$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa File: 232bd181-e2ca-3b10-b390-d882a9d6cd18.roa (raw, json) Hash identifier: 0QhUbwx33BkuI760xrjUHDYnM3vyO32i98z0fYWEHI4= Subject key identifier: C0:92:30:DD:D5:9F:B5:3D:DF:65:EA:FE:25:75:BB:87:3E:78:D8:3E Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584DDBBB21E6ECA917B08ABCD880 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa Signing time: Sun 17 May 2026 01:00:24 +0000 ROA not before: Sun 17 May 2026 01:00:24 +0000 ROA not after: Sat 15 Aug 2026 01:00:24 +0000 asID: 30286 IP address blocks: 199.101.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:bb:21:e6:ec:a9:17:b0:8a:bc:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: May 17 01:00:24 2026 GMT Not After : Aug 15 01:00:24 2026 GMT Subject: CN=4888f663-bf0b-43a2-baa3-57851a0dad18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:70:af:23:d2:9e:db:00:6e:fc:8d:72:69: 4e:72:00:5d:85:5e:fa:e6:ec:98:c6:3b:d1:21:dd: 27:a0:0a:8c:d6:cf:e6:a6:6d:49:da:34:67:94:b8: da:7c:7e:47:c2:7d:07:81:97:85:c8:8f:85:63:80: 34:d1:27:c3:9b:0e:96:2d:20:7a:31:3e:47:2f:2d: ca:e9:9e:d8:70:9b:37:7b:d8:29:fa:eb:f4:16:42: 74:dd:af:80:45:dd:1e:45:0e:ef:aa:a2:94:45:61: 56:ff:76:e6:73:a6:fb:a7:19:fe:af:77:ec:f4:58: 5c:83:28:78:71:a8:ca:dd:17:46:e6:3a:f0:a5:db: 20:80:0f:0e:57:ec:0f:5b:a0:07:29:11:d5:91:8a: 1b:a7:39:b2:3d:80:96:32:76:5c:bf:d0:19:02:56: c5:95:3c:51:a2:8c:71:5f:be:8f:61:d7:cf:94:14: 23:33:59:ec:12:ed:30:00:df:be:84:2b:88:9f:34: 81:0f:99:88:1d:12:85:7c:93:cb:63:ce:79:90:58: 91:13:c8:fb:b3:16:6e:5b:3a:fe:73:0c:dd:8f:a5: 4b:29:2a:b8:39:3a:d3:fd:09:74:fc:08:f9:8f:47: 3f:2c:db:9e:97:95:2d:10:d1:eb:fb:d6:5f:c9:42: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:30:DD:D5:9F:B5:3D:DF:65:EA:FE:25:75:BB:87:3E:78:D8:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:48:dd:e1:4f:8c:55:29:62:60:34:22:6e:1d:c0:ef:4a:f4: 55:27:07:0f:31:a5:dc:29:b2:04:67:74:22:5c:39:f7:b7:a7: 10:41:3c:31:28:08:08:4b:e2:9a:9a:67:19:c6:0c:a7:2d:70: 8c:b6:f7:f9:1d:28:e6:37:fd:17:d1:b0:bd:b6:2f:4a:2e:47: a6:e7:2f:ea:cb:78:a7:dd:d5:12:be:1a:f9:a0:d2:b7:37:3e: 61:ff:ad:6d:3e:7b:db:4f:7a:ba:ff:0f:f7:30:d7:41:a0:c9: 3b:be:d9:f0:42:a6:ab:cd:40:03:19:c1:46:00:1a:bd:fa:26: 77:7f:18:d0:96:54:e4:89:a7:63:b2:33:5c:0c:10:67:7d:e0: c4:8d:04:d3:07:82:e2:f1:20:12:fd:9e:f9:93:77:13:94:3c: 40:76:cd:00:41:c7:b9:b6:1e:ce:87:a4:79:a6:f1:cd:31:de: 5c:c6:eb:e4:3e:e1:2a:21:df:0a:5b:ad:60:b3:7d:cc:1a:2b: 2c:14:82:ba:70:84:a1:5f:5d:e8:7e:91:ec:01:c4:dc:8b:c6: db:b3:c3:74:dc:8e:e0:38:2f:51:7f:b0:ae:90:51:dc:85:46: fa:63:7d:38:72:38:04:20:d7:fa:47:19:6d:77:2c:5a:77:14: ed:00:8e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3buyHm7KkXsIq82IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk NDg4OGY2NjMtYmYwYi00M2EyLWJhYTMtNTc4NTFhMGRhZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgpwryPSntsAbvyNcmlOcgBdhV765uyYxjvR Id0noAqM1s/mpm1J2jRnlLjafH5Hwn0HgZeFyI+FY4A00SfDmw6WLSB6MT5HLy3K 6Z7YcJs3e9gp+uv0FkJ03a+ARd0eRQ7vqqKURWFW/3bmc6b7pxn+r3fs9Fhcgyh4 cajK3RdG5jrwpdsggA8OV+wPW6AHKRHVkYobpzmyPYCWMnZcv9AZAlbFlTxRooxx X76PYdfPlBQjM1nsEu0wAN++hCuInzSBD5mIHRKFfJPLY855kFiRE8j7sxZuWzr+ cwzdj6VLKSq4OTrT/Ql0/Aj5j0c/LNuel5UtENHr+9ZfyULiwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCSMN3Vn7U932Xq/iV1u4c+eNg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvMjMyYmQxODEtZTJjYS0z YjEwLWIzOTAtZDg4MmE5ZDZjZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJI3eFPjFUpYmA0Im4dwO9K9FUnBw8xpdwpsgRndCJcOfe3pxBBPDEo CAhL4pqaZxnGDKctcIy29/kdKOY3/RfRsL22L0ouR6bnL+rLeKfd1RK+Gvmg0rc3 PmH/rW0+e9tPerr/D/cw10GgyTu+2fBCpqvNQAMZwUYAGr36Jnd/GNCWVOSJp2Oy M1wMEGd94MSNBNMHguLxIBL9nvmTdxOUPEB2zQBBx7m2Hs6HpHmm8c0x3lzG6+Q+ 4Soh3wpbrWCzfcwaKywUgrpwhKFfXeh+kewBxNyLxtuzw3TcjuA4L1F/sK6QUdyF RvpjfThyOAQg1/pHGW13LFp3FO0Ajpg= -----END CERTIFICATE-----Generated at Sat Jun 6 08:11:49 2026 by rpki-client