$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa File: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (raw, json) Hash identifier: fdxC6loiysKT7q/EsyVpDKUwiTGzXlonepxVucY4SdI= Subject key identifier: EB:0B:7C:F1:6A:70:3A:1C:1C:BD:0B:34:6E:7A:84:B3:9F:16:F2:62 Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584D8EF566F54CB4195BA2A6EA00 Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 399409 IP address blocks: 198.203.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:66:f5:4c:b4:19:5b:a2:a6:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=570e8f56-bcd5-4eb2-b5a8-4387e4ce8cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:ab:1a:66:a5:b5:03:6f:1d:55:ec:2d:40: 30:be:d9:f5:3a:96:32:8c:a8:09:fa:07:5c:2d:82: 45:f7:88:55:f8:a2:2d:d4:60:0a:c6:7a:93:56:ba: c5:b9:25:88:4e:a2:5a:35:fd:00:64:40:69:86:63: 1f:33:45:a8:61:0e:13:63:82:74:5d:98:9a:1c:c7: 7f:77:92:38:a4:a7:af:22:21:3a:a4:68:d1:a3:b6: f6:fe:d1:e4:bd:44:ee:20:f9:50:f5:e2:52:78:56: 26:04:f7:64:4c:16:bb:59:1a:6e:c9:c5:84:61:a3: 64:63:32:05:6e:2a:2d:96:94:69:46:43:a4:59:2c: c4:0a:46:fb:b5:ba:b7:8b:5a:3c:61:99:fb:91:25: c3:47:0d:89:07:39:20:14:9c:37:09:14:63:a5:c7: a6:01:bb:72:4a:c9:ee:f6:87:16:64:59:b5:f7:0a: b4:2a:e3:39:20:ff:c3:1b:22:75:41:dc:19:11:d6: d3:98:f3:e7:62:b4:74:40:d7:95:ae:25:41:6b:26: b8:db:4b:07:2b:13:97:97:16:51:6f:6b:f2:82:9c: 03:75:fb:07:7b:35:e3:e5:95:91:9b:43:ff:8e:9f: c6:40:e1:4a:b6:b3:0d:96:c0:d0:b9:29:b7:08:80: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:7C:F1:6A:70:3A:1C:1C:BD:0B:34:6E:7A:84:B3:9F:16:F2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: 198.203.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:51:86:9d:ba:8d:f5:16:a6:ca:d2:f8:4b:76:00:9e:f5:3b: 4e:1f:c7:8f:87:50:95:27:88:dd:62:86:22:28:7f:c4:6b:c3: 50:4c:3f:15:93:b3:dd:32:f8:06:89:51:b0:18:ed:8b:6d:9c: 2a:ce:20:a7:68:e9:3a:e8:7a:95:c0:c0:5c:6f:b0:35:97:0c: 1b:b3:9d:1d:20:02:fe:70:26:a1:68:c6:0b:e2:b6:84:d3:02: 3e:87:79:98:3b:93:19:85:d1:89:0a:ff:1a:09:44:03:77:90: d8:27:a4:4a:71:9b:bc:19:07:ac:d4:ac:09:79:6d:7c:c7:e1: db:40:ad:b7:a1:2b:b7:ce:ef:4a:1b:b4:5e:1f:41:d0:7e:5f: 96:50:ac:e1:cd:67:0f:c6:38:aa:78:cc:4b:11:78:69:62:e9: d1:dd:20:e0:79:1a:70:c1:9f:73:b1:bb:05:59:1a:f7:06:08: 76:2a:35:d3:f6:ca:64:fd:ea:bb:6e:14:fc:91:17:40:43:68: ad:4f:9e:74:76:fd:05:4c:a0:53:55:e5:8d:1b:6f:9e:d5:4c: 80:6d:da:2b:ad:89:93:5f:e3:11:b8:09:5a:00:d4:e4:c5:42: 7c:5a:1d:4e:b2:15:0c:6b:01:e4:9d:9b:f1:b2:b8:aa:99:04: 34:a8:54:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Wb1TLQZW6Km6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTcwZThmNTYtYmNkNS00ZWIyLWI1YTgtNDM4N2U0Y2U4Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVGrGmaltQNvHVXsLUAwvtn1OpYyjKgJ+gdc LYJF94hV+KIt1GAKxnqTVrrFuSWITqJaNf0AZEBphmMfM0WoYQ4TY4J0XZiaHMd/ d5I4pKevIiE6pGjRo7b2/tHkvUTuIPlQ9eJSeFYmBPdkTBa7WRpuycWEYaNkYzIF biotlpRpRkOkWSzECkb7tbq3i1o8YZn7kSXDRw2JBzkgFJw3CRRjpcemAbtySsnu 9ocWZFm19wq0KuM5IP/DGyJ1QdwZEdbTmPPnYrR0QNeVriVBaya420sHKxOXlxZR b2vygpwDdfsHezXj5ZWRm0P/jp/GQOFKtrMNlsDQuSm3CIBXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsLfPFqcDocHL0LNG56hLOfFvJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvNTg2MWZjOGEtMmE3Ni0z NDdlLWFlYWEtZTlmOGQ4ZmQ4YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsvrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExRhp26jfUWpsrS+Et2AJ71O04fx4+HUJUniN1ihiIof8Rrw1BMPxWT s90y+AaJUbAY7YttnCrOIKdo6TroepXAwFxvsDWXDBuznR0gAv5wJqFoxgvitoTT Aj6HeZg7kxmF0YkK/xoJRAN3kNgnpEpxm7wZB6zUrAl5bXzH4dtArbehK7fO70ob tF4fQdB+X5ZQrOHNZw/GOKp4zEsReGli6dHdIOB5GnDBn3OxuwVZGvcGCHYqNdP2 ymT96rtuFPyRF0BDaK1PnnR2/QVMoFNV5Y0bb57VTIBt2iutiZNf4xG4CVoA1OTF QnxaHU6yFQxrAeSdm/GyuKqZBDSoVC0= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:13 2026 by rpki-client