$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/8c7648ed-c23d-3452-aa82-894d7d505baf.roa File: 8c7648ed-c23d-3452-aa82-894d7d505baf.roa (raw, json) Hash identifier: Zx6WrMg7Uj+Lj0imr7uEfXlrlldRExMGFuyjGVhiYYc= Subject key identifier: CF:8D:DA:3B:5D:88:EC:42:22:3F:4F:3C:E4:F3:17:FA:24:63:34:C4 Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Certificate serial: 010D0C9F4328584DB1DACE528B00A5D0F4665580 Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/8c7648ed-c23d-3452-aa82-894d7d505baf.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 5650 IP address blocks: 199.255.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:ce:52:8b:00:a5:d0:f4:66:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=76f75831-a2b0-472a-ad4f-233accafc456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:dc:0b:20:0a:a2:d6:67:37:d9:fe:9a:12: d5:39:24:7b:8c:c4:bf:79:e1:d7:a6:f2:a0:d8:53: a5:c7:1b:d3:b8:66:95:7d:c9:7d:2c:90:e6:70:db: 9b:0d:4a:f0:07:a8:c4:5b:91:4b:b9:56:5b:9e:f0: 24:12:85:f3:7d:c4:8d:ca:0d:eb:83:81:41:13:c8: 8b:36:4e:ec:a2:e2:33:b7:27:3a:fe:0a:db:27:fe: 26:c3:4a:36:42:df:a1:de:28:c9:cc:c0:8d:47:08: 85:da:e8:65:69:ba:28:bf:5b:4a:7f:85:8b:20:3b: 87:30:f7:2e:c2:51:06:5c:5d:0c:ee:6e:09:ab:16: 02:66:07:da:94:b9:3b:9c:10:3c:e9:8e:9d:23:b6: dc:a7:5f:43:7f:c3:e2:c7:75:3d:68:a0:fe:64:3a: 26:05:81:59:97:75:5d:90:01:3d:40:76:cd:2d:46: 00:03:e4:d2:90:fb:ed:dd:93:32:db:a7:12:43:35: 11:18:fb:90:6a:6c:34:1b:70:06:a8:57:24:1c:4d: ca:f6:24:41:9c:49:a3:5c:89:b9:76:cc:0c:1a:65: 6e:9e:a0:77:39:4f:35:0f:01:cc:84:a3:76:7d:7d: b5:de:6e:34:eb:f3:a4:b4:2f:db:20:bd:30:07:d5: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8D:DA:3B:5D:88:EC:42:22:3F:4F:3C:E4:F3:17:FA:24:63:34:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/8c7648ed-c23d-3452-aa82-894d7d505baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl X509v3 Authority Key Identifier: keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer sbgp-ipAddrBlock: critical IPv4: 199.255.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fa:5a:70:ff:87:de:2b:ec:7d:f5:8c:38:c2:a7:a8:d3:ee: 2b:12:a2:62:e3:fe:c4:b6:e7:9a:90:3e:dd:4b:f2:cd:b1:5a: ec:6d:05:ce:6f:0d:e8:f8:63:69:aa:8d:ed:db:d7:80:dc:56: 7e:ea:cd:c1:f2:45:bc:51:4d:da:d3:98:be:7e:f4:7e:15:2a: ca:80:6a:4f:99:91:af:c8:89:0e:92:3b:9f:d3:9f:9a:2f:bf: 8e:96:3b:e9:ca:e2:7e:b4:ba:06:a6:6d:fb:d7:d9:5a:b7:f7: 60:71:c0:ed:93:b6:11:fd:9b:c9:93:15:84:ee:cd:e8:fc:52: 7c:99:25:9b:ee:47:19:d1:a6:f2:74:2b:43:cc:cb:3c:7d:9c: 87:98:7d:f5:b3:b1:a9:09:6a:8b:28:cd:16:d1:fb:a1:22:4c: 4d:77:1f:07:0a:c4:5c:6c:86:2d:43:a6:f4:0e:e2:3a:74:99: cd:6d:82:e2:d5:67:f8:35:9c:53:c2:dd:6f:56:36:6f:41:7b: 81:83:a1:1c:38:f4:b3:8d:db:b9:db:ad:5d:82:02:fb:b9:0e: 23:9d:68:03:84:d3:7a:4d:cd:c9:73:00:68:7b:63:9b:bc:c8: 9d:01:e4:d5:62:de:9d:0e:70:12:8e:df:a4:23:4f:8e:d2:96: fd:53:7a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2s5SiwCl0PRmVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NiNmE5OGEtMDlmNC00ZTI5LTk0MDYtYmMwY2IxNjYx ZGZjMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk NzZmNzU4MzEtYTJiMC00NzJhLWFkNGYtMjMzYWNjYWZjNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdLcCyAKotZnN9n+mhLVOSR7jMS/eeHXpvKg 2FOlxxvTuGaVfcl9LJDmcNubDUrwB6jEW5FLuVZbnvAkEoXzfcSNyg3rg4FBE8iL Nk7souIztyc6/grbJ/4mw0o2Qt+h3ijJzMCNRwiF2uhlaboov1tKf4WLIDuHMPcu wlEGXF0M7m4JqxYCZgfalLk7nBA86Y6dI7bcp19Df8Pix3U9aKD+ZDomBYFZl3Vd kAE9QHbNLUYAA+TSkPvt3ZMy26cSQzURGPuQamw0G3AGqFckHE3K9iRBnEmjXIm5 dswMGmVunqB3OU81DwHMhKN2fX213m406/OktC/bIL0wB9X8fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+N2jtdiOxCIj9PPOTzF/okYzTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2 YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBjYjE2NjFkZmMvOGM3NjQ4ZWQtYzIzZC0z NDUyLWFhODItODk0ZDdkNTA1YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2NiNmE5OGEtMDlmNC00ZTI5LTk0 MDYtYmMwY2IxNjYxZGZjL2NjYjZhOThhLTA5ZjQtNGUyOS05NDA2LWJjMGNiMTY2 MWRmYy5jcmwwHwYDVR0jBBgwFoAUWNuLitfSv3HYwgdcEp2ETtuQbc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jY2I2YTk4YS0wOWY0LTRlMjktOTQwNi1iYzBj YjE2NjFkZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX6WnD/h94r7H31jDjCp6jT7isSomLj/sS255qQPt1L8s2xWuxtBc5v Dej4Y2mqje3b14DcVn7qzcHyRbxRTdrTmL5+9H4VKsqAak+Zka/IiQ6SO5/Tn5ov v46WO+nK4n60ugambfvX2Vq392BxwO2TthH9m8mTFYTuzej8UnyZJZvuRxnRpvJ0 K0PMyzx9nIeYffWzsakJaosozRbR+6EiTE13HwcKxFxshi1DpvQO4jp0mc1tguLV Z/g1nFPC3W9WNm9Be4GDoRw49LON27nbrV2CAvu5DiOdaAOE03pNzclzAGh7Y5u8 yJ0B5NVi3p0OcBKO36QjT47Slv1Tenk= -----END CERTIFICATE-----Generated at Wed May 13 11:09:20 2026 by rpki-client