$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa File: 509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json) Hash identifier: rs9ORujFIGfiGWCKCU+8RPFSNcZjPTxPumLzq2EaXTU= Subject key identifier: 38:84:CA:B6:CA:64:68:62:C6:56:AD:0B:89:BE:B6:BC:DA:BA:8F:E6 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584DAC45769234852EFA552B5A00 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 16575 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:76:92:34:85:2e:fa:55:2b:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=5ac648f1-40ec-40bf-98dd-804fed8c7971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:f0:d9:15:00:59:a2:7b:42:3f:33:90:b4: d7:13:ff:77:8d:6e:69:9d:bd:62:9a:cb:5e:44:06: fc:47:72:57:97:93:d1:ae:d8:fe:2b:cc:06:4b:cd: f4:b0:2d:c9:90:b8:0c:cd:9c:e2:ad:11:28:f1:51: 79:ea:e0:b7:66:be:81:af:1a:01:73:48:17:77:ba: 00:b2:70:c2:5d:27:38:42:f3:50:44:bd:25:fc:f8: 01:24:a3:65:90:63:bc:01:01:f2:b4:15:9a:7d:f9: 70:c2:ab:dd:30:0c:c8:db:6e:03:f9:6e:55:cc:0a: 13:13:e3:08:86:fb:ad:c6:c8:14:82:4d:24:1b:9c: fb:36:e6:34:54:a3:61:ac:a9:30:99:8f:0e:8c:49: ba:77:75:00:85:02:8b:74:d4:56:b0:94:a3:f3:ac: f2:30:1b:cb:ba:d7:83:ad:df:14:a1:e1:2c:f8:2d: 2b:f6:ba:d9:7d:3f:a4:05:8d:7f:63:0f:12:03:b1: 10:ad:7f:27:76:17:08:04:ce:38:23:72:8c:f4:e0: 5a:b9:28:e3:5c:d0:37:27:40:62:bf:9f:54:f6:35: 09:c0:69:ad:18:b9:f0:f8:2e:99:d9:ff:2e:a3:66: 05:4e:be:af:79:3a:b2:e6:d1:d0:80:c9:0a:9b:eb: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:84:CA:B6:CA:64:68:62:C6:56:AD:0B:89:BE:B6:BC:DA:BA:8F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b8:6e:40:d7:d6:92:14:41:a1:a7:6a:af:27:ab:fe:06:cb: f4:2e:a8:11:9c:4e:42:15:27:f0:88:a3:24:d6:f0:45:dd:98: 99:95:4a:b3:6a:dd:23:e5:f2:83:71:f8:db:09:d6:ad:e7:a5: f9:39:17:1f:43:2e:59:c9:76:55:13:ad:85:3d:d4:59:cf:13: ed:96:07:28:25:61:f4:51:eb:06:f0:1a:f2:67:ae:21:36:e8: ae:76:87:c5:db:c3:a6:36:29:60:dc:f0:75:fb:ca:97:4c:03: d3:bc:8c:17:81:a6:fd:87:92:0a:09:32:7d:d3:93:9b:ad:ac: 29:23:20:e4:b4:d4:a7:f8:6a:de:d7:60:85:53:db:b2:bb:65: f9:a1:78:2d:68:a3:4c:9d:8d:37:a2:bd:85:10:ec:d5:40:2a: 82:1f:35:3c:32:33:a2:52:5a:54:9f:21:77:9a:d7:0d:99:19: 54:d9:7e:73:d3:b4:78:ee:c4:41:c9:b2:97:5d:8d:6b:90:d6: 6d:9e:25:03:b7:3f:f2:a4:7d:54:d4:5a:31:e9:e6:d3:ff:77: 7a:00:e4:2f:d3:4a:c1:a0:28:e6:d4:11:8b:c4:d3:1e:eb:3c: 63:db:d1:d2:ab:1b:92:1e:0e:f3:1d:41:f0:96:e1:75:8d:08: e1:36:1c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXaSNIUu+lUrWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NWFjNjQ4ZjEtNDBlYy00MGJmLTk4ZGQtODA0ZmVkOGM3OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGfw2RUAWaJ7Qj8zkLTXE/93jW5pnb1imste RAb8R3JXl5PRrtj+K8wGS830sC3JkLgMzZzirREo8VF56uC3Zr6BrxoBc0gXd7oA snDCXSc4QvNQRL0l/PgBJKNlkGO8AQHytBWafflwwqvdMAzI224D+W5VzAoTE+MI hvutxsgUgk0kG5z7NuY0VKNhrKkwmY8OjEm6d3UAhQKLdNRWsJSj86zyMBvLuteD rd8UoeEs+C0r9rrZfT+kBY1/Yw8SA7EQrX8ndhcIBM44I3KM9OBauSjjXNA3J0Bi v59U9jUJwGmtGLnw+C6Z2f8uo2YFTr6veTqy5tHQgMkKm+uhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiEyrbKZGhixlatC4m+trzauo/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNTA5ZTRkZGYtZGY2Zi0z NGNjLTgzZDQtOTU5MDQxYzBkNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa4bkDX1pIUQaGnaq8nq/4Gy/QuqBGcTkIVJ/CIoyTW8EXdmJmVSrNq 3SPl8oNx+NsJ1q3npfk5Fx9DLlnJdlUTrYU91FnPE+2WByglYfRR6wbwGvJnriE2 6K52h8Xbw6Y2KWDc8HX7ypdMA9O8jBeBpv2HkgoJMn3Tk5utrCkjIOS01Kf4at7X YIVT27K7ZfmheC1oo0ydjTeivYUQ7NVAKoIfNTwyM6JSWlSfIXea1w2ZGVTZfnPT tHjuxEHJspddjWuQ1m2eJQO3P/KkfVTUWjHp5tP/d3oA5C/TSsGgKObUEYvE0x7r PGPb0dKrG5IeDvMdQfCW4XWNCOE2HCA= -----END CERTIFICATE-----Generated at Thu May 7 04:32:46 2026 by rpki-client