$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa File: a0319291-6260-33b7-94e3-177209ea6dc7.roa (raw, json) Hash identifier: d/JoqElxiXwF7E4rGA/JoWXnlF91vXDfvjsU8lCOmgo= Subject key identifier: 32:35:2F:8A:01:78:9D:00:DA:86:05:35:CE:34:13:FF:4F:FD:75:61 Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F4328584D95EFF0CECAF5777521804500 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 394449 IP address blocks: 199.68.53.0/24 maxlen: 24 2604:3dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f0:ce:ca:f5:77:75:21:80:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=41664b01-6953-4bde-bf47-5fd60a3712ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:a1:88:cf:71:c5:2c:23:ed:3d:fa:3c:54: f0:e4:b5:08:a6:e4:de:2b:54:f8:26:87:1b:03:de: 1f:21:fd:d0:81:47:cf:b1:40:ab:4a:a2:7a:19:ed: 7c:4b:20:6b:71:d6:3c:e6:0b:1e:b9:19:de:03:30: 00:d4:70:3f:2a:41:c9:d5:74:74:c1:79:7e:af:cb: 2d:0f:55:ee:2e:a5:f2:5a:4c:89:f2:07:92:42:28: 18:38:ae:c5:d6:32:86:22:33:ca:47:c9:59:a1:c3: f3:8f:ea:dd:e5:35:54:d1:33:d8:5c:cb:47:df:01: 58:0d:35:b2:cc:5f:7c:c9:06:a1:98:c3:99:44:8a: 42:bb:0d:d4:dd:95:55:7c:c5:05:d9:50:09:23:a6: 30:bb:e7:74:b6:91:81:c0:69:26:17:91:97:60:1d: 65:c5:cf:4d:40:b2:f5:7a:08:75:02:d7:6c:43:bd: 10:34:55:02:19:54:b3:a7:1f:24:f9:95:8d:1d:7f: 41:ec:af:58:fc:a5:82:a3:26:e4:37:f2:bd:98:12: e3:b0:fa:94:1e:46:71:a5:46:6a:56:9f:97:07:bd: 7e:e3:75:4f:88:25:7c:d2:97:0b:0d:34:10:08:7e: a1:78:1d:df:bf:57:ff:f8:32:6d:9a:b4:85:9a:e1: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:35:2F:8A:01:78:9D:00:DA:86:05:35:CE:34:13:FF:4F:FD:75:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv4: 199.68.53.0/24 IPv6: 2604:3dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:73:75:42:27:a0:b0:7d:05:ce:ce:cc:76:6f:5b:55:6b:bc: f7:9d:e5:ea:ea:4f:98:ed:3e:d0:44:09:4d:81:c7:53:11:95: 06:77:65:76:a2:e3:d6:d0:a3:69:5a:82:00:72:7a:ea:47:e1: df:6e:f3:2b:4d:f9:7b:e2:58:6b:d9:92:8c:50:b7:6e:3c:6f: 9a:8e:43:da:b9:07:87:9b:d5:ff:2d:5f:86:ec:a3:06:26:98: eb:c9:87:2a:17:93:82:82:50:65:e1:4a:07:f7:78:a1:fe:d7: 8e:7d:22:37:0e:4e:e0:9b:93:e3:51:8e:df:6d:f6:e6:79:1f: 70:7f:39:b0:37:46:1a:4f:1e:4f:0d:8a:a0:7a:7b:fb:af:e6: 60:35:90:c6:19:b1:9e:96:25:62:d5:fa:a9:8d:3e:5d:0d:da: d1:ac:c5:a8:03:b5:fe:4c:ea:3f:e3:72:18:c8:bf:16:ef:e7: 98:40:b6:6c:81:ce:6e:a1:e3:9b:11:9b:e7:15:e8:39:39:75: 2f:3a:54:24:22:87:66:2f:39:2a:0f:33:de:14:6b:22:7b:50: 53:31:33:4d:1c:93:08:7d:05:4d:cc:d2:5a:a1:6a:cb:74:f6: cd:73:f4:3c:57:29:06:d0:9d:8a:91:82:2e:e8:fd:65:7d:f1: 6a:52:d4:65 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE2V7/DOyvV3dSGARQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NDE2NjRiMDEtNjk1My00YmRlLWJmNDctNWZkNjBhMzcxMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqShiM9xxSwj7T36PFTw5LUIpuTeK1T4Jocb A94fIf3QgUfPsUCrSqJ6Ge18SyBrcdY85gseuRneAzAA1HA/KkHJ1XR0wXl+r8st D1XuLqXyWkyJ8geSQigYOK7F1jKGIjPKR8lZocPzj+rd5TVU0TPYXMtH3wFYDTWy zF98yQahmMOZRIpCuw3U3ZVVfMUF2VAJI6Ywu+d0tpGBwGkmF5GXYB1lxc9NQLL1 egh1AtdsQ70QNFUCGVSzpx8k+ZWNHX9B7K9Y/KWCoybkN/K9mBLjsPqUHkZxpUZq Vp+XB71+43VPiCV80pcLDTQQCH6heB3fv1f/+DJtmrSFmuFG0wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDI1L4oBeJ0A2oYFNc40E/9P/XVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvYTAzMTkyOTEtNjI2MC0z M2I3LTk0ZTMtMTc3MjA5ZWE2ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAx0Q1MA0E AgACMAcDBQAmBD3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACBzdUInoLB9Bc7OzHZvW1VrvPed5erqT5jt PtBECU2Bx1MRlQZ3ZXai49bQo2laggByeupH4d9u8ytN+XviWGvZkoxQt248b5qO Q9q5B4eb1f8tX4bsowYmmOvJhyoXk4KCUGXhSgf3eKH+1459IjcOTuCbk+NRjt9t 9uZ5H3B/ObA3RhpPHk8NiqB6e/uv5mA1kMYZsZ6WJWLV+qmNPl0N2tGsxagDtf5M 6j/jchjIvxbv55hAtmyBzm6h45sRm+cV6Dk5dS86VCQih2YvOSoPM94UayJ7UFMx M00ckwh9BU3M0lqhast09s1z9DxXKQbQnYqRgi7o/WV98WpS1GU= -----END CERTIFICATE-----Generated at Fri May 1 18:33:05 2026 by rpki-client