$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa File: 81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa (raw, json) Hash identifier: +kro5MIiTVXN6PvvBswgTcFs34JEQ7Dv6drvZXvpElw= Subject key identifier: E3:94:6A:76:B9:E8:24:DB:1F:5C:23:F0:F5:76:52:66:7C:FA:7C:A4 Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F4328584DA28013F1074F4ED28152E480 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 398268 IP address blocks: 199.58.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:13:f1:07:4f:4e:d2:81:52:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=7bc044e2-67b9-49c3-8cac-44cb5dd9bf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f0:2a:91:16:e2:1b:44:b5:c7:2b:68:3d:79: 90:c0:72:ed:31:8c:66:83:88:7b:ef:4d:bf:a2:64: e7:28:3b:8b:95:98:6c:9a:42:6f:88:45:59:5c:58: 91:22:47:73:85:8b:91:a4:ab:1b:ff:48:43:90:31: 3f:dd:71:5b:98:5a:31:98:9c:9d:17:41:e4:78:5a: 37:06:c1:d1:b8:38:b0:93:0f:0b:0a:c7:f2:e4:5b: b4:a0:8a:23:ad:c2:bb:d3:ff:fe:d6:98:de:01:86: 95:a8:7b:01:19:34:51:8b:c4:5a:11:32:70:b5:b7: ee:0a:b9:af:bf:00:ea:7a:26:1d:0a:33:e6:e0:53: d6:e4:ca:af:8f:ab:e1:5f:71:e9:b7:5c:6a:2b:a7: ef:05:5f:4b:76:47:18:d4:ae:66:18:f9:2b:3f:43: 7b:db:62:dc:98:53:71:70:75:9c:1f:b3:59:ca:57: d3:74:0d:4b:ba:e2:22:82:30:ae:eb:41:0c:22:d3: 79:93:31:37:26:d5:49:98:bd:68:a9:45:7f:c1:3a: dd:2b:51:af:51:4b:22:8c:fc:d9:66:d0:87:57:c2: 0f:96:a4:9d:ee:e4:e6:b4:34:c0:ba:02:9e:ae:36: d1:7d:fe:36:c2:44:97:83:6c:0a:53:e2:b0:5c:16: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:94:6A:76:B9:E8:24:DB:1F:5C:23:F0:F5:76:52:66:7C:FA:7C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:85:5f:ca:9a:80:d3:f8:1e:ff:f3:a9:23:8d:43:30:3c:70: ad:ef:2b:7c:88:ab:96:8c:e3:31:0d:23:e3:cc:e2:52:60:d0: 67:ab:ac:3c:2c:44:37:b8:54:07:fe:8b:49:1e:c3:5d:9c:0e: 66:1d:38:57:40:aa:84:54:04:ac:d5:34:d2:3c:99:c9:ff:02: 0f:30:db:ba:90:9c:19:9f:65:1f:79:cd:91:b3:39:a3:58:2f: 9c:e7:f0:19:4a:8a:c9:5f:cc:7b:86:e5:ef:74:08:38:29:41: aa:3d:dc:12:17:3f:7f:8c:d7:1b:ec:5b:42:cd:24:a9:90:8b: 8a:1e:26:68:57:17:7d:d9:8d:e3:01:64:a8:f4:53:c9:aa:58: 4d:a8:92:67:a6:3e:8d:72:ad:2a:97:7d:32:07:36:b9:03:94: 93:37:40:c3:5b:db:d3:99:2f:57:11:df:1a:37:6e:af:70:31: 41:8b:a8:9f:29:70:c5:34:a3:cb:c2:07:a7:bb:91:19:6a:c9: 06:a6:a4:2a:6f:57:d9:2b:6a:d7:22:78:be:a6:0c:91:fa:c6: 9c:0a:6f:7f:f0:24:65:30:88:a3:72:16:81:91:07:29:e7:9b: 3d:39:7d:a9:56:8e:0a:d7:fd:90:24:a3:8b:84:75:59:46:ca: fe:d5:08:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBPxB09O0oFS5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk N2JjMDQ0ZTItNjdiOS00OWMzLThjYWMtNDRjYjVkZDliZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/AqkRbiG0S1xytoPXmQwHLtMYxmg4h7702/ omTnKDuLlZhsmkJviEVZXFiRIkdzhYuRpKsb/0hDkDE/3XFbmFoxmJydF0HkeFo3 BsHRuDiwkw8LCsfy5Fu0oIojrcK70//+1pjeAYaVqHsBGTRRi8RaETJwtbfuCrmv vwDqeiYdCjPm4FPW5Mqvj6vhX3Hpt1xqK6fvBV9LdkcY1K5mGPkrP0N722LcmFNx cHWcH7NZylfTdA1LuuIigjCu60EMItN5kzE3JtVJmL1oqUV/wTrdK1GvUUsijPzZ ZtCHV8IPlqSd7uTmtDTAugKerjbRff42wkSXg2wKU+KwXBabywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOUana56CTbH1wj8PV2UmZ8+nykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvODFmZjlhZjEtODNkMC0z MzcxLWE3YWEtYmY1NDE4Njk1ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWFX8qagNP4Hv/zqSONQzA8cK3vK3yIq5aM4zENI+PM4lJg0GerrDws RDe4VAf+i0kew12cDmYdOFdAqoRUBKzVNNI8mcn/Ag8w27qQnBmfZR95zZGzOaNY L5zn8BlKislfzHuG5e90CDgpQao93BIXP3+M1xvsW0LNJKmQi4oeJmhXF33ZjeMB ZKj0U8mqWE2okmemPo1yrSqXfTIHNrkDlJM3QMNb29OZL1cR3xo3bq9wMUGLqJ8p cMU0o8vCB6e7kRlqyQampCpvV9kratcieL6mDJH6xpwKb3/wJGUwiKNyFoGRBynn mz05falWjgrX/ZAko4uEdVlGyv7VCIk= -----END CERTIFICATE-----Generated at Mon Apr 27 03:31:06 2026 by rpki-client