$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa File: cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa (raw, json) Hash identifier: XidpkAo7/NfGHB8QXI43GA4wrnAYdXyy2Y4oUfrjVBo= Subject key identifier: 4E:CA:EB:72:1C:0F:C2:28:2F:3C:C1:CE:F3:B1:39:61:87:A7:11:C8 Certificate issuer: /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Certificate serial: 010D0C9F4328584D905A9FD27D9382528815AD00 Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 40346 IP address blocks: 199.48.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9f:d2:7d:93:82:52:88:15:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=f7369b4c-f92b-4c82-b1ea-acb7ea483f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bf:5c:a2:bc:6e:76:49:dd:70:59:18:89:75: 0c:57:fb:02:c0:ec:76:ca:7d:0b:f3:6a:00:71:93: dd:16:ee:34:4a:52:5d:71:9d:74:92:a5:1a:16:96: bd:bc:a7:d8:eb:f8:4d:ea:02:24:f9:3d:8c:f2:a6: 81:58:c8:88:49:51:36:04:5c:dd:cb:ae:e4:54:85: 42:05:c5:3f:dc:5e:02:a8:b8:3f:c0:da:aa:a2:a5: 8f:24:dd:57:94:b6:0f:e9:aa:a3:72:06:ad:9b:51: 99:a0:ce:32:45:cc:83:bc:bd:fa:c9:4a:7e:72:77: 46:6d:e0:5b:26:8c:a0:2a:00:c8:86:ef:02:7a:ff: 01:9c:5c:17:fb:b3:f4:e3:85:f0:66:31:ac:32:3b: 17:ac:1c:7c:d8:fc:be:31:93:bc:3c:84:6c:06:57: d4:25:89:a1:85:29:12:a5:39:c5:f3:f4:53:80:cc: c3:05:eb:cd:f1:d7:30:0f:de:1c:7f:0d:fb:00:86: 17:ba:9b:48:39:b6:5a:82:8e:51:b7:70:ef:7a:82: 8d:e8:be:07:ad:ff:56:bc:a7:60:38:9c:a7:06:ae: fe:cd:cb:01:07:91:dc:c8:46:e9:0e:ed:8b:fe:89: a7:90:94:87:4c:d3:88:0e:a9:28:86:9a:e7:7a:ee: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:EB:72:1C:0F:C2:28:2F:3C:C1:CE:F3:B1:39:61:87:A7:11:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl X509v3 Authority Key Identifier: keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer sbgp-ipAddrBlock: critical IPv4: 199.48.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:56:fe:13:c4:b9:92:53:52:c9:f7:fc:5b:ae:ce:73:06:33: ff:d3:d8:57:2a:4d:70:14:2e:2a:1d:b3:9c:0b:b8:e7:0a:9b: be:36:f9:bf:d4:6f:6e:5c:0f:e8:5a:23:6b:92:4c:63:71:11: 03:11:02:1f:bd:34:5a:6d:cf:2a:8c:0c:bf:84:2c:63:1d:e3: a8:c0:18:8a:16:d1:47:e7:fd:cb:88:e1:c8:6f:76:4f:77:ca: ff:b3:23:34:e6:46:49:b7:02:f1:98:94:c7:ac:43:8c:1e:11: 93:26:34:f9:6a:b6:5b:e5:f2:1d:4e:79:e9:59:be:cf:31:75: c6:7c:c9:2f:c2:f5:f0:91:77:f3:fd:d7:11:19:bd:09:ae:c3: d5:00:d1:3b:c3:1e:88:b8:50:55:21:70:26:7b:a3:54:15:95: 4e:62:e5:81:b2:1b:94:22:a0:b5:52:37:13:30:e7:e9:1f:5d: 51:15:b1:72:bf:b4:ca:c3:c7:12:29:a6:5e:67:f7:0e:f0:52: 9c:90:5b:48:c1:48:f9:5f:b1:f3:c9:06:a0:b8:0b:d9:0d:5f: 66:ed:2d:7c:3a:1a:14:3a:a8:b0:1b:b7:b7:b8:03:fb:ba:10: 23:2b:e0:5c:07:3d:8e:77:70:78:a6:44:89:4d:31:84:6c:39: 50:72:d4:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp/SfZOCUogVrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNl ZTFjMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZjczNjliNGMtZjkyYi00YzgyLWIxZWEtYWNiN2VhNDgzZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr9corxudkndcFkYiXUMV/sCwOx2yn0L82oA cZPdFu40SlJdcZ10kqUaFpa9vKfY6/hN6gIk+T2M8qaBWMiISVE2BFzdy67kVIVC BcU/3F4CqLg/wNqqoqWPJN1XlLYP6aqjcgatm1GZoM4yRcyDvL36yUp+cndGbeBb JoygKgDIhu8Cev8BnFwX+7P044XwZjGsMjsXrBx82Py+MZO8PIRsBlfUJYmhhSkS pTnF8/RTgMzDBevN8dcwD94cfw37AIYXuptIObZago5Rt3DveoKN6L4Hrf9WvKdg OJynBq7+zcsBB5HcyEbpDu2L/omnkJSHTNOIDqkohprneu7DWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7K63IcD8IoLzzBzvOxOWGHpxHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWIy ZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvY2RkYmJkMWEtNmExNC0z YzQyLThmMWEtYzYzYzE3ZTI3OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODViMmRlNzMtMWQ0Mi00NTk1LThj YjEtOWU4MmQ4NzNlZTFjLzg1YjJkZTczLTFkNDItNDU5NS04Y2IxLTllODJkODcz ZWUxYy5jcmwwHwYDVR0jBBgwFoAUDZZu5jXUDNAQcPj1eFHCR/T2DC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgy ZDg3M2VlMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5W/hPEuZJTUsn3/FuuznMGM//T2FcqTXAULiods5wLuOcKm742+b/U b25cD+haI2uSTGNxEQMRAh+9NFptzyqMDL+ELGMd46jAGIoW0Ufn/cuI4chvdk93 yv+zIzTmRkm3AvGYlMesQ4weEZMmNPlqtlvl8h1OeelZvs8xdcZ8yS/C9fCRd/P9 1xEZvQmuw9UA0TvDHoi4UFUhcCZ7o1QVlU5i5YGyG5QioLVSNxMw5+kfXVEVsXK/ tMrDxxIppl5n9w7wUpyQW0jBSPlfsfPJBqC4C9kNX2btLXw6GhQ6qLAbt7e4A/u6 ECMr4FwHPY53cHimRIlNMYRsOVBy1Bg= -----END CERTIFICATE-----Generated at Tue May 5 01:53:13 2026 by rpki-client