$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa File: b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa (raw, json) Hash identifier: oqOgj87o6mR0R3sZ3peDKqv0XuqYGGASm2h8fBo8g34= Subject key identifier: 75:2D:72:8E:E7:2A:74:9C:37:0B:CE:8C:8E:1C:00:C1:23:97:9E:40 Certificate issuer: /CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863 Certificate serial: 010D0C9F4328584DD78B0F6D0031C89DE711AD40 Authority key identifier: 39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa Signing time: Fri 15 May 2026 13:00:30 +0000 ROA not before: Fri 15 May 2026 13:00:30 +0000 ROA not after: Thu 13 Aug 2026 13:00:30 +0000 asID: 17299 IP address blocks: 199.16.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d7:8b:0f:6d:00:31:c8:9d:e7:11:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863 Validity Not Before: May 15 13:00:30 2026 GMT Not After : Aug 13 13:00:30 2026 GMT Subject: CN=a25e9171-7684-45be-bd46-74449f8e46f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:18:ee:42:74:dc:09:72:10:02:92:98:98: 8e:d1:4a:46:c7:9a:59:f0:92:13:f0:ed:05:04:31: d7:65:d1:55:41:d6:45:90:42:ab:bf:85:c1:d8:ae: 14:d1:54:39:e4:27:9b:17:e3:44:b2:82:c3:5e:a7: 81:6b:61:e1:c7:af:a8:0c:d0:61:cb:e1:90:54:df: 60:60:2a:cc:1b:24:8c:9b:dd:d1:fd:f8:30:5b:58: 9a:f0:cf:47:80:61:18:59:e0:3e:8f:cc:3d:3d:45: d0:1d:d6:03:8f:f4:11:d9:05:20:08:a0:5b:58:17: db:91:bf:19:c6:e9:0c:2e:5a:41:c8:00:64:6c:9b: 31:d2:c0:dc:41:f3:92:8c:37:70:3c:7f:9e:3c:7f: fb:7d:b4:16:5f:0d:b2:5d:87:3a:7a:45:76:5b:29: dd:04:da:b5:e3:b7:63:03:1a:df:49:ed:de:4d:57: 31:c2:87:d4:e1:7b:69:85:47:56:ef:5e:fc:fb:71: 5e:02:60:87:07:63:a6:04:9f:0f:79:4f:1d:9c:a0: b5:af:e0:67:d3:ac:cd:59:95:91:d9:ae:78:10:7d: 03:42:a7:b7:42:f9:5e:84:fd:e5:5a:13:66:88:5f: ec:f7:9b:1e:fd:0d:0d:46:79:56:d8:75:24:d6:6c: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:72:8E:E7:2A:74:9C:37:0B:CE:8C:8E:1C:00:C1:23:97:9E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl X509v3 Authority Key Identifier: keyid:39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer sbgp-ipAddrBlock: critical IPv4: 199.16.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d1:6c:75:85:aa:e8:4b:7e:a6:07:bd:36:01:a6:c2:6a:f8: dd:86:ce:e1:c5:9e:99:70:48:bf:d4:42:96:d6:40:60:7a:cc: b0:6b:2b:d4:13:bb:b8:39:a2:54:65:f6:b2:23:bb:dd:f6:83: 50:44:9b:20:2c:38:df:5f:99:3c:91:36:0e:52:fe:18:bf:aa: 44:05:80:dc:56:cf:e2:db:24:1d:92:fa:65:1d:c8:d1:39:cd: c7:e4:e6:63:c7:e6:ed:da:10:6c:57:35:f7:5c:7a:42:c1:dc: 13:a0:44:da:3c:cc:fc:31:53:e2:73:00:0c:ec:d4:c3:8b:ab: c1:90:40:64:f6:ce:32:c9:bc:1a:87:dd:37:db:80:34:38:b1: 75:35:09:d0:fc:e2:91:d3:0b:b6:db:3f:b3:93:d3:e1:2f:52: d1:b3:85:52:ff:4f:60:f6:79:ad:54:63:62:b3:f1:31:df:d0: bd:6a:54:5b:f5:ef:c5:16:bb:c1:36:bc:c1:09:a9:90:a5:7a: 58:d8:a5:41:eb:8a:db:9e:34:70:60:79:9b:be:b7:c7:2c:5b: 1f:14:93:39:a0:02:6f:8d:83:59:1f:b1:5f:46:09:3e:5f:04: 48:4f:28:3d:20:46:30:62:d9:cc:7e:2c:de:fd:ad:52:f4:8d: c6:cb:a5:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Xiw9tADHInecRrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlMWJiYWUtNGM0NS00MDhmLWI1ZTEtNjYxOGYxZWMx ODYzMB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk YTI1ZTkxNzEtNzY4NC00NWJlLWJkNDYtNzQ0NDlmOGU0NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqQY7kJ03AlyEAKSmJiO0UpGx5pZ8JIT8O0F BDHXZdFVQdZFkEKrv4XB2K4U0VQ55CebF+NEsoLDXqeBa2Hhx6+oDNBhy+GQVN9g YCrMGySMm93R/fgwW1ia8M9HgGEYWeA+j8w9PUXQHdYDj/QR2QUgCKBbWBfbkb8Z xukMLlpByABkbJsx0sDcQfOSjDdwPH+ePH/7fbQWXw2yXYc6ekV2WyndBNq147dj AxrfSe3eTVcxwofU4XtphUdW7178+3FeAmCHB2OmBJ8PeU8dnKC1r+Bn06zNWZWR 2a54EH0DQqe3QvlehP3lWhNmiF/s95se/Q0NRnlW2HUk1mwU5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUtco7nKnScNwvOjI4cAMEjl55AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83YmUx YmJhZS00YzQ1LTQwOGYtYjVlMS02NjE4ZjFlYzE4NjMvYjVlOWExNjEtZmVmYi0z YzUyLWI4Y2ItZjIxZDIyOWY0MGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2JlMWJiYWUtNGM0NS00MDhmLWI1 ZTEtNjYxOGYxZWMxODYzLzdiZTFiYmFlLTRjNDUtNDA4Zi1iNWUxLTY2MThmMWVj MTg2My5jcmwwHwYDVR0jBBgwFoAUOXsej1CJGPCurxtv2wcTmqjPDL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83YmUxYmJhZS00YzQ1LTQwOGYtYjVlMS02NjE4 ZjFlYzE4NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnRbHWFquhLfqYHvTYBpsJq+N2GzuHFnplwSL/UQpbWQGB6zLBrK9QT u7g5olRl9rIju932g1BEmyAsON9fmTyRNg5S/hi/qkQFgNxWz+LbJB2S+mUdyNE5 zcfk5mPH5u3aEGxXNfdcekLB3BOgRNo8zPwxU+JzAAzs1MOLq8GQQGT2zjLJvBqH 3TfbgDQ4sXU1CdD84pHTC7bbP7OT0+EvUtGzhVL/T2D2ea1UY2Kz8THf0L1qVFv1 78UWu8E2vMEJqZCleljYpUHritueNHBgeZu+t8csWx8UkzmgAm+Ng1kfsV9GCT5f BEhPKD0gRjBi2cx+LN79rVL0jcbLpWU= -----END CERTIFICATE-----Generated at Thu May 28 13:42:44 2026 by rpki-client