$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/c518bc0d-f20c-3936-8e2c-961f70f715bd.roa File: c518bc0d-f20c-3936-8e2c-961f70f715bd.roa (raw, json) Hash identifier: vR9wgoZ9tACtAd8GqfZqAJqvwRV6ZV2NFewHoB3KjxA= Subject key identifier: 04:DB:EC:A9:B2:8B:42:7F:92:2C:0A:2C:D0:89:16:7E:39:1A:C8:40 Certificate issuer: /CN=afc941ae-9449-4fd9-82b8-9ae5867887ee Certificate serial: 010D0C9F4328584D9DBB4A3A9C789E6F81253220 Authority key identifier: 17:83:36:B3:0E:DC:5A:AE:96:BA:E1:7A:72:05:10:6E:A0:CE:E1:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/c518bc0d-f20c-3936-8e2c-961f70f715bd.roa Signing time: Fri 24 Apr 2026 20:00:51 +0000 ROA not before: Fri 24 Apr 2026 20:00:51 +0000 ROA not after: Thu 23 Jul 2026 19:35:25 +0000 asID: 19065 IP address blocks: 199.96.0.0/21 maxlen: 21 199.96.0.0/24 maxlen: 24 199.96.1.0/24 maxlen: 24 199.96.2.0/24 maxlen: 24 199.96.3.0/24 maxlen: 24 199.96.4.0/24 maxlen: 24 199.96.5.0/24 maxlen: 24 199.96.6.0/24 maxlen: 24 199.96.7.0/24 maxlen: 24 2602:802:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/afc941ae-9449-4fd9-82b8-9ae5867887ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/afc941ae-9449-4fd9-82b8-9ae5867887ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9d:bb:4a:3a:9c:78:9e:6f:81:25:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc941ae-9449-4fd9-82b8-9ae5867887ee Validity Not Before: Apr 24 20:00:51 2026 GMT Not After : Jul 23 19:35:25 2026 GMT Subject: CN=d2cc104a-1e95-4c74-a463-60de85df5b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:22:b9:e4:ed:bb:cc:4e:12:27:f3:3a:03: a7:bb:92:b8:af:3f:bc:79:63:c6:d3:4c:72:4b:5f: f3:24:3e:c1:a4:5d:4e:e5:1e:63:ff:f5:7e:bc:2f: 20:85:a4:90:e0:65:85:03:5f:7a:cf:8f:c9:4a:3e: 20:d6:89:5d:25:0f:4f:61:0b:8d:bb:c1:25:bd:40: f9:6d:a3:48:b1:54:39:9c:02:aa:76:e7:27:01:f8: 48:4a:80:7d:19:6f:0b:c5:72:be:a9:6a:c9:97:6f: 93:86:83:4d:4c:f6:1b:bd:dc:ec:75:45:ac:9f:53: 40:97:13:24:19:52:99:24:f6:05:1b:1f:bf:8e:49: 61:0b:db:fd:bb:3f:75:bf:e7:1e:13:bf:f2:f9:a9: 20:41:99:86:47:1d:bf:0b:e0:43:64:ed:30:6b:3f: c3:a4:27:ac:40:a1:c0:4c:96:75:84:e0:7c:a3:51: 2e:b0:48:49:b8:b5:7c:19:88:d9:23:76:5d:df:02: e3:b5:d7:be:94:e7:cc:30:52:25:02:d4:18:98:46: cc:72:ca:06:99:cd:82:97:fb:f5:76:64:a7:80:05: f8:29:1c:21:d3:1b:9d:c2:c5:78:22:53:f0:6b:49: 50:d7:78:e3:fc:06:b9:be:7a:23:d6:78:80:01:73: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DB:EC:A9:B2:8B:42:7F:92:2C:0A:2C:D0:89:16:7E:39:1A:C8:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/c518bc0d-f20c-3936-8e2c-961f70f715bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/afc941ae-9449-4fd9-82b8-9ae5867887ee.crl X509v3 Authority Key Identifier: keyid:17:83:36:B3:0E:DC:5A:AE:96:BA:E1:7A:72:05:10:6E:A0:CE:E1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee.cer sbgp-ipAddrBlock: critical IPv4: 199.96.0.0/21 IPv6: 2602:802:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2f:6e:80:c0:3e:7d:10:9a:75:c4:22:7d:d7:72:d4:2b:d0: ea:ed:15:9a:3b:d8:0b:54:f5:b8:6c:ba:ec:d6:12:84:51:b0: d0:e1:1d:fa:1b:a1:fb:68:90:3a:70:bc:bb:7b:c7:83:f8:66: 48:5d:7c:00:dc:3a:df:64:72:e6:be:bf:2b:40:a6:7a:66:d7: 36:70:9a:96:6a:b2:ee:f8:b3:e3:f9:5d:f3:00:db:df:fa:02: a7:63:c7:b7:a1:ab:05:a8:86:40:9e:4f:03:46:04:eb:05:94: 8f:87:74:5c:d1:00:f2:bc:18:bb:e0:e8:f1:ec:c0:a5:d3:4d: 54:84:06:21:ab:bd:5a:5c:41:02:e6:30:59:07:9e:1a:7c:80: f3:13:df:0f:81:7d:b8:2d:59:5d:58:2f:12:39:10:3b:16:cb: 9f:63:35:7c:4c:64:93:a2:c4:28:ae:20:6a:55:7a:2a:0d:a0: 85:70:5e:76:a8:9a:08:0e:9b:db:41:35:ac:5c:3a:62:45:c3: 7a:4b:b4:d4:6c:ef:c9:9f:fc:0c:4f:5e:e3:64:97:67:d3:0c: fb:3f:72:c5:99:fe:55:ab:1c:4e:f2:99:31:c5:6b:69:c3:8f: e0:e9:1e:01:a9:95:22:e8:fe:5d:76:6e:aa:26:b1:40:4c:2b: e2:b7:1b:18 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2du0o6nHieb4ElMiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOTQxYWUtOTQ0OS00ZmQ5LTgyYjgtOWFlNTg2Nzg4 N2VlMB4XDTI2MDQyNDIwMDA1MVoXDTI2MDcyMzE5MzUyNVowLzEtMCsGA1UEAxMk ZDJjYzEwNGEtMWU5NS00Yzc0LWE0NjMtNjBkZTg1ZGY1YjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxsiueTtu8xOEifzOgOnu5K4rz+8eWPG00xy S1/zJD7BpF1O5R5j//V+vC8ghaSQ4GWFA196z4/JSj4g1oldJQ9PYQuNu8ElvUD5 baNIsVQ5nAKqducnAfhISoB9GW8LxXK+qWrJl2+ThoNNTPYbvdzsdUWsn1NAlxMