$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa File: bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa (raw, json) Hash identifier: yupvJdwGUDMYNoDeqH3xKu9jG5BTkxhEcktfBvS1JhE= Subject key identifier: 9F:E1:AE:37:FB:A2:2E:81:E2:4C:02:6F:D5:44:8F:39:05:F9:26:5F Certificate issuer: /CN=681d813c-8566-4f01-b8f3-989dcf8d983e Certificate serial: 010D0C9F4328584DBF0636C3083CB08540DEFFB0 Authority key identifier: 99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa Signing time: Wed 06 May 2026 18:13:29 +0000 ROA not before: Wed 06 May 2026 18:13:29 +0000 ROA not after: Tue 04 Aug 2026 18:13:29 +0000 asID: 399263 IP address blocks: 199.33.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:06:36:c3:08:3c:b0:85:40:de:ff:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681d813c-8566-4f01-b8f3-989dcf8d983e Validity Not Before: May 6 18:13:29 2026 GMT Not After : Aug 4 18:13:29 2026 GMT Subject: CN=c0162918-470a-4ac1-98c2-e317d022d515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:32:9f:a2:47:2c:b6:de:ea:6a:ac:22:a1: 80:6b:a4:ee:f0:1d:36:16:64:11:2f:09:ed:1b:34: 8d:28:1d:9d:99:37:d6:fb:15:58:b2:aa:26:f7:4b: 9d:a4:01:c5:33:b9:41:4a:87:5b:37:67:96:3e:46: d9:5b:7e:ba:ad:47:27:e5:c2:24:c9:c9:b6:4f:9a: 3b:23:09:9e:48:37:dd:08:31:fd:15:55:d7:0b:7c: dd:8a:72:52:9e:3c:ff:2c:ad:ce:ea:b2:de:83:a8: a9:00:83:1c:48:74:ce:0c:ec:08:17:5b:6a:cd:fe: f1:3c:91:8c:be:76:9b:a0:35:f3:13:8e:65:a0:90: ed:74:3c:d5:87:c9:d9:d6:98:39:29:d6:b4:41:30: b2:a1:3b:e3:a9:7e:64:ac:a6:c7:e7:3a:32:c4:0b: 36:ad:f1:23:10:7d:67:77:5f:9e:b7:55:2f:db:db: dc:d3:3d:b6:ce:e5:9b:76:d3:bd:54:7c:51:8c:b0: 19:22:b3:a9:76:7a:66:d9:66:f8:8c:1e:16:e1:f7: 42:c7:be:87:33:be:60:dd:0f:24:09:98:01:b6:e0: 76:3f:2a:99:60:b5:38:6e:a3:98:fd:b9:5c:0f:69: 44:8e:38:b3:00:cf:35:1d:d6:21:0d:c0:5d:38:56: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E1:AE:37:FB:A2:2E:81:E2:4C:02:6F:D5:44:8F:39:05:F9:26:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/bd41b623-bbc6-3d69-adb3-afa7f5e7d9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.crl X509v3 Authority Key Identifier: keyid:99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer sbgp-ipAddrBlock: critical IPv4: 199.33.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0f:68:58:1a:0b:10:df:3d:2f:73:f6:8f:4b:a8:6d:fa:93: 6f:32:97:69:b1:71:bf:9d:8c:e2:0c:4e:b5:99:68:f1:c5:1f: f2:91:b0:5e:a0:cd:30:69:b0:e2:44:55:ae:a6:32:86:13:a0: 9e:ae:c7:24:9c:cc:92:29:fd:fa:7e:2a:70:ff:48:0f:ba:b1: 9e:44:dd:54:45:42:c6:41:d3:48:89:40:8d:8d:68:e0:fe:a0: 04:fb:13:71:a2:7a:d3:30:c5:2d:02:4b:8d:61:c9:44:ec:eb: e3:d1:5b:f0:c4:3f:67:6a:a3:47:d8:4e:84:38:36:00:60:3d: c7:eb:90:42:c7:d9:ea:52:44:85:a8:2d:98:86:a7:59:b8:2d: d8:fb:5a:11:9b:9b:de:94:13:9e:59:51:b5:f4:91:46:e5:2e: de:3d:d7:b5:0d:08:8c:c2:37:9a:81:a7:53:8f:4a:cf:05:e9: 8f:46:e8:95:d8:2c:24:14:74:b9:b1:6b:11:9b:98:cc:18:8d: b8:e8:10:c3:b0:d7:3e:b3:57:d9:e4:87:96:1f:50:1b:8b:64: 1d:a1:5c:1c:43:48:27:e3:68:3e:0d:87:bd:b8:bc:87:68:6c: f2:47:c4:32:c4:0f:f8:71:e4:64:5e:1e:c5:c3:5b:70:bd:f3: 55:0f:2d:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/BjbDCDywhUDe/7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgxZDgxM2MtODU2Ni00ZjAxLWI4ZjMtOTg5ZGNmOGQ5 ODNlMB4XDTI2MDUwNjE4MTMyOVoXDTI2MDgwNDE4MTMyOVowLzEtMCsGA1UEAxMk YzAxNjI5MTgtNDcwYS00YWMxLTk4YzItZTMxN2QwMjJkNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOsyn6JHLLbe6mqsIqGAa6Tu8B02FmQRLwnt GzSNKB2dmTfW+xVYsqom90udpAHFM7lBSodbN2eWPkbZW366rUcn5cIkycm2T5o7 IwmeSDfdCDH9FVXXC3zdinJSnjz/LK3O6rLeg6ipAIMcSHTODOwIF1tqzf7xPJGM vnaboDXzE45loJDtdDzVh8nZ1pg5Kda0QTCyoTvjqX5krKbH5zoyxAs2rfEjEH1n d1+et1Uv29vc0z22zuWbdtO9VHxRjLAZIrOpdnpm2Wb4jB4W4fdCx76HM75g3Q8k CZgBtuB2PyqZYLU4bqOY/blcD2lEjjizAM81HdYhDcBdOFZQgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/hrjf7oi6B4kwCb9VEjzkF+SZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82ODFk ODEzYy04NTY2LTRmMDEtYjhmMy05ODlkY2Y4ZDk4M2UvYmQ0MWI2MjMtYmJjNi0z ZDY5LWFkYjMtYWZhN2Y1ZTdkOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjgxZDgxM2MtODU2Ni00ZjAxLWI4 ZjMtOTg5ZGNmOGQ5ODNlLzY4MWQ4MTNjLTg1NjYtNGYwMS1iOGYzLTk4OWRjZjhk OTgzZS5jcmwwHwYDVR0jBBgwFoAUmaUNdWNKHu/nzQudetpkD/2COHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82ODFkODEzYy04NTY2LTRmMDEtYjhmMy05ODlk Y2Y4ZDk4M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYPaFgaCxDfPS9z9o9LqG36k28yl2mxcb+djOIMTrWZaPHFH/KRsF6g zTBpsOJEVa6mMoYToJ6uxySczJIp/fp+KnD/SA+6sZ5E3VRFQsZB00iJQI2NaOD+ oAT7E3GietMwxS0CS41hyUTs6+PRW/DEP2dqo0fYToQ4NgBgPcfrkELH2epSRIWo LZiGp1m4Ldj7WhGbm96UE55ZUbX0kUblLt4917UNCIzCN5qBp1OPSs8F6Y9G6JXY LCQUdLmxaxGbmMwYjbjoEMOw1z6zV9nkh5YfUBuLZB2hXBxDSCfjaD4Nh724vIdo bPJHxDLED/hx5GReHsXDW3C981UPLSs= -----END CERTIFICATE-----Generated at Wed May 13 05:55:48 2026 by rpki-client