$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/554d7f44-0319-30fa-8eae-aa9e8b2708a1.roa File: 554d7f44-0319-30fa-8eae-aa9e8b2708a1.roa (raw, json) Hash identifier: I2luCk7M7R3TtwhDNMgA1SCO0uGuJE4R87cAam5bimk= Subject key identifier: 07:F9:B2:FB:81:22:C0:6B:64:80:9C:3B:25:99:FD:40:21:9B:83:C4 Certificate issuer: /CN=e02d1107-7b77-4403-a74d-0fd403cbc10d Certificate serial: 010D0C9F4328584DAAE0508506142CD096CEC750 Authority key identifier: 0B:CF:11:D4:63:FA:F1:08:4C:DF:54:19:DF:EF:7C:10:9C:2A:71:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/554d7f44-0319-30fa-8eae-aa9e8b2708a1.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 14230 IP address blocks: 199.114.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/e02d1107-7b77-4403-a74d-0fd403cbc10d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/e02d1107-7b77-4403-a74d-0fd403cbc10d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:50:85:06:14:2c:d0:96:ce:c7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d1107-7b77-4403-a74d-0fd403cbc10d Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=7f827149-fa77-4039-b676-06c1cba256a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:50:00:fa:19:2b:a5:1d:7d:af:80:4e:ec: fa:93:40:d2:e2:c6:79:b7:d0:4d:a7:08:2d:88:7c: a1:8c:7a:b9:af:5b:91:61:a9:b7:de:29:d1:da:3f: 75:25:63:27:1a:61:94:8f:7f:85:b1:a1:d1:95:f0: 6c:b9:e6:e3:6e:05:da:26:35:4e:38:59:eb:28:4f: c7:15:ac:cb:93:59:c8:b9:30:79:f0:6f:3a:3f:40: ed:7c:e7:05:e5:08:63:b7:d4:b3:d2:d0:2e:d9:ee: 9a:44:cd:9b:12:44:16:97:d0:c5:8e:40:43:ab:c8: 01:d2:d3:ab:84:61:4c:0f:13:f9:b7:3d:56:c8:8c: da:f6:70:ce:66:ec:42:f1:e1:e5:be:ae:e9:2a:96: 0e:9d:5f:f0:d4:c1:09:eb:cb:44:3f:ed:84:5a:7d: 36:6e:6c:5b:50:18:e1:03:bf:11:93:44:29:64:1b: d2:56:1a:bc:1c:da:df:30:25:fc:bd:8c:1b:f5:bf: 53:17:c6:34:b4:0d:11:99:d8:b9:14:02:c7:bc:55: cb:d1:b7:28:08:12:6a:c0:c7:9d:8e:29:ba:d9:14: e7:9d:1a:db:ba:2f:f4:a6:44:a7:29:f2:14:27:8b: f7:7c:60:e5:5a:ab:8e:29:ed:ea:61:2f:50:53:ad: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F9:B2:FB:81:22:C0:6B:64:80:9C:3B:25:99:FD:40:21:9B:83:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/554d7f44-0319-30fa-8eae-aa9e8b2708a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d/e02d1107-7b77-4403-a74d-0fd403cbc10d.crl X509v3 Authority Key Identifier: keyid:0B:CF:11:D4:63:FA:F1:08:4C:DF:54:19:DF:EF:7C:10:9C:2A:71:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e02d1107-7b77-4403-a74d-0fd403cbc10d.cer sbgp-ipAddrBlock: critical IPv4: 199.114.