$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa File: 5c71001e-a55c-33db-bcc0-223bccba2b97.roa (raw, json) Hash identifier: GB3bH5eLJuLGFjCF5jWP+LZp8kwXBTgV+Wgej7SybXI= Subject key identifier: 59:F2:6F:DC:91:BE:F5:ED:15:FE:FD:1A:FB:08:FC:A7:6C:54:CC:C5 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584D9FB56A73866E97A97FEF7C00 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 393220 IP address blocks: 199.71.0.0/24 maxlen: 24 2001:500:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6a:73:86:6e:97:a9:7f:ef:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=a1842270-c3cf-41bd-ad71-6feea4df170b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:aa:8f:67:eb:50:05:9a:78:1b:47:a6:43: fb:17:3a:36:28:48:f0:58:b0:ff:9c:f0:72:51:1f: 95:34:60:47:76:3f:be:32:d7:60:a7:4f:65:ec:b5: cc:98:f6:0a:e6:d7:0d:33:75:cc:a4:03:0e:61:59: 5d:43:42:eb:50:85:5f:62:02:df:e7:47:af:73:02: 42:85:01:47:ab:67:3b:93:fd:6a:a6:e9:6a:8d:ae: 98:a3:c2:3a:16:62:8a:ff:dc:ed:e7:da:02:25:76: 28:0c:13:ca:5c:58:9d:6b:c2:0f:cd:e2:1a:33:ab: 1f:bd:23:15:ce:d1:bd:93:2b:9a:59:4d:e8:28:49: 8e:ea:08:ef:59:1f:18:66:a3:26:9d:ee:2e:f1:ad: a9:b7:99:34:84:20:63:d2:0f:86:b9:df:32:95:27: c2:a2:cc:69:5b:cd:f2:00:65:f2:fa:30:25:c5:90: a5:c0:db:27:d1:0d:d5:48:f1:db:15:0a:98:11:ba: ff:6e:b0:32:68:f3:32:5a:1e:e3:0f:90:ee:53:a7: 22:fb:79:c5:ad:a7:60:06:38:a1:b3:05:9a:91:0d: 5c:a8:49:1b:a4:39:92:ec:20:d9:f2:8b:41:af:7c: ec:28:59:a8:ab:e0:d4:35:7d:cf:fc:3a:12:d8:e3: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F2:6F:DC:91:BE:F5:ED:15:FE:FD:1A:FB:08:FC:A7:6C:54:CC:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.71.0.0/24 IPv6: 2001:500:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c9:9d:4c:f0:a4:e7:ad:60:13:0a:fc:42:34:5e:08:ff:34: 81:98:c0:91:f0:b4:53:10:3a:03:51:cb:2e:63:56:76:1b:be: 2d:8b:b4:11:82:3f:e7:02:62:84:e9:a6:e3:62:4e:5d:ee:72: 8c:cd:7d:1f:ba:13:ac:ae:90:d7:cf:f0:ef:64:7c:1b:cb:d2: 40:81:29:1e:8f:0b:83:0f:17:6c:db:9a:82:e8:f2:88:c3:f5: e5:f3:d2:1a:a8:f9:fb:75:e6:d9:66:3b:31:3e:bd:42:ab:17: b5:0d:99:30:2a:c6:15:61:97:59:a5:34:ab:14:f1:03:c6:16: 85:c7:fb:de:63:30:ed:e4:ef:ff:32:fa:99:95:38:24:4c:0c: 26:de:eb:12:b5:48:f6:e3:a3:bc:15:eb:59:39:82:86:8c:a3: f7:c3:a5:2c:aa:ba:31:2c:4f:5a:6b:9b:15:07:5b:1b:35:7f: 8d:ee:70:9e:c5:03:31:e3:a1:f9:72:22:e9:4c:28:9a:ab:94: 5f:2d:3d:3d:00:e5:5e:af:6e:6b:75:bc:3a:c7:3b:ab:72:d9: a2:14:1e:50:6c:33:39:f4:aa:41:48:2f:fd:4d:aa:c3:31:81: dc:a0:ab:03:13:be:59:b9:9c:24:9b:04:cb:04:cd:21:1d:cf: a9:e0:e2:cb -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2ftWpzhm6XqX/vfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk YTE4NDIyNzAtYzNjZi00MWJkLWFkNzEtNmZlZWE0ZGYxNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr16qj2frUAWaeBtHpkP7Fzo2KEjwWLD/nPBy UR+VNGBHdj++Mtdgp09l7LXMmPYK5tcNM3XMpAMOYVldQ0LrUIVfYgLf50evcwJC hQFHq2c7k/1qpulqja6Yo8I6FmKK/9zt59oCJXYoDBPKXFida8IPzeIaM6sfvSMV ztG9kyuaWU3oKEmO6gjvWR8YZqMmne4u8a2pt5k0hCBj0g+Gud8ylSfCosxpW83y AGXy+jAlxZClwNsn0Q3VSPHbFQqYEbr/brAyaPMyWh7jD5DuU6ci+3nFradgBjih swWakQ1cqEkbpDmS7CDZ8otBr3zsKFmoq+DUNX3P/DoS2ONriQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFnyb9yRvvXtFf79GvsI/KdsVMzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvNWM3MTAwMWUtYTU1Yy0z M2RiLWJjYzAtMjIzYmNjYmEyYjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx0cAMA8E AgACMAkDBwAgAQUAADEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATMmdTPCk561gEwr8QjReCP80gZjAkfC0 UxA6A1HLLmNWdhu+LYu0EYI/5wJihOmm42JOXe5yjM19H7oTrK6Q18/w72R8G8vS QIEpHo8Lgw8XbNuagujyiMP15fPSGqj5+3Xm2WY7MT69QqsXtQ2ZMCrGFWGXWaU0 qxTxA8YWhcf73mMw7eTv/zL6mZU4JEwMJt7rErVI9uOjvBXrWTmChoyj98OlLKq6 MSxPWmubFQdbGzV/je5wnsUDMeOh+XIi6UwomquUXy09PQDlXq9ua3W8Osc7q3LZ ohQeUGwzOfSqQUgv/U2qwzGB3KCrAxO+WbmcJJsEywTNIR3PqeDiyw== -----END CERTIFICATE-----Generated at Wed May 13 15:11:27 2026 by rpki-client