$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa File: 3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa (raw, json) Hash identifier: LwPGqdN7v+Q8sNrF+yhb2L2vreK3OOywCFnSrerOhQ0= Subject key identifier: FD:CC:3C:B1:1D:DF:70:CA:1A:97:BD:CE:6C:69:17:52:6D:6E:34:0F Certificate issuer: /CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86 Certificate serial: 010D0C9F4328584D91C00B4A338D3A6FEAAB6DEC Authority key identifier: AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 21512 IP address blocks: 199.248.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0b:4a:33:8d:3a:6f:ea:ab:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fe9e44-b441-4de4-9fd1-9f3b6f975c86 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=4afbb826-d9c9-4acf-82c1-5840b2c39d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:6a:07:92:e7:48:f8:6f:e1:c9:f5:33:7b: d3:96:cc:ee:24:73:2a:c7:49:f2:66:52:20:e4:1f: 62:2d:e7:22:00:c1:f5:f0:11:9f:4f:4b:e1:88:c6: c2:43:a9:f8:95:5f:54:b5:d1:dc:0d:84:f3:53:0c: db:6a:3f:38:f3:14:7f:0b:4d:0b:39:f6:dd:82:0b: bb:35:45:0e:21:d5:80:63:d4:81:cf:b4:14:ae:aa: b4:08:8c:e8:66:bb:b7:2d:7e:ac:09:29:42:11:5c: 2a:6d:dc:79:3f:02:05:b1:76:64:73:40:12:cb:48: 7f:e2:55:ae:fd:98:cc:3f:46:8f:86:5e:c1:d5:74: 03:74:d4:ad:a7:7d:87:38:ec:0a:5e:b2:2d:1c:2d: 57:5e:59:3c:77:f6:32:c5:9c:75:8c:e8:96:71:33: 6f:32:61:72:16:05:ff:0a:69:95:b0:b4:e7:17:af: c7:59:a0:09:a9:f5:ef:d7:34:76:af:be:6a:8a:41: ba:75:43:64:bc:51:2f:3a:60:bf:76:93:e1:c5:b3: 1d:f4:45:f4:ec:bb:a2:31:20:e4:46:35:32:f2:26: dc:f9:16:3b:49:79:52:89:75:38:dc:c8:1e:42:8f: c7:76:1f:20:27:4b:e1:a8:10:fd:72:7b:91:2e:bd: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CC:3C:B1:1D:DF:70:CA:1A:97:BD:CE:6C:69:17:52:6D:6E:34:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/3f7ecb9e-c6e2-31ae-b59c-7b10bd462862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.crl X509v3 Authority Key Identifier: keyid:AD:4B:7B:7F:A6:40:BF:D5:F8:32:FD:6E:21:C0:81:42:34:3D:72:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00fe9e44-b441-4de4-9fd1-9f3b6f975c86.cer sbgp-ipAddrBlock: critical IPv4: 199.248.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d1:3e:5b:9d:e1:c8:3a:50:62:f6:79:62:ca:dc:67:95:98: 3d:a5:0f:c5:54:44:7f:0a:b2:9a:ac:d6:44:9c:95:1c:69:1f: 83:17:8e:12:56:51:8c:1e:c6:43:53:cb:5e:ec:81:d7:9c:97: 55:cf:4d:33:32:5a:9b:4e:4c:1c:1f:bc:2b:71:94:95:cd:06: d8:81:72:c4:4e:4c:b7:8d:e7:ec:86:fa:a0:f1:63:bc:1c:b8: 7b:84:52:74:b8:3a:68:77:d9:6d:30:86:5f:f8:2d:e5:c6:f5: 9f:95:a4:c6:02:15:65:5c:fc:ed:91:75:ca:77:30:37:89:bb: a1:be:71:84:a9:1a:53:02:77:3b:74:07:f7:0d:ad:d1:a9:f3: 17:12:87:db:3f:23:60:9b:73:53:b6:38:38:c1:5f:09:5e:bc: 29:e2:be:93:fa:28:7d:ae:f7:b1:6c:04:5a:f7:bb:06:a0:21: f6:36:e7:ef:60:24:31:e3:0f:95:3a:0c:e8:6b:60:23:bd:bd: 1c:50:e3:68:39:84:53:03:62:b8:f9:86:11:9b:c7:8a:f1:24: 7b:96:30:1d:c8:bf:78:9c:ab:e0:ac:55:c8:e6:b8:7a:47:4f: 4c:b2:74:e7:f3:47:0d:ba:33:22:16:21:01:83:a6:ca:c7:4f: a5:35:cd:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAtKM406b+qrbewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmZTllNDQtYjQ0MS00ZGU0LTlmZDEtOWYzYjZmOTc1 Yzg2MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NGFmYmI4MjYtZDljOS00YWNmLTgyYzEtNTg0MGIyYzM5ZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4NqB5LnSPhv4cn1M3vTlszuJHMqx0nyZlIg 5B9iLeciAMH18BGfT0vhiMbCQ6n4lV9UtdHcDYTzUwzbaj848xR/C00LOfbdggu7 NUUOIdWAY9SBz7QUrqq0CIzoZru3LX6sCSlCEVwqbdx5PwIFsXZkc0ASy0h/4lWu /ZjMP0aPhl7B1XQDdNStp32HOOwKXrItHC1XXlk8d/YyxZx1jOiWcTNvMmFyFgX/ CmmVsLTnF6/HWaAJqfXv1zR2r75qikG6dUNkvFEvOmC/dpPhxbMd9EX07LuiMSDk RjUy8ibc+RY7SXlSiXU43MgeQo/Hdh8gJ0vhqBD9cnuRLr2y/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3MPLEd33DKGpe9zmxpF1JtbjQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMGZl OWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNiNmY5NzVjODYvM2Y3ZWNiOWUtYzZlMi0z MWFlLWI1OWMtN2IxMGJkNDYyODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDBmZTllNDQtYjQ0MS00ZGU0LTlm ZDEtOWYzYjZmOTc1Yzg2LzAwZmU5ZTQ0LWI0NDEtNGRlNC05ZmQxLTlmM2I2Zjk3 NWM4Ni5jcmwwHwYDVR0jBBgwFoAUrUt7f6ZAv9X4Mv1uIcCBQjQ9chAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMGZlOWU0NC1iNDQxLTRkZTQtOWZkMS05ZjNi NmY5NzVjODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/jhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnRPlud4cg6UGL2eWLK3GeVmD2lD8VURH8Kspqs1kSclRxpH4MXjhJW UYwexkNTy17sgdecl1XPTTMyWptOTBwfvCtxlJXNBtiBcsROTLeN5+yG+qDxY7wc uHuEUnS4Omh32W0whl/4LeXG9Z+VpMYCFWVc/O2Rdcp3MDeJu6G+cYSpGlMCdzt0 B/cNrdGp8xcSh9s/I2Cbc1O2ODjBXwlevCnivpP6KH2u97FsBFr3uwagIfY25+9g JDHjD5U6DOhrYCO9vRxQ42g5hFMDYrj5hhGbx4rxJHuWMB3Iv3icq+CsVcjmuHpH T0yydOfzRw26MyIWIQGDpsrHT6U1zfQ= -----END CERTIFICATE-----Generated at Mon Apr 20 21:23:10 2026 by rpki-client