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4e:19:fb:17:7d:9b:7f:24:63:ea:38:16:1b:fb:6a:b3:8c: ff:af:c9:c0:0b:81:d3:46:ae:38:db:6f:ef:82:15:67:b1:3e: 82:a4:63:3a:14:78:b5:b9:4f:4b:66:13:03:97:fb:a1:2c:40: 89:70:dd:6f:a3:80:81:34:dd:e7:73:f7:bb:5a:b7:69:2d:ab: 4f:ac:35:66:02:dc:29:64:47:85:f0:11:8a:89:e9:8e:05:5b: ef:42:d0:a8:b6:5e:18:74:0e:78:6b:30:da:cd:05:03:fa:6f: b9:f5:cd:fc:c1:4e:ee:7a:21:f8:86:ec:9d:2e:c8:f2:d1:42: e7:77:9c:e4:86:95:e7:1e:78:24:2b:fc:c9:06:81:64:c9:c1: cb:d0:9a:af:d7:29:61:45:b7:32:df:c2:67:18:c5:2c:f2:92: 2f:41:ba:13:a8:3c:da:43:49:78:ce:15:bb:0b:9d:0d:6e:0a: 5b:2c:86:a6:11:8f:cc:7d:16:56:11:b8:bd:fd:0d:c3:9a:2c: 2e:e0:a4:9e:73:43:59:95:2c:bd:25:66:a6:06:04:14:29:58: fa:38:0d:f4:0e:d2:87:35:d8:fe:65:0a:1d:59:1a:c0:70:13: f9:75:c9:41:dd:58:fc:7f:18:ca:86:e6:be:b4:bc:50:19:f5: 16:f1:a5:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4FCFBhQs0JbOx1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDExMDctN2I3Ny00NDAzLWE3NGQtMGZkNDAzY2Jj MTBkMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk N2Y4MjcxNDktZmE3Ny00MDM5LWI2NzYtMDZjMWNiYTI1NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3NQAPoZK6Udfa+ATuz6k0DS4sZ5t9BNpwgt iHyhjHq5r1uRYam33inR2j91JWMnGmGUj3+FsaHRlfBsuebjbgXaJjVOOFnrKE/H FazLk1nIuTB58G86P0DtfOcF5Qhjt9Sz0tAu2e6aRM2bEkQWl9DFjkBDq8gB0tOr hGFMDxP5tz1WyIza9nDOZuxC8eHlvq7pKpYOnV/w1MEJ68tEP+2EWn02bmxbUBjh A78Rk0QpZBvSVhq8HNrfMCX8vYwb9b9TF8Y0tA0Rmdi5FALHvFXL0bcoCBJqwMed jim62RTnnRrbui/0pkSnKfIUJ4v3fGDlWquOKe3qYS9QU61MqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf5svuBIsBrZICcOyWZ/UAhm4PEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMDJk MTEwNy03Yjc3LTQ0MDMtYTc0ZC0wZmQ0MDNjYmMxMGQvNTU0ZDdmNDQtMDMxOS0z MGZhLThlYWUtYWE5ZThiMjcwOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTAyZDExMDctN2I3Ny00NDAzLWE3 NGQtMGZkNDAzY2JjMTBkL2UwMmQxMTA3LTdiNzctNDQwMy1hNzRkLTBmZDQwM2Ni YzEwZC5jcmwwHwYDVR0jBBgwFoAUC88R1GP68QhM31QZ3+98EJwqcUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lMDJkMTEwNy03Yjc3LTQ0MDMtYTc0ZC0wZmQ0 MDNjYmMxMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3LMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpOGfsXfZt/JGPqOBYb+2qzjP+vycALgdNGrjjbb++CFWexPoKkYzoU eLW5T0tmEwOX+6EsQIlw3W+jgIE03edz97tat2ktq0+sNWYC3ClkR4XwEYqJ6Y4F W+9C0Ki2Xhh0DnhrMNrNBQP6b7n1zfzBTu56IfiG7J0uyPLRQud3nOSGleceeCQr /MkGgWTJwcvQmq/XKWFFtzLfwmcYxSzyki9BuhOoPNpDSXjOFbsLnQ1uClsshqYR j8x9FlYRuL39DcOaLC7gpJ5zQ1mVLL0lZqYGBBQpWPo4DfQO0oc12P5lCh1ZGsBw E/l1yUHdWPx/GMqG5r60vFAZ9Rbxpd0= -----END CERTIFICATE-----Generated at Sun May 3 19:29:51 2026 by rpki-client