$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: UJ2ovvSMDc3BN0JFsNtORxJk1Dv5KsoFQtmf7Z93fTQ= Subject key identifier: FC:6A:66:0C:F3:F0:60:7B:AD:81:2A:30:34:A6:BD:E6:46:6C:F5:35 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584D8EF55C8663B3A4A64247EF80 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5c:86:63:b3:a4:a6:42:47:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2fece9d7-90b4-47de-a546-4d6888e70072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:04:6c:24:e6:d2:1c:d5:1b:ae:10:44:93: bd:64:c8:18:68:79:69:f1:81:25:ba:b9:80:b5:ff: 5d:86:07:e4:8d:3f:b1:f5:7a:fa:09:39:02:7c:d0: d2:c9:c0:50:a0:d5:58:d3:c1:48:ad:2d:da:bf:a8: 79:32:d3:b3:cb:44:97:a8:b0:79:2a:db:d4:2b:18: 54:86:13:29:f6:af:0d:ba:e9:52:d8:61:c5:28:33: f3:0d:c4:b9:d6:57:1c:bb:e7:1b:1b:c1:aa:ff:4b: ad:f6:30:81:12:20:70:ea:f8:39:b3:2c:10:91:4b: d9:18:4c:09:c4:f4:26:28:a5:01:7e:9c:58:45:ee: 14:45:95:09:8f:78:b1:d0:b5:0b:12:ad:a9:c8:77: 58:ef:ed:6e:d9:99:7c:9b:65:f2:3f:f7:d0:91:81: b9:fc:f8:34:08:9a:fd:9c:4a:03:eb:b5:c6:de:3f: f8:36:30:f9:0c:f5:b4:00:20:86:fe:eb:75:53:36: 83:ae:85:a9:9e:a2:76:8c:07:7d:32:db:79:34:da: 24:1e:23:6f:e4:53:1d:02:9a:77:80:7f:e3:21:8c: 70:07:13:7a:43:ed:00:86:77:8f:6e:be:28:aa:73: 1a:87:9a:0b:64:ee:42:20:b9:b8:1b:d8:6d:9c:0f: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6A:66:0C:F3:F0:60:7B:AD:81:2A:30:34:A6:BD:E6:46:6C:F5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1f:d2:ef:36:cc:a9:c9:4d:dc:77:79:89:eb:c4:2d:9b:1d: a5:58:02:6d:58:f8:66:7a:27:69:d5:a0:5c:f2:7a:bd:34:d4: 69:4b:3f:f5:32:e4:56:d2:bb:9c:a5:1e:42:62:f0:92:e2:dc: 48:0a:2c:2e:e7:58:82:62:d4:96:f6:1e:25:8c:67:a5:19:f2: f2:6b:72:82:03:51:87:c7:4f:86:27:89:ca:29:7a:1b:6d:c4: ec:1f:38:ce:2f:10:de:8f:7f:2b:09:07:84:10:5e:8c:2a:44: 60:1a:3f:59:46:02:cb:be:b2:c9:ac:4c:05:2a:c9:7b:d4:38: 42:1b:12:d1:96:be:19:1b:6a:e2:e9:04:6b:67:63:53:01:b0: 69:b1:c6:68:93:7f:71:3e:8d:97:61:1f:db:4d:4b:62:e0:58: 63:c4:1b:d2:62:af:1e:a4:45:91:34:00:99:f2:1f:72:bc:33: ef:80:b3:9c:63:0e:4d:ae:dc:b0:81:50:02:fc:bd:91:77:e8: be:af:12:50:72:a9:ae:c2:83:8e:ad:4b:64:30:24:9f:a3:d6: e2:37:3d:7d:1c:e9:68:10:66:89:f4:c5:40:12:bc:11:81:97: 6a:6c:ee:83:f6:c2:f5:29:f3:68:11:aa:01:74:78:b6:71:86: d4:8d:07:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9VyGY7OkpkJH74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmZlY2U5ZDctOTBiNC00N2RlLWE1NDYtNGQ2ODg4ZTcwMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOYEbCTm0hzVG64QRJO9ZMgYaHlp8YElurmA tf9dhgfkjT+x9Xr6CTkCfNDSycBQoNVY08FIrS3av6h5MtOzy0SXqLB5KtvUKxhU hhMp9q8NuulS2GHFKDPzDcS51lccu+cbG8Gq/0ut9jCBEiBw6vg5sywQkUvZGEwJ xPQmKKUBfpxYRe4URZUJj3ix0LULEq2pyHdY7+1u2Zl8m2XyP/fQkYG5/Pg0CJr9 nEoD67XG3j/4NjD5DPW0ACCG/ut1UzaDroWpnqJ2jAd9Mtt5NNokHiNv5FMdApp3 gH/jIYxwBxN6Q+0AhnePbr4oqnMah5oLZO5CILm4G9htnA9g6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxqZgzz8GB7rYEqMDSmveZGbPU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIf0u82zKnJTdx3eYnrxC2bHaVYAm1Y+GZ6J2nVoFzyer001GlLP/Uy 5FbSu5ylHkJi8JLi3EgKLC7nWIJi1Jb2HiWMZ6UZ8vJrcoIDUYfHT4Ynicopehtt xOwfOM4vEN6PfysJB4QQXowqRGAaP1lGAsu+ssmsTAUqyXvUOEIbEtGWvhkbauLp BGtnY1MBsGmxxmiTf3E+jZdhH9tNS2LgWGPEG9Jirx6kRZE0AJnyH3K8M++As5xj Dk2u3LCBUAL8vZF36L6vElByqa7Cg46tS2QwJJ+j1uI3PX0c6WgQZon0xUASvBGB l2ps7oP2wvUp82gRqgF0eLZxhtSNBxA= -----END CERTIFICATE-----Generated at Mon Apr 27 22:52:06 2026 by rpki-client