$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/756951e5-3465-3d7c-ac71-7a43f0d596f6.roa File: 756951e5-3465-3d7c-ac71-7a43f0d596f6.roa (raw, json) Hash identifier: Y2mp9C00s1ynxdi2j/5P3bmZTrA76PNaGZxhBe9PB4s= Subject key identifier: 48:1A:83:6D:5C:A2:4A:D9:B0:39:6D:1C:E9:74:E9:16:5A:01:DE:2C Certificate issuer: /CN=bd417297-965f-4fd0-82f0-a774a3ef359e Certificate serial: 010D0C9F4328584D7B6A9C4DA7AC7D1C49679540 Authority key identifier: 0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/756951e5-3465-3d7c-ac71-7a43f0d596f6.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 22685 IP address blocks: 199.88.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9c:4d:a7:ac:7d:1c:49:67:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd417297-965f-4fd0-82f0-a774a3ef359e Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=2904f5b2-4dfe-4654-b730-d7fe3480d56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:26:db:f2:3b:94:29:40:f6:cd:54:8c:02: 82:72:8b:83:6f:b6:39:36:63:d1:37:d5:db:8d:77: d8:82:a7:8a:73:a9:77:99:a3:b6:57:13:22:82:4d: 60:ef:8f:7a:05:40:26:db:4a:6a:79:63:25:96:ea: ab:6b:f2:fa:98:8d:c5:3a:c3:75:ff:29:34:7c:c5: 49:68:6d:9c:d7:62:64:8e:ba:70:f8:45:59:a9:86: de:96:80:2d:c7:ca:e6:7a:5d:5c:36:34:bd:16:00: 68:b7:d3:bb:90:67:1f:af:0b:6c:2f:e2:51:37:8e: 1c:e6:cf:ff:bc:60:14:42:67:28:75:0d:6f:d8:d2: cc:7e:c9:40:d7:02:25:b2:9b:c9:8a:8b:5e:26:05: 8e:72:04:78:04:2e:1a:48:99:15:2f:4b:d7:44:41: ed:62:c0:73:6a:73:82:cb:16:97:7d:da:42:90:18: 63:a5:5c:4f:a0:f6:b4:9a:22:cf:81:bc:ec:e1:e1: 69:27:50:c5:6e:aa:c1:ef:9b:bd:c3:fd:70:aa:8a: d1:bc:92:02:2e:f7:90:04:cb:f2:76:42:ab:17:ae: 30:c6:08:67:41:85:5b:0a:27:a8:65:6d:cd:b9:e6: 5c:08:43:34:0e:2c:8e:7a:1f:ce:76:5e:e0:57:d1: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1A:83:6D:5C:A2:4A:D9:B0:39:6D:1C:E9:74:E9:16:5A:01:DE:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/756951e5-3465-3d7c-ac71-7a43f0d596f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl X509v3 Authority Key Identifier: keyid:0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer sbgp-ipAddrBlock: critical IPv4: 199.88.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:55:33:15:93:ee:de:e7:7f:b6:d6:78:c1:72:97:86:16:93: 03:5f:a3:e2:fc:43:4c:36:e2:f9:2d:f2:c7:ab:b3:da:5c:82: b7:f3:3f:a3:40:3f:c8:69:29:ca:86:1e:4d:83:9d:e3:9a:18: b9:d6:16:1a:1d:ac:b6:76:a1:b6:bc:d3:86:a5:56:63:11:97: 77:30:2b:a6:b7:ca:75:fd:68:a3:cc:1b:d0:73:d1:79:f0:02: 12:ab:33:09:1b:3b:f5:bd:cb:40:62:fc:55:49:d1:08:33:cc: 4d:bd:a5:49:27:74:40:9d:24:dd:4b:99:76:a9:8b:68:eb:c4: c0:f7:90:2d:4e:43:e2:58:a7:66:15:c8:b2:09:8e:35:15:d9: 2b:8e:7c:f5:c3:c3:5f:1a:a2:8f:b7:61:cd:e4:65:84:00:b4: 35:ca:b1:d6:b8:17:ca:2a:94:5e:4a:81:01:0e:3f:a0:95:87: b0:61:c9:82:2c:57:0b:06:82:99:7f:8e:f6:9a:0e:25:2d:52: 5d:b6:04:49:39:d5:70:d1:b0:0a:43:b7:70:2a:0f:d3:39:61: 4c:73:3c:eb:bb:21:e6:34:fc:79:8e:ad:32:cd:44:95:c6:68: 77:09:f7:b5:43:30:8f:12:2a:df:f5:33:2d:6f:0e:78:80:26: 9c:a8:94:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apxNp6x9HElnlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0MTcyOTctOTY1Zi00ZmQwLTgyZjAtYTc3NGEzZWYz NTllMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MjkwNGY1YjItNGRmZS00NjU0LWI3MzAtZDdmZTM0ODBkNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2gm2/I7lClA9s1UjAKCcouDb7Y5NmPRN9Xb jXfYgqeKc6l3maO2VxMigk1g7496BUAm20pqeWMlluqra/L6mI3FOsN1/yk0fMVJ aG2c12Jkjrpw+EVZqYbeloAtx8rmel1cNjS9FgBot9O7kGcfrwtsL+JRN44c5s// vGAUQmcodQ1v2NLMfslA1wIlspvJioteJgWOcgR4BC4aSJkVL0vXREHtYsBzanOC yxaXfdpCkBhjpVxPoPa0miLPgbzs4eFpJ1DFbqrB75u9w/1wqorRvJICLveQBMvy dkKrF64wxghnQYVbCieoZW3NueZcCEM0DiyOeh/Odl7gV9Ea/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgag21cokrZsDltHOl06RZaAd4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQx NzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0YTNlZjM1OWUvNzU2OTUxZTUtMzQ2NS0z ZDdjLWFjNzEtN2E0M2YwZDU5NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmQ0MTcyOTctOTY1Zi00ZmQwLTgy ZjAtYTc3NGEzZWYzNTllL2JkNDE3Mjk3LTk2NWYtNGZkMC04MmYwLWE3NzRhM2Vm MzU5ZS5jcmwwHwYDVR0jBBgwFoAUCoB/q4BfE61qX0Nq3dOrLISw87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQxNzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0 YTNlZjM1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1jyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARVMxWT7t7nf7bWeMFyl4YWkwNfo+L8Q0w24vkt8sers9pcgrfzP6NA P8hpKcqGHk2DneOaGLnWFhodrLZ2oba804alVmMRl3cwK6a3ynX9aKPMG9Bz0Xnw AhKrMwkbO/W9y0Bi/FVJ0QgzzE29pUkndECdJN1LmXapi2jrxMD3kC1OQ+JYp2YV yLIJjjUV2SuOfPXDw18aoo+3Yc3kZYQAtDXKsda4F8oqlF5KgQEOP6CVh7BhyYIs VwsGgpl/jvaaDiUtUl22BEk51XDRsApDt3AqD9M5YUxzPOu7IeY0/HmOrTLNRJXG aHcJ97VDMI8SKt/1My1vDniAJpyolCc= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:13 2026 by rpki-client