:44:02:1d:e5:b7:a6:3a:95:7e: fa:41:5f:90:93:68:ca:2f:16:ab:d9:39:48:c8:45: 4c:15:ab:62:0b:bb:5c:67:0e:77:09:1d:1b:d8:e6: d4:8b:13:a3:96:04:9c:90:cc:3c:04:71:d4:bd:19: 0a:50:a2:ff:9a:20:93:1b:da:16:f4:b8:3c:b6:01: fb:93:0d:83:45:11:81:f0:aa:ca:59:87:07:8b:7d: 09:53:9b:ab:b7:58:cc:c8:48:ab:d5:1e:4b:eb:ac: cc:b9:86:fa:33:4c:5a:4d:fb:5e:41:64:5d:93:ec: 51:c4:d1:01:18:a1:d9:47:ed:09:ae:12:14:84:f4: e7:e8:d9:be:ac:55:f1:ec:31:b1:8a:ce:c9:f5:17: c0:54:29:7c:90:38:af:6e:33:80:4f:1f:04:71:e8: 25:0c:8b:2f:49:c5:fb:9c:b5:e3:d0:a3:cd:ac:fc: 53:53:c6:5c:75:7a:77:d1:ab:e5:12:e2:c3:e1:7e: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:57:DE:51:E6:22:24:89:FA:41:EA:C1:D2:F3:84:5E:EA:79:CD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:24:31:45:18:c7:c7:04:ba:85:0d:96:87:92:03:9e:4f:7a: 52:0f:9a:6e:b7:fe:56:32:6f:6c:a4:78:4a:8f:af:7b:eb:3e: 74:cd:d1:e5:88:b5:17:1d:28:44:5a:1a:11:7e:08:2b:c3:43: 91:9a:c0:d6:20:ef:c2:9c:49:e1:d6:3d:ab:13:21:5e:71:59: 88:98:3b:90:64:bd:bc:9c:79:51:b2:30:75:78:b3:99:96:a4: 8c:2b:a9:f4:50:5e:ba:bd:ec:77:28:da:da:d4:0b:4f:13:cd: 5e:aa:d4:13:cd:95:85:f0:32:4f:b0:e4:d8:c6:d8:72:4e:65: f1:25:ac:3a:76:d6:a7:ac:c9:fb:b6:0e:33:bd:ff:2e:b4:f0: a4:20:96:9f:cc:41:54:41:6d:7c:14:25:9d:71:b2:8b:41:9e: a9:eb:a3:8f:33:ea:8c:6c:70:f3:05:b1:13:7d:7b:bb:87:fa: be:62:4f:04:17:9b:ec:6b:e8:f5:04:06:64:36:d2:4a:36:fc: 0d:a3:de:2b:bf:ca:e7:bc:83:75:95:fc:9b:71:7c:60:d7:e4: 6c:cb:fd:0d:25:83:82:4d:c1:0a:b6:5e:e6:de:23:41:63:b3: e2:f7:e1:2c:42:89:40:e6:b1:d7:67:12:91:44:74:2b:0b:97: a4:8e:60:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8ISSJRvuRkgwDCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NTg3YWU1NGYtYjcxZi00MTdmLWFiYTAtMTY2Y2E5NWUyYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFaKMHLQsbkz50zJJmPuDESAH9bhnV10c29R ZCWa/2b5s9mm2s1d1feViYN1/BBKdpK3hZe9eEHdviLLMbWWCHVEAh3lt6Y6lX76 QV+Qk2jKLxar2TlIyEVMFatiC7tcZw53CR0b2ObUixOjlgSckMw8BHHUvRkKUKL/ miCTG9oW9Lg8tgH7kw2DRRGB8KrKWYcHi30JU5urt1jMyEir1R5L66zMuYb6M0xa TfteQWRdk+xRxNEBGKHZR+0JrhIUhPTn6Nm+rFXx7DGxis7J9RfAVCl8kDivbjOA Tx8EceglDIsvScX7nLXj0KPNrPxTU8ZcdXp30avlEuLD4X7FPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVX3lHmIiSJ+kHqwdLzhF7qec3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZTg4YTM0YzktMDVkMC0z ZmRlLWE1MTYtN2U1OGJhMzg1N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgkMUUYx8cEuoUNloeSA55PelIPmm63/lYyb2ykeEqPr3vrPnTN0eWI tRcdKERaGhF+CCvDQ5GawNYg78KcSeHWPasTIV5xWYiYO5BkvbyceVGyMHV4s5mW pIwrqfRQXrq97Hco2trUC08TzV6q1BPNlYXwMk+w5NjG2HJOZfElrDp21qesyfu2 DjO9/y608KQglp/MQVRBbXwUJZ1xsotBnqnro48z6oxscPMFsRN9e7uH+r5iTwQX m+xr6PUEBmQ20ko2/A2j3iu/yue8g3WV/JtxfGDX5GzL/Q0lg4JNwQq2XubeI0Fj s+L34SxCiUDmsddnEpFEdCsLl6SOYBg= -----END CERTIFICATE-----Generated at Fri May 29 19:18:26 2026 by rpki-client