$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/567679c0-162f-3c85-87b9-979c57a46579.roa File: 567679c0-162f-3c85-87b9-979c57a46579.roa (raw, json) Hash identifier: kXIVo4sooK+tB2lDoOIvEP+weL1bNIo8h6QYU0XHyeY= Subject key identifier: CA:3C:74:46:80:90:96:73:66:CF:6D:69:26:A9:D0:EA:49:0D:2C:37 Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Certificate serial: 010D0C9F4328584D8EF5659EB4B99F31D6E25300 Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/567679c0-162f-3c85-87b9-979c57a46579.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 396845 IP address blocks: 141.193.208.0/24 maxlen: 24 141.193.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:65:9e:b4:b9:9f:31:d6:e2:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9db4124b-d796-48db-8d21-f9266efe0dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:39:c3:6f:06:c5:a0:7b:37:ec:c5:9d:db: ff:23:d5:35:b2:b7:e8:f6:c0:34:f3:45:89:ca:60: bd:dd:3b:64:91:9f:80:ad:39:7f:ef:f5:57:40:0f: 65:1a:b8:2d:7a:c7:3d:5f:f7:f4:63:27:48:85:52: 14:08:fc:0b:10:76:b9:62:8c:36:37:91:74:60:cb: 25:b7:2f:0d:86:8e:47:dc:fd:cb:b4:cf:89:46:71: df:65:e7:52:72:05:9f:b3:75:37:19:75:40:75:bf: 69:80:cb:c2:b1:98:92:9b:61:a6:b4:23:9d:14:08: 9e:59:1c:27:81:7d:a4:43:82:67:cf:88:93:b2:b5: da:2f:69:24:99:37:b7:ea:51:54:84:af:24:e0:6d: 36:de:90:78:da:42:b5:75:13:86:fc:76:95:85:35: e2:28:93:c1:29:ff:7c:45:bc:09:23:54:24:05:82: f0:6c:56:12:ed:67:f4:78:7b:c1:71:a5:22:d2:31: 10:44:3d:7a:b5:11:80:6a:c2:f5:85:ae:db:4d:a3: 23:bf:4c:ef:8a:18:9f:61:86:a3:0c:0c:7c:0e:04: 39:ca:35:b7:3a:e5:ec:46:00:ff:cf:5f:55:fe:d6: de:4b:9f:41:a4:4d:d7:00:4a:02:44:19:1d:80:25: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3C:74:46:80:90:96:73:66:CF:6D:69:26:A9:D0:EA:49:0D:2C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/567679c0-162f-3c85-87b9-979c57a46579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl X509v3 Authority Key Identifier: keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer sbgp-ipAddrBlock: critical IPv4: 141.193.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:68:bf:f9:b1:e2:ce:94:91:4e:70:f7:e4:92:55:2d:8a:71: ec:d0:a4:db:f3:4b:b5:ae:b9:b2:67:6e:cc:1d:50:74:a5:4c: 81:c3:13:6a:a1:a4:f1:37:8b:c8:20:a9:9d:f1:c7:f2:6d:50: d7:e5:0e:e6:e9:d1:d5:25:fb:d9:a4:d2:27:58:17:0e:ab:1b: 03:63:1d:36:ef:ea:a9:ee:93:ab:83:a4:85:78:53:dd:68:80: 85:e6:26:b5:16:ee:eb:87:5f:e9:10:21:53:29:b4:22:67:81: 44:86:39:c0:cb:eb:3f:1a:c8:50:d7:96:80:7d:bc:56:d0:52: bb:ed:a0:94:cb:33:20:4b:3b:49:a0:e3:c2:dd:a0:4f:81:79: 0a:26:f1:4a:0d:0b:1f:3d:73:fe:91:52:5a:7d:61:dd:fd:a6: 8b:b9:7d:95:56:1c:2e:c2:e7:c1:0d:5f:12:ee:80:2f:2a:12: f2:96:7d:9b:e3:f5:fb:17:a4:75:3c:8f:2e:50:ba:c3:22:22: 88:90:7b:d4:e0:29:3a:be:d0:a2:be:53:9a:e6:4f:9f:c3:d6: fa:06:dc:44:33:2f:32:83:ff:9e:59:62:96:5b:b7:fd:6f:3b: c6:d2:97:6e:cc:24:bb:f3:ee:46:82:85:17:01:0f:a3:72:63: 1d:cc:77:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WWetLmfMdbiUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl OWRkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWRiNDEyNGItZDc5Ni00OGRiLThkMjEtZjkyNjZlZmUwZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydo5w28GxaB7N+zFndv/I9U1srfo9sA080WJ ymC93TtkkZ+ArTl/7/VXQA9lGrgtesc9X/f0YydIhVIUCPwLEHa5Yow2N5F0YMsl ty8Nho5H3P3LtM+JRnHfZedScgWfs3U3GXVAdb9pgMvCsZiSm2GmtCOdFAieWRwn gX2kQ4Jnz4iTsrXaL2kkmTe36lFUhK8k4G023pB42kK1dROG/HaVhTXiKJPBKf98 RbwJI1QkBYLwbFYS7Wf0eHvBcaUi0jEQRD16tRGAasL1ha7bTaMjv0zvihifYYaj DAx8DgQ5yjW3OuXsRgD/z19V/tbeS59BpE3XAEoCRBkdgCUUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo8dEaAkJZzZs9taSap0OpJDSw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvNTY3Njc5YzAtMTYyZi0z Yzg1LTg3YjktOTc5YzU3YTQ2NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3 MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3 OTJiZmU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjcHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdov/mx4s6UkU5w9+SSVS2KcezQpNvzS7WuubJnbswdUHSlTIHDE2qh pPE3i8ggqZ3xx/JtUNflDubp0dUl+9mk0idYFw6rGwNjHTbv6qnuk6uDpIV4U91o gIXmJrUW7uuHX+kQIVMptCJngUSGOcDL6z8ayFDXloB9vFbQUrvtoJTLMyBLO0mg 48LdoE+BeQom8UoNCx89c/6RUlp9Yd39pou5fZVWHC7C58ENXxLugC8qEvKWfZvj 9fsXpHU8jy5QusMiIoiQe9TgKTq+0KK+U5rmT5/D1voG3EQzLzKD/55ZYpZbt/1v O8bSl27MJLvz7kaChRcBD6NyYx3Mdyc= -----END CERTIFICATE-----Generated at Sun May 3 17:53:09 2026 by rpki-client