$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa File: 194f605c-f45e-385a-9de9-b8b69c6bd841.roa (raw, json) Hash identifier: nZpyz6RgIzEk0ABX0Inw4C7E+bA2uUL0KwX+dTCyl50= Subject key identifier: 04:0A:93:CC:FD:9B:5B:60:44:50:AD:51:7E:55:1D:F9:55:3E:2E:0E Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Certificate serial: 010D0C9F4328584D95F003056C6117B3D4F61800 Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 65224 IP address blocks: 199.212.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:03:05:6c:61:17:b3:d4:f6:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=55b41f63-65ac-49cf-bdf3-b239869a9605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:97:25:d7:21:4c:96:9b:1d:65:57:7c:11: 00:a5:ea:74:45:4f:3c:16:8a:b6:99:09:ff:9f:b6: 6d:07:a1:72:13:5e:84:68:b7:9f:47:54:da:87:99: 47:2c:c1:5e:ac:01:93:9e:08:ec:94:fa:9b:eb:c3: 8c:15:c5:4e:dc:9c:a0:8c:10:ee:da:ce:68:2f:11: ee:d0:31:17:2e:bd:93:ea:5f:de:48:ed:0a:ce:a7: 3f:f9:12:cb:0a:23:47:53:70:d5:09:51:87:6a:85: 6e:4d:e5:3b:81:b8:25:ac:56:50:cf:f6:39:a0:80: f6:01:20:cf:19:5d:29:98:6f:9d:bc:ce:83:35:12: 46:99:7e:b9:b8:36:0c:b8:f3:4a:c2:d7:05:03:56: 1c:6a:79:0b:5f:2d:fe:57:a4:f8:7e:d6:9a:68:7a: a9:02:7e:b5:b9:a4:ad:38:5a:f9:a7:4f:5b:d7:ca: a7:10:96:74:d8:9f:e4:8d:e7:49:71:15:97:83:d4: df:5b:c6:6e:30:1b:06:8b:74:b0:c2:c2:0a:e6:8c: fc:2a:a2:1d:c4:6d:c5:d7:c0:84:ff:aa:0a:f3:78: 03:09:22:96:5a:88:13:69:b1:f4:ab:19:5c:e8:0f: f5:17:8c:f8:45:57:30:38:e1:be:e4:2c:97:c8:75: f7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:93:CC:FD:9B:5B:60:44:50:AD:51:7E:55:1D:F9:55:3E:2E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/194f605c-f45e-385a-9de9-b8b69c6bd841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl X509v3 Authority Key Identifier: keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer sbgp-ipAddrBlock: critical IPv4: 199.212.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:1b:9a:03:5e:11:d1:a1:38:5f:b1:c3:11:f9:18:2e:87:bd: 62:d1:da:d5:13:b3:92:14:13:0e:c8:36:9c:6f:04:cb:cb:57: 2e:e0:f9:c2:2f:55:26:66:79:99:80:5e:b5:35:3b:3a:ec:5a: 2b:54:da:16:cf:99:67:eb:61:cc:75:7d:5c:3a:70:6c:4b:f4: 65:25:ab:3c:9e:e2:6f:16:94:e7:a1:fd:52:3a:fe:55:e8:77: 9a:38:90:25:6e:98:e8:b2:7b:5e:4c:ac:7b:7f:7c:8d:de:91: 61:a0:39:28:f5:c2:ab:81:f3:c0:b3:59:fb:26:4d:fc:c7:a8: 80:fd:19:e6:f3:6e:2b:85:e0:39:c0:bc:e6:2a:12:60:e9:91: e7:ee:35:3f:5d:7a:8f:60:0f:2d:0e:2f:62:31:b6:09:f2:a0: c8:53:07:12:4d:7f:c8:17:97:83:6f:42:73:4c:1a:98:57:4f: 00:15:9e:0d:00:cd:11:43:4f:d3:66:ce:5a:1a:ee:94:a7:20: 92:05:d8:cf:c5:3f:72:00:7f:26:7d:36:0f:94:b6:d5:8e:64: 7d:b6:92:53:23:dd:3e:16:6a:58:a4:aa:26:8f:cc:9a:2d:22: a4:d1:59:e8:1b:5c:d7:60:a9:53:f6:b1:ed:62:65:3a:e8:d6: f6:bb:5a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AMFbGEXs9T2GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlNGUyOWMtZjNjYS00ZWU1LTkyZGEtNDQ0Mzk2OWUz ZGViMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NTViNDFmNjMtNjVhYy00OWNmLWJkZjMtYjIzOTg2OWE5NjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozCXJdchTJabHWVXfBEApep0RU88Foq2mQn/ n7ZtB6FyE16EaLefR1Tah5lHLMFerAGTngjslPqb68OMFcVO3JygjBDu2s5oLxHu 0DEXLr2T6l/eSO0Kzqc/+RLLCiNHU3DVCVGHaoVuTeU7gbglrFZQz/Y5oID2ASDP GV0pmG+dvM6DNRJGmX65uDYMuPNKwtcFA1YcankLXy3+V6T4ftaaaHqpAn61uaSt OFr5p09b18qnEJZ02J/kjedJcRWXg9TfW8ZuMBsGi3SwwsIK5oz8KqIdxG3F18CE /6oK83gDCSKWWogTabH0qxlc6A/1F4z4RVcwOOG+5CyXyHX3TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQKk8z9m1tgRFCtUX5VHflVPi4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZmU0 ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQzOTY5ZTNkZWIvMTk0ZjYwNWMtZjQ1ZS0z ODVhLTlkZTktYjhiNjljNmJkODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWZlNGUyOWMtZjNjYS00ZWU1LTky ZGEtNDQ0Mzk2OWUzZGViLzFmZTRlMjljLWYzY2EtNGVlNS05MmRhLTQ0NDM5Njll M2RlYi5jcmwwHwYDVR0jBBgwFoAUCbXJ9Jrd59UO6Ntu9RFJXobmFlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZmU0ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQz OTY5ZTNkZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8bmgNeEdGhOF+xwxH5GC6HvWLR2tUTs5IUEw7INpxvBMvLVy7g+cIv VSZmeZmAXrU1OzrsWitU2hbPmWfrYcx1fVw6cGxL9GUlqzye4m8WlOeh/VI6/lXo d5o4kCVumOiye15MrHt/fI3ekWGgOSj1wquB88CzWfsmTfzHqID9GebzbiuF4DnA vOYqEmDpkefuNT9deo9gDy0OL2IxtgnyoMhTBxJNf8gXl4NvQnNMGphXTwAVng0A zRFDT9Nmzloa7pSnIJIF2M/FP3IAfyZ9Ng+UttWOZH22klMj3T4WalikqiaPzJot IqTRWegbXNdgqVP2se1iZTro1va7WlA= -----END CERTIFICATE-----Generated at Wed Apr 29 15:56:13 2026 by rpki-client