$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa File: 71d6f9d1-e76d-3468-8445-02e48e603140.roa (raw, json) Hash identifier: AhUkEZpQrl5W55EU8mq89xc5qymoOgDNYJ72oqn4k1U= Subject key identifier: 5B:88:37:FC:AD:AD:04:86:DC:D2:85:FB:7D:7F:F2:E8:DE:25:30:AD Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584DDB81704D8734A9C9E8F67A80 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa Signing time: Sat 16 May 2026 23:04:24 +0000 ROA not before: Sat 16 May 2026 23:04:24 +0000 ROA not after: Fri 14 Aug 2026 23:04:24 +0000 asID: 1299 IP address blocks: 199.101.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:81:70:4d:87:34:a9:c9:e8:f6:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: May 16 23:04:24 2026 GMT Not After : Aug 14 23:04:24 2026 GMT Subject: CN=eeb22e17-2fba-48a5-8dc0-4fdd33f340b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:71:fd:a1:e5:22:c5:de:2f:91:86:e5:0d: ea:6c:da:38:94:ec:7a:21:c9:39:35:c5:df:3b:50: 55:e3:36:46:8f:90:13:8d:c0:c9:a9:d3:ea:2e:b3: 11:8f:d6:32:47:a3:d3:30:9a:50:8c:20:8c:93:2f: 6e:aa:63:e5:43:ec:a1:d1:95:33:f4:bc:a2:26:52: 22:a0:59:d0:11:43:af:21:de:41:db:7e:a7:e5:46: 19:4e:81:3c:bd:89:c3:a1:9f:f4:1a:dd:68:39:2e: a7:64:5f:ca:1d:6c:fa:0e:73:21:38:04:51:a1:eb: 2d:2b:bd:93:59:d1:64:46:7d:bb:51:68:5c:7b:c1: e4:37:40:57:bb:a8:87:55:fb:ca:a3:3b:de:18:56: db:ae:92:56:85:43:f9:33:9f:ef:a0:29:73:c7:62: 30:3e:33:6a:0d:d1:78:0a:d4:46:f1:cc:9d:63:06: a7:2e:5a:d9:82:b9:15:c1:3f:b3:6d:24:fc:85:73: f3:ec:ce:a1:2f:74:aa:39:15:5d:5b:8a:ed:76:7d: dd:be:79:ac:38:6b:a7:54:e3:b2:34:4b:2d:b3:0f: f4:08:18:f4:c6:af:18:a2:43:2a:83:06:f5:3e:98: 96:e8:4c:2e:c0:91:40:02:ee:0b:8c:79:d1:e7:fa: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:88:37:FC:AD:AD:04:86:DC:D2:85:FB:7D:7F:F2:E8:DE:25:30:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/71d6f9d1-e76d-3468-8445-02e48e603140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e6:3b:83:1b:6b:8b:47:d1:6d:c5:eb:7d:60:c2:64:6b:ac: 65:ba:18:f6:a2:cb:91:b9:c5:3c:10:fe:ec:18:f3:eb:69:ad: 3e:e2:64:f3:82:a1:46:9f:84:55:a3:44:e8:fc:ee:09:49:62: 24:db:a6:26:5d:22:6c:54:c0:4c:13:68:50:d7:12:bf:1c:f7: c3:a1:11:e0:b6:08:3c:58:54:99:9a:4f:49:4b:2c:a7:a4:3e: 49:7c:70:9a:46:ae:18:86:e9:c7:07:9e:49:2c:f5:d8:2a:2a: ab:78:24:67:dc:ed:30:96:11:72:bd:c9:ca:c0:e5:be:ec:a9: 24:d0:26:d4:c7:40:8c:22:1d:71:fb:97:15:b5:3e:d8:6e:74: 29:2c:2b:17:fd:f1:4a:75:38:67:ad:e5:08:26:2a:1a:50:db: 43:ff:56:a7:88:f8:e1:a3:f6:d6:9c:10:14:1a:e1:1e:1f:67: f0:09:4b:0b:db:e6:49:23:17:f7:c3:8c:4f:de:49:b3:d5:02: e8:5c:9b:0e:98:12:d5:f4:7e:5a:39:e2:5e:eb:5b:7b:dc:1b: b3:6a:f9:a0:07:29:0d:22:d0:cf:70:47:37:b8:30:11:ad:2d: 39:4f:b9:50:15:d1:f0:23:fd:bc:24:41:a8:9a:55:1b:e9:50: 09:5f:ab:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3bgXBNhzSpyej2eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDUxNjIzMDQyNFoXDTI2MDgxNDIzMDQyNFowLzEtMCsGA1UEAxMk ZWViMjJlMTctMmZiYS00OGE1LThkYzAtNGZkZDMzZjM0MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtABx/aHlIsXeL5GG5Q3qbNo4lOx6Ick5NcXf O1BV4zZGj5ATjcDJqdPqLrMRj9YyR6PTMJpQjCCMky9uqmPlQ+yh0ZUz9LyiJlIi oFnQEUOvId5B236n5UYZToE8vYnDoZ/0Gt1oOS6nZF/KHWz6DnMhOARRoestK72T WdFkRn27UWhce8HkN0BXu6iHVfvKozveGFbbrpJWhUP5M5/voClzx2IwPjNqDdF4 CtRG8cydYwanLlrZgrkVwT+zbST8hXPz7M6hL3SqORVdW4rtdn3dvnmsOGunVOOy NEstsw/0CBj0xq8YokMqgwb1PpiW6EwuwJFAAu4LjHnR5/rw7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuIN/ytrQSG3NKF+31/8ujeJTCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvNzFkNmY5ZDEtZTc2ZC0z NDY4LTg0NDUtMDJlNDhlNjAzMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITmO4Mba4tH0W3F631gwmRrrGW6GPaiy5G5xTwQ/uwY8+tprT7iZPOC oUafhFWjROj87glJYiTbpiZdImxUwEwTaFDXEr8c98OhEeC2CDxYVJmaT0lLLKek Pkl8cJpGrhiG6ccHnkks9dgqKqt4JGfc7TCWEXK9ycrA5b7sqSTQJtTHQIwiHXH7 lxW1PthudCksKxf98Up1OGet5QgmKhpQ20P/VqeI+OGj9tacEBQa4R4fZ/AJSwvb 5kkjF/fDjE/eSbPVAuhcmw6YEtX0flo54l7rW3vcG7Nq+aAHKQ0i0M9wRze4MBGt LTlPuVAV0fAj/bwkQaiaVRvpUAlfq9o= -----END CERTIFICATE-----Generated at Sat Jun 6 05:21:29 2026 by rpki-client