$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa File: 412a0313-4cdd-3471-814c-6ed5f8341669.roa (raw, json) Hash identifier: X3fBb6gIYBwjcx8qOHNJtF9JSUHqH6q4cBkpHy+qNDQ= Subject key identifier: C2:38:9B:0E:D3:3E:B4:F3:F0:21:DC:A4:37:B1:D5:6F:E0:4C:F7:B7 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584DAC456BEC7A2E9B70876C1338 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 8100 IP address blocks: 199.180.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6b:ec:7a:2e:9b:70:87:6c:13:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=7c2f238b-f0bc-48e0-94b2-03d02c10aa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:b4:73:31:ac:62:a8:00:f4:06:19:9a:83: da:9a:49:95:36:6d:fe:e7:4a:50:67:a4:d1:a1:e8: 33:98:84:b0:2b:93:6d:02:2c:7b:8e:30:c3:ac:5f: 9e:fc:a8:71:c8:01:bc:23:3e:ef:87:79:fb:d6:d3: 7a:87:92:41:2d:e6:ce:63:29:e5:85:7e:2c:57:a1: 64:74:9c:61:5e:29:7c:39:13:22:ab:1c:ba:3c:54: 3b:78:bf:fa:76:28:c0:9e:c0:97:6a:99:e3:93:19: 47:e4:48:81:d2:af:a7:84:7d:d4:80:dd:42:bc:d2: 92:47:e9:88:de:f1:2e:db:8d:b7:9a:fe:5e:09:53: 61:f8:42:2f:5e:41:4b:4f:93:24:eb:4d:b9:68:6b: e4:a9:55:1f:bc:82:b1:6b:6d:73:ea:a1:24:18:7c: f2:5c:e3:2c:ff:00:ee:4d:c9:f1:b2:5d:be:08:50: e4:2b:1a:d5:3d:a1:7a:b5:b5:d5:d9:13:e5:8b:7b: 6f:5d:e3:d5:77:69:e5:54:fe:43:3b:4d:91:41:11: 54:48:d6:8c:55:a8:77:30:be:b3:51:c2:0a:55:98: 2a:06:8e:0a:b6:b1:cb:42:1e:f1:4f:7c:76:df:9d: 98:b1:2c:5e:e1:f1:2c:e2:ad:12:b2:54:5b:35:29: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:9B:0E:D3:3E:B4:F3:F0:21:DC:A4:37:B1:D5:6F:E0:4C:F7:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/412a0313-4cdd-3471-814c-6ed5f8341669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 199.180.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:27:83:0a:1e:d4:76:60:69:87:1e:db:ff:c7:5d:55:29:2e: e2:23:d2:3c:79:1c:41:b3:1c:9b:da:e9:ab:76:11:3e:66:6b: c3:72:56:1d:ec:12:78:87:47:1f:82:d2:06:bf:46:aa:49:c0: 07:3f:a5:95:41:03:b4:3a:91:4b:24:55:3e:7e:cb:84:f0:0b: 1e:79:7d:d5:91:2e:fc:ac:1a:a3:d3:0a:7b:dc:bc:db:b7:33: 3d:d8:39:c5:ef:5c:52:06:6b:f1:7f:46:67:8d:a3:ee:6d:23: e8:4f:73:b5:cc:74:02:65:04:45:24:51:4e:01:f8:6f:05:77: 87:73:d8:04:aa:8f:a8:f3:34:a7:63:de:f9:42:72:9d:c6:5b: be:73:2b:e7:39:05:29:8d:d8:a0:6c:73:67:28:26:76:26:9c: 4e:38:70:2e:e2:d1:9b:fa:61:04:00:44:65:e2:40:10:ae:a4: 7f:b7:b0:f2:5b:2b:b9:6a:c6:ca:5b:d0:e1:d9:ca:c1:33:f0: 92:05:61:74:38:cb:38:57:42:d1:52:6b:34:14:f7:64:1a:7f: 87:65:26:6a:35:02:66:63:fa:d4:f9:36:f3:a1:a5:12:1a:93: 0d:08:ec:a4:05:7d:df:36:b2:a8:b8:cf:ef:7f:07:78:ce:ea: 49:24:c0:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRWvsei6bcIdsEzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk N2MyZjIzOGItZjBiYy00OGUwLTk0YjItMDNkMDJjMTBhYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMW0czGsYqgA9AYZmoPamkmVNm3+50pQZ6TR oegzmISwK5NtAix7jjDDrF+e/KhxyAG8Iz7vh3n71tN6h5JBLebOYynlhX4sV6Fk dJxhXil8ORMiqxy6PFQ7eL/6dijAnsCXapnjkxlH5EiB0q+nhH3UgN1CvNKSR+mI 3vEu2423mv5eCVNh+EIvXkFLT5Mk6025aGvkqVUfvIKxa21z6qEkGHzyXOMs/wDu Tcnxsl2+CFDkKxrVPaF6tbXV2RPli3tvXePVd2nlVP5DO02RQRFUSNaMVah3ML6z UcIKVZgqBo4KtrHLQh7xT3x2352YsSxe4fEs4q0SslRbNSlAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI4mw7TPrTz8CHcpDex1W/gTPe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvNDEyYTAzMTMtNGNkZC0z NDcxLTgxNGMtNmVkNWY4MzQxNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7T+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMngwoe1HZgaYce2//HXVUpLuIj0jx5HEGzHJva6at2ET5ma8NyVh3s EniHRx+C0ga/RqpJwAc/pZVBA7Q6kUskVT5+y4TwCx55fdWRLvysGqPTCnvcvNu3 Mz3YOcXvXFIGa/F/RmeNo+5tI+hPc7XMdAJlBEUkUU4B+G8Fd4dz2ASqj6jzNKdj 3vlCcp3GW75zK+c5BSmN2KBsc2coJnYmnE44cC7i0Zv6YQQARGXiQBCupH+3sPJb K7lqxspb0OHZysEz8JIFYXQ4yzhXQtFSazQU92Qaf4dlJmo1AmZj+tT5NvOhpRIa kw0I7KQFfd82sqi4z+9/B3jO6kkkwM4= -----END CERTIFICATE-----Generated at Wed May 13 16:49:26 2026 by rpki-client