$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/baeae43f-3575-3491-af52-9d03782c8b31.roa File: baeae43f-3575-3491-af52-9d03782c8b31.roa (raw, json) Hash identifier: pNDrLQFwLSUAdUdzQjPXdCRjGPXWw6fniyWLvMkopgE= Subject key identifier: 7D:C2:EE:F5:0A:73:51:C2:9C:CB:58:71:EC:93:C9:02:61:A9:23:66 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584DE41B2CFA3CEE2C46E7422640 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/baeae43f-3575-3491-af52-9d03782c8b31.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 10998 IP address blocks: 199.43.64.0/21 maxlen: 21 199.43.64.0/24 maxlen: 24 199.43.65.0/24 maxlen: 24 199.43.66.0/24 maxlen: 24 199.43.67.0/24 maxlen: 24 199.43.68.0/24 maxlen: 24 199.43.69.0/24 maxlen: 24 199.43.70.0/24 maxlen: 24 199.43.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:2c:fa:3c:ee:2c:46:e7:42:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=675d953c-c7dd-4c9c-8194-dc3e24b6569d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:94:d4:ac:be:99:fe:88:c7:39:4a:53:f6: 0a:19:dd:2d:06:03:23:ba:7d:53:9c:7b:67:1e:2e: 99:36:c1:bd:19:a2:32:55:f9:bc:14:46:7b:f5:34: d6:1f:1b:08:0b:df:29:bf:72:68:a3:cf:10:5e:0e: 64:25:fd:79:15:fd:b2:2f:12:e5:06:d1:0e:68:0b: 2e:82:b9:90:7f:ac:8f:f8:d5:46:60:36:9f:e3:74: 1e:e1:c3:79:45:84:cd:98:10:2a:eb:ce:48:b8:86: f9:51:39:eb:6c:57:b0:87:87:c6:02:bc:d0:6f:44: 82:bc:fc:8e:3b:c1:f9:da:cd:03:40:13:75:5b:2e: 26:1a:31:7a:3d:9e:94:a2:5e:6c:af:76:34:f9:0c: 98:45:e5:06:9e:21:af:7f:e2:7b:1f:d8:d3:b6:66: 6d:cd:c5:dd:aa:d4:67:bf:8f:17:dc:03:96:b7:3f: ad:4e:0b:b1:a4:3e:13:2e:46:7d:64:78:42:67:22: 76:14:9f:b9:49:a4:79:62:ce:5b:c5:c2:b6:ad:0e: 37:7b:c2:ae:a1:64:26:0b:f9:58:75:ae:57:c9:b7: d8:e9:22:8e:d5:26:43:b0:7f:b5:f2:e9:c1:ab:f7: 04:50:3a:37:69:56:e9:80:78:d6:54:f9:9b:72:0a: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:EE:F5:0A:73:51:C2:9C:CB:58:71:EC:93:C9:02:61:A9:23:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/baeae43f-3575-3491-af52-9d03782c8b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:57:a0:d6:9d:7c:f2:ea:27:33:e2:41:8d:aa:cb:80:67:36: 3f:a6:b4:58:d0:fa:34:c7:f2:94:52:b7:62:e7:74:98:cb:f8: 26:bb:a1:f4:4b:ea:40:ad:0f:2d:8b:13:87:68:9b:87:ed:21: 1e:8c:ed:2e:83:9c:e6:df:64:6b:48:4e:bd:5f:29:50:45:92: 16:b5:b3:59:12:cd:23:27:7f:a6:4e:77:59:a0:c1:bc:26:88: f5:02:3b:63:c5:de:34:d6:85:bb:31:10:bb:c9:24:1a:29:78: 86:c0:e9:01:d2:ea:87:87:c1:6e:6f:48:43:4f:5b:8a:34:3c: b9:c9:14:5e:f3:71:fc:69:60:34:85:4a:47:0c:1d:3f:19:af: e6:35:a5:6a:93:58:aa:a0:5c:71:72:02:32:42:fd:28:f2:91: a0:10:31:97:e4:c6:56:91:e8:a2:93:41:f6:0b:1f:6b:06:fd: 88:95:31:d1:c0:d1:2b:5a:50:a4:d9:d5:08:b5:31:12:46:b2: 23:f3:73:17:02:08:0d:20:bf:4b:8c:5a:ca:e1:5d:bb:dd:b6: b3:eb:de:ab:c9:c5:ee:de:ba:ef:ec:9c:7f:8f:df:08:ed:56: ea:c4:28:92:fa:58:71:6e:d7:04:79:31:74:8a:7b:97:7e:0f: c6:d9:4c:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyz6PO4sRudCJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk Njc1ZDk1M2MtYzdkZC00YzljLTgxOTQtZGMzZTI0YjY1NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd+U1Ky+mf6IxzlKU/YKGd0tBgMjun1TnHtn Hi6ZNsG9GaIyVfm8FEZ79TTWHxsIC98pv3Joo88QXg5kJf15Ff2yLxLlBtEOaAsu grmQf6yP+NVGYDaf43Qe4cN5RYTNmBAq685IuIb5UTnrbFewh4fGArzQb0SCvPyO O8H52s0DQBN1Wy4mGjF6PZ6Uol5sr3Y0+QyYReUGniGvf+J7H9jTtmZtzcXdqtRn v48X3AOWtz+tTguxpD4TLkZ9ZHhCZyJ2FJ+5SaR5Ys5bxcK2rQ43e8KuoWQmC/lY da5XybfY6SKO1SZDsH+18unBq/cEUDo3aVbpgHjWVPmbcgpQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3C7vUKc1HCnMtYceyTyQJhqSNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvYmFlYWU0M2YtMzU3NS0z NDkxLWFmNTItOWQwMzc4MmM4YjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxytAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdXoNadfPLqJzPiQY2qy4BnNj+mtFjQ+jTH8pRSt2LndJjL+Ca7ofRL 6kCtDy2LE4dom4ftIR6M7S6DnObfZGtITr1fKVBFkha1s1kSzSMnf6ZOd1mgwbwm iPUCO2PF3jTWhbsxELvJJBopeIbA6QHS6oeHwW5vSENPW4o0PLnJFF7zcfxpYDSF SkcMHT8Zr+Y1pWqTWKqgXHFyAjJC/SjykaAQMZfkxlaR6KKTQfYLH2sG/YiVMdHA 0StaUKTZ1Qi1MRJGsiPzcxcCCA0gv0uMWsrhXbvdtrPr3qvJxe7euu/snH+P3wjt VurEKJL6WHFu1wR5MXSKe5d+D8bZTGE= -----END CERTIFICATE-----Generated at Thu May 21 21:57:32 2026 by rpki-client