$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa File: 40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa (raw, json) Hash identifier: IbWQpS/W8JK6b7ygUoyyrBR0lQcwhm3FPzye99PgbGY= Subject key identifier: 10:43:37:28:F5:E2:CC:8C:02:91:55:A2:07:A2:AD:27:16:AA:52:4F Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D5E1A623F73301C88CC9F3B00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 25899 IP address blocks: 199.193.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:62:3f:73:30:1c:88:cc:9f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=46bac6f7-3448-46f9-aa52-5163cd053f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:69:eb:cf:d3:f7:81:04:ea:52:9e:ed:8b:99: d7:c1:7e:6f:e4:b5:67:b9:d0:1c:0f:4d:36:44:0d: 24:b9:96:3f:2d:5f:f0:28:99:7b:b5:cb:52:4a:e5: a4:4b:0d:ea:ff:04:b7:bc:46:51:13:55:21:cf:10: 93:27:ac:ea:35:d8:fd:de:70:20:a3:6d:e2:92:e1: f5:6b:11:70:7c:bd:aa:7f:f4:7b:88:5f:0a:e0:5d: af:23:07:fd:db:e1:6a:39:bc:66:e6:ef:1b:7f:dd: 52:79:6c:89:f2:11:fb:44:9f:5b:6f:3e:11:a5:ad: 4b:72:44:16:de:2e:23:67:b8:5c:b4:0b:a7:c7:20: 2c:2a:6a:f7:5a:8e:40:79:ec:38:82:57:3b:1b:3b: 59:2d:60:ef:f7:73:d7:03:f3:79:f1:7b:a5:85:41: 59:6e:ca:75:7d:c0:52:55:5f:af:c3:71:8c:d4:aa: c1:d6:ba:25:31:34:5d:50:49:d4:ae:25:86:79:91: 23:79:03:09:a0:ef:c1:b2:98:4d:e3:24:bc:2d:7a: 8b:d5:16:09:ae:55:b8:ec:d2:b6:b2:c0:7e:45:dd: 61:2b:5a:8c:ec:d2:2a:a5:78:1a:30:b3:97:17:30: 53:17:75:0c:59:2e:41:93:bf:af:4f:f7:ed:d1:e3: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:37:28:F5:E2:CC:8C:02:91:55:A2:07:A2:AD:27:16:AA:52:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40bf2e27-c35d-377f-a02c-e16c159ddb7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.193.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:06:7b:90:dd:c4:ce:5c:79:41:34:45:b0:cf:c5:6b:ff:a6: 5c:6b:93:38:db:00:d7:eb:f8:79:81:bd:05:56:d8:43:72:e6: 62:09:63:e0:1a:29:3b:20:b6:49:a1:37:4a:2a:3c:83:13:1e: 34:5b:fb:57:7a:2d:30:35:43:27:8e:98:66:7e:85:91:01:07: ce:ba:79:53:49:54:57:2f:8a:83:c5:c2:71:a9:e0:57:cc:9f: c4:87:a3:0f:cb:2e:ad:6d:50:a1:ae:64:41:5f:ea:99:fb:c4: 93:a2:e6:00:34:a4:06:63:cd:36:ac:a9:53:cf:a5:88:4f:0b: 6e:ad:8f:13:5f:67:98:db:8f:a9:cc:14:84:3a:de:d7:0e:76: de:4b:67:81:21:ce:0b:ae:34:da:80:a4:98:19:d2:88:c5:39: be:88:24:73:a2:db:dc:d8:a3:33:89:4c:c0:b1:db:11:b3:2b: f9:95:47:6d:bf:0a:79:aa:f9:50:bc:03:c4:f7:23:09:f5:f6: ee:df:c0:17:22:d7:99:98:ee:72:dc:ed:ee:f7:8d:54:9a:70: 66:19:e6:fd:5b:90:c5:47:c7:7c:58:66:48:c3:5f:69:bd:37: 21:7a:d6:51:4f:e1:3e:4d:1a:b5:e6:40:91:f9:d0:79:b7:45: 15:00:87:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmI/czAciMyfOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NDZiYWM2ZjctMzQ0OC00NmY5LWFhNTItNTE2M2NkMDUzZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimnrz9P3gQTqUp7ti5nXwX5v5LVnudAcD002 RA0kuZY/LV/wKJl7tctSSuWkSw3q/wS3vEZRE1UhzxCTJ6zqNdj93nAgo23ikuH1 axFwfL2qf/R7iF8K4F2vIwf92+FqObxm5u8bf91SeWyJ8hH7RJ9bbz4Rpa1LckQW 3i4jZ7hctAunxyAsKmr3Wo5Aeew4glc7GztZLWDv93PXA/N58XulhUFZbsp1fcBS VV+vw3GM1KrB1rolMTRdUEnUriWGeZEjeQMJoO/BsphN4yS8LXqL1RYJrlW47NK2 ssB+Rd1hK1qM7NIqpXgaMLOXFzBTF3UMWS5Bk7+vT/ft0eN47wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBDNyj14syMApFVogeirScWqlJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDBiZjJlMjctYzM1ZC0z NzdmLWEwMmMtZTE2YzE1OWRkYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgGe5DdxM5ceUE0RbDPxWv/plxrkzjbANfr+HmBvQVW2ENy5mIJY+Aa KTsgtkmhN0oqPIMTHjRb+1d6LTA1QyeOmGZ+hZEBB866eVNJVFcvioPFwnGp4FfM n8SHow/LLq1tUKGuZEFf6pn7xJOi5gA0pAZjzTasqVPPpYhPC26tjxNfZ5jbj6nM FIQ63tcOdt5LZ4EhzguuNNqApJgZ0ojFOb6IJHOi29zYozOJTMCx2xGzK/mVR22/ Cnmq+VC8A8T3Iwn19u7fwBci15mY7nLc7e73jVSacGYZ5v1bkMVHx3xYZkjDX2m9 NyF61lFP4T5NGrXmQJH50Hm3RRUAh4s= -----END CERTIFICATE-----Generated at Mon Apr 13 17:48:45 2026 by rpki-client