$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa File: d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa (raw, json) Hash identifier: xRuM1fRLnVigaC4e3KCL/IY7Ad+pM5XnI4V7l1ipmGI= Subject key identifier: AB:FB:35:C6:AF:CD:D6:2D:D5:BA:C4:AE:74:F3:31:45:B8:00:78:00 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584D8AC5398E8D05FECC6E2763C8 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:39:8e:8d:05:fe:cc:6e:27:63:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=f923981c-b226-473a-9b33-f0aa184e7bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:f3:10:40:fa:f8:8d:ce:e3:98:aa:5e:79: e6:60:bf:b7:f3:92:1f:97:47:2a:f5:07:95:7e:08: 16:c8:be:21:6c:58:29:c3:f7:ff:4d:f9:ad:51:b2: 9f:31:d4:67:1e:a6:67:96:df:d1:ed:1a:21:13:2e: 15:18:10:95:6d:f1:74:d4:42:2a:34:83:ac:8d:5f: dd:39:e3:66:01:bf:60:46:fd:89:ce:b7:5b:64:65: 94:c1:c2:f2:a0:2a:f4:22:fa:e0:45:0d:98:85:e2: cc:1c:94:21:83:56:63:43:cb:18:f9:00:5d:72:f8: d7:2d:21:7e:f8:86:df:32:a6:51:b7:62:b4:9d:52: 3a:99:b1:ab:f0:22:2e:12:c6:96:ab:26:92:e5:65: b7:10:c6:ed:25:d4:c2:48:f9:0d:60:48:a9:4f:b3: bd:8c:8b:48:8f:16:5f:01:a4:c9:25:10:c7:6f:91: 9a:f6:ed:ef:a7:fb:a0:ea:49:c7:7f:3f:2c:cb:32: e1:81:33:ea:06:47:98:9d:ea:67:22:c2:71:1d:27: c9:61:34:37:fc:0b:76:16:08:af:aa:d1:4e:bb:f6: 3c:e7:b4:af:43:3f:6f:ab:52:6b:97:20:a3:1a:b9: f5:91:25:d1:9a:af:6b:3c:28:6b:43:18:57:c0:6b: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FB:35:C6:AF:CD:D6:2D:D5:BA:C4:AE:74:F3:31:45:B8:00:78:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ba:ed:00:c0:22:02:ba:cb:78:7c:88:1a:eb:80:af:89:05: aa:e8:52:d8:1f:15:9e:cd:4e:4e:dc:80:7b:96:02:26:99:b8: 0c:54:2e:7c:ae:81:4f:32:61:31:11:64:42:27:cf:dc:32:a4: 86:63:3d:de:b1:d3:c2:75:87:dd:1b:3f:f4:81:7d:c4:12:76: 43:df:f2:5a:9d:bb:1a:e5:76:e1:38:17:32:a1:48:de:35:eb: 8e:0b:9b:d6:07:4e:42:3b:c6:d9:01:e1:0c:62:7b:60:3e:80: 77:05:d6:76:90:21:c4:9d:1b:5c:bc:3b:76:97:b4:c8:5c:76: c3:79:30:43:ca:b9:30:9e:26:bc:bd:d0:d8:db:f0:1a:6b:51: c5:c4:14:a1:84:79:73:df:0b:ea:56:31:5f:b1:21:d4:80:ce: b6:85:a0:2d:04:b3:9b:77:b4:b5:7c:57:da:52:25:6a:ca:c5: 43:a9:ea:b0:8d:46:1a:cb:ec:2f:5d:6b:8d:df:2d:9c:f4:9a: 4a:05:f4:f3:69:ed:37:34:0e:32:db:ef:7e:a6:30:5b:ca:3c: a4:71:52:dd:e6:b4:8a:e3:da:74:58:f6:69:73:ea:5a:71:3f: 95:aa:e0:64:9d:ca:5a:f5:5e:0f:04:54:80:93:0c:5d:e8:47: de:f1:21:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTmOjQX+zG4nY8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZjkyMzk4MWMtYjIyNi00NzNhLTliMzMtZjBhYTE4NGU3YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9TzEED6+I3O45iqXnnmYL+385Ifl0cq9QeV fggWyL4hbFgpw/f/TfmtUbKfMdRnHqZnlt/R7RohEy4VGBCVbfF01EIqNIOsjV/d OeNmAb9gRv2JzrdbZGWUwcLyoCr0IvrgRQ2YheLMHJQhg1ZjQ8sY+QBdcvjXLSF+ +IbfMqZRt2K0nVI6mbGr8CIuEsaWqyaS5WW3EMbtJdTCSPkNYEipT7O9jItIjxZf AaTJJRDHb5Ga9u3vp/ug6knHfz8syzLhgTPqBkeYnepnIsJxHSfJYTQ3/At2Fgiv qtFOu/Y857SvQz9vq1JrlyCjGrn1kSXRmq9rPChrQxhXwGtKsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv7NcavzdYt1brErnTzMUW4AHgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvZDViM2ZhNDctNDdjYi0z NWVjLTk4YTQtNGNiOWE0NmRhMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC67QDAIgK6y3h8iBrrgK+JBaroUtgfFZ7NTk7cgHuWAiaZuAxULnyu gU8yYTERZEInz9wypIZjPd6x08J1h90bP/SBfcQSdkPf8lqduxrlduE4FzKhSN41 644Lm9YHTkI7xtkB4Qxie2A+gHcF1naQIcSdG1y8O3aXtMhcdsN5MEPKuTCeJry9 0Njb8BprUcXEFKGEeXPfC+pWMV+xIdSAzraFoC0Es5t3tLV8V9pSJWrKxUOp6rCN RhrL7C9da43fLZz0mkoF9PNp7Tc0DjLb736mMFvKPKRxUt3mtIrj2nRY9mlz6lpx P5Wq4GSdylr1Xg8EVICTDF3oR97xIXg= -----END CERTIFICATE-----Generated at Sun May 3 17:53:27 2026 by rpki-client