$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa File: 301ebb24-b7d4-3833-bc01-534ced8fe634.roa (raw, json) Hash identifier: gmQjvkMdUSHnPwqrChmJ0RT7h/U+Z+lBofFKJql0poU= Subject key identifier: 8C:19:68:D9:7E:31:C0:45:56:51:FE:BA:49:FF:BA:B5:12:1B:BC:85 Certificate issuer: /CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Certificate serial: 010D0C9F4328584DAC45808B81CA790EDDF6DE00 Authority key identifier: E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 395704 IP address blocks: 199.212.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:80:8b:81:ca:79:0e:dd:f6:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=5fccd956-f18c-4414-acea-6e8cc4d25769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:e9:54:d1:0a:34:ec:de:1c:f1:0b:84:3b: 74:75:2c:4d:35:86:a0:32:c9:82:06:98:de:7d:d6: e5:85:28:c4:e6:cb:07:e4:0a:67:83:13:95:48:e6: ab:36:6b:12:d6:6a:3d:b9:0b:c3:1e:a5:15:8c:12: c0:9e:91:f8:db:e9:a3:b3:4d:ab:19:cb:f5:a5:d1: c4:f3:33:aa:58:52:92:b8:f5:4b:06:cc:1e:c3:56: ec:27:2a:1d:3a:32:93:8d:c8:21:4d:29:f1:ac:f0: 7f:de:30:ca:31:c0:e6:46:cc:40:f6:c9:df:95:ee: 59:d6:d2:13:b9:81:3d:c8:9c:00:fd:3f:79:82:d7: 79:71:6c:be:32:d4:f7:02:7d:f4:2c:bb:5f:a7:a1: b1:ff:03:ad:5f:0d:f8:f6:a4:a5:7e:5c:cf:e1:0c: a8:1b:c9:fa:cd:71:a2:48:62:90:01:22:d9:23:ba: a7:42:56:b3:17:07:21:20:2f:f3:1e:1f:95:b4:45: 36:e9:0a:fc:7c:bf:65:17:a9:ff:06:67:af:af:28: 11:8f:6d:fa:dc:08:f5:43:f9:64:0e:cb:bd:c7:e0: 59:cb:0f:4b:cb:76:13:ae:85:3b:35:28:c7:98:ed: a1:56:cc:b0:19:64:ca:25:38:b7:b7:43:ed:36:77: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:19:68:D9:7E:31:C0:45:56:51:FE:BA:49:FF:BA:B5:12:1B:BC:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl X509v3 Authority Key Identifier: keyid:E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer sbgp-ipAddrBlock: critical IPv4: 199.212.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a4:95:46:39:9b:90:40:2a:f2:27:0a:5e:b2:d9:d6:3c:27: 25:18:13:3d:d4:86:fc:b4:8a:fe:0e:3b:f3:3d:4b:39:78:cb: 03:57:5b:40:32:a6:de:24:86:f1:dd:40:53:5d:da:61:20:9d: a0:ea:46:bf:64:49:a7:03:a8:f8:ee:97:46:c0:18:7f:a1:ea: 87:dd:44:8c:d4:bf:0b:d8:f6:97:40:98:d2:7f:0a:ba:3d:a3: b6:a9:0c:92:13:9e:77:bb:f4:97:d8:93:b5:82:1e:41:51:8a: db:3b:5f:3d:f8:f3:26:df:5d:5d:a6:4b:71:dc:59:4c:f9:b3: cc:92:fd:dc:75:f9:3a:1c:26:18:1f:9d:5b:ce:b9:9d:2a:0c: 7f:a6:fc:db:87:5d:05:8c:a0:87:26:bc:a2:14:03:2d:75:55: 29:06:bf:dd:db:ad:5c:44:0d:72:62:98:c2:e1:5d:a5:5e:4f: 3b:30:cd:b6:da:d0:1c:80:0c:ac:e7:b5:3c:c5:38:44:4b:46: 09:d8:dc:e0:54:3e:20:8a:8f:84:1b:cb:23:97:85:3c:0e:c4: b3:7f:c0:b8:a9:7a:66:50:22:33:c7:66:30:7f:19:2c:b0:dd: f2:a0:61:4c:d4:9e:89:84:51:81:e0:8c:f6:c8:e3:a0:28:40: f0:86:c3:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYCLgcp5Dt323gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmYTJmZTAtNTdiYS00NmM0LTlkMDAtNDFhODVjYzRl MjA0MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NWZjY2Q5NTYtZjE4Yy00NDE0LWFjZWEtNmU4Y2M0ZDI1NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwzpVNEKNOzeHPELhDt0dSxNNYagMsmCBpje fdblhSjE5ssH5ApngxOVSOarNmsS1mo9uQvDHqUVjBLAnpH42+mjs02rGcv1pdHE 8zOqWFKSuPVLBswew1bsJyodOjKTjcghTSnxrPB/3jDKMcDmRsxA9snfle5Z1tIT uYE9yJwA/T95gtd5cWy+MtT3An30LLtfp6Gx/wOtXw349qSlflzP4QyoG8n6zXGi SGKQASLZI7qnQlazFwchIC/zHh+VtEU26Qr8fL9lF6n/BmevrygRj2363Aj1Q/lk Dsu9x+BZyw9Ly3YTroU7NSjHmO2hVsywGWTKJTi3t0PtNndn+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwZaNl+McBFVlH+ukn/urUSG7yFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZh MmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4NWNjNGUyMDQvMzAxZWJiMjQtYjdkNC0z ODMzLWJjMDEtNTM0Y2VkOGZlNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGRmYTJmZTAtNTdiYS00NmM0LTlk MDAtNDFhODVjYzRlMjA0LzBkZmEyZmUwLTU3YmEtNDZjNC05ZDAwLTQxYTg1Y2M0 ZTIwNC5jcmwwHwYDVR0jBBgwFoAU6P4BDEj6X3iotRyz5rfBUkMKJK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZhMmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4 NWNjNGUyMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmklUY5m5BAKvInCl6y2dY8JyUYEz3Uhvy0iv4OO/M9Szl4ywNXW0Ay pt4khvHdQFNd2mEgnaDqRr9kSacDqPjul0bAGH+h6ofdRIzUvwvY9pdAmNJ/Cro9 o7apDJITnne79JfYk7WCHkFRits7Xz348ybfXV2mS3HcWUz5s8yS/dx1+TocJhgf nVvOuZ0qDH+m/NuHXQWMoIcmvKIUAy11VSkGv93brVxEDXJimMLhXaVeTzswzbba 0ByADKzntTzFOERLRgnY3OBUPiCKj4QbyyOXhTwOxLN/wLipemZQIjPHZjB/GSyw 3fKgYUzUnomEUYHgjPbI46AoQPCGw3o= -----END CERTIFICATE-----Generated at Fri May 1 16:46:45 2026 by rpki-client