$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa File: a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json) Hash identifier: ke9ycU4lTUTDe0D7Ou84Q6rjbzASdhWg1bCEXaeQCHk= Subject key identifier: CD:44:47:DE:FC:92:1D:41:20:17:78:AB:84:02:26:81:AA:75:DF:43 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584E0436047627FAE148400D6680 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 11404 IP address blocks: 199.91.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:04:76:27:fa:e1:48:40:0d:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=1bb08f5f-b5d8-4d90-9292-a27dd6fca212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:08:09:a6:97:a8:52:b6:bd:84:22:c2:28: 24:c2:f0:98:50:88:c4:ae:cc:74:25:36:c4:67:36: 9f:24:c3:50:4d:25:e8:88:d2:08:70:3b:54:d7:d9: 22:f9:34:e7:ca:b4:c8:7f:e0:17:90:08:07:ff:ca: b4:af:03:92:c9:49:68:4a:7f:fa:7d:9a:a3:c9:a6: f2:e2:5a:82:43:5a:62:a0:e8:23:bf:9e:b6:13:a1: ab:07:b7:d4:96:96:0d:a1:87:b3:1c:6d:01:78:da: bf:15:4d:ca:43:66:e9:b4:c7:78:d0:cd:4d:b0:c1: 36:c3:25:cf:e2:b7:32:f2:1e:7d:a8:ec:c3:4c:8b: eb:7b:06:3b:a7:ac:a0:3f:5c:aa:98:d0:56:96:87: c3:d4:d3:3e:a4:74:27:47:09:bc:6b:a1:19:f5:e7: 0e:68:d6:d1:cd:9a:a0:05:42:f5:ed:6c:4d:10:43: 80:2a:d2:6f:1b:ea:e5:08:52:2f:2c:d8:48:25:30: e7:eb:c1:0c:1c:19:97:f4:42:2f:1a:d7:01:9f:ca: b7:5d:61:03:04:07:eb:6d:71:ae:44:2e:1f:c3:41: 7d:66:35:34:f0:6c:15:77:1a:5a:f3:b9:d2:c3:b8: 43:8e:b9:91:83:c4:72:19:85:67:ae:17:85:b2:a7: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:44:47:DE:FC:92:1D:41:20:17:78:AB:84:02:26:81:AA:75:DF:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1b:19:43:a1:32:64:7c:c1:e8:65:92:31:d0:fa:9e:c5:66: eb:a7:05:ea:25:69:6a:c3:64:a3:8d:dd:fb:ae:39:44:7d:0f: 13:cd:0a:e5:55:f7:e1:17:1c:b6:21:13:42:f1:d9:cb:87:20: f9:b1:00:59:a6:d8:bd:d0:ea:f6:b9:ae:60:fc:b9:9d:51:4a: 0a:c0:bc:38:03:20:16:c6:2f:cb:e7:8b:9f:7a:94:6a:e1:ba: f4:17:c3:3d:7e:29:cf:99:2d:3f:89:86:7c:54:1b:b3:f4:45: b7:6a:65:75:01:3e:49:ee:05:62:11:3a:e7:f2:4b:38:8c:dc: 5a:e2:83:9f:e2:7e:74:0d:47:6a:b6:1a:a2:2b:61:a1:c7:cd: f8:f1:fd:43:09:e8:c1:c3:d8:2c:f5:7b:52:ae:22:95:18:f2: 23:be:25:28:5b:b5:8d:fd:2e:f0:35:67:fa:1b:57:86:c5:2c: ab:27:8f:cc:df:1d:60:23:65:f9:1d:d7:c8:f4:93:1a:a8:ed: d4:8c:e4:f3:cc:7d:7f:e8:18:a2:56:4d:c9:9a:f2:8d:9e:26: 75:b3:cd:ef:48:5d:24:18:a9:7e:6e:28:a6:70:ba:8b:51:0c: c8:c3:13:1d:b5:7c:f9:7a:53:5c:e9:01:e4:ac:03:cd:ef:d1: e8:21:16:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgR2J/rhSEANZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MWJiMDhmNWYtYjVkOC00ZDkwLTkyOTItYTI3ZGQ2ZmNhMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJcICaaXqFK2vYQiwigkwvCYUIjErsx0JTbE ZzafJMNQTSXoiNIIcDtU19ki+TTnyrTIf+AXkAgH/8q0rwOSyUloSn/6fZqjyaby 4lqCQ1pioOgjv562E6GrB7fUlpYNoYezHG0BeNq/FU3KQ2bptMd40M1NsME2wyXP 4rcy8h59qOzDTIvrewY7p6ygP1yqmNBWlofD1NM+pHQnRwm8a6EZ9ecOaNbRzZqg BUL17WxNEEOAKtJvG+rlCFIvLNhIJTDn68EMHBmX9EIvGtcBn8q3XWEDBAfrbXGu RC4fw0F9ZjU08GwVdxpa87nSw7hDjrmRg8RyGYVnrheFsqfvswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1ER978kh1BIBd4q4QCJoGqdd9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTlhMDJkYTMtMTA0NC0z NWY0LTkwOTUtZTQwYWEzNTBhMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4bGUOhMmR8wehlkjHQ+p7FZuunBeolaWrDZKON3fuuOUR9DxPNCuVV 9+EXHLYhE0Lx2cuHIPmxAFmm2L3Q6va5rmD8uZ1RSgrAvDgDIBbGL8vni596lGrh uvQXwz1+Kc+ZLT+JhnxUG7P0RbdqZXUBPknuBWIROufySziM3Frig5/ifnQNR2q2 GqIrYaHHzfjx/UMJ6MHD2Cz1e1KuIpUY8iO+JShbtY39LvA1Z/obV4bFLKsnj8zf HWAjZfkd18j0kxqo7dSM5PPMfX/oGKJWTcma8o2eJnWzze9IXSQYqX5uKKZwuotR DMjDEx21fPl6U1zpAeSsA83v0eghFsU= -----END CERTIFICATE-----Generated at Mon Jun 1 22:57:36 2026 by rpki-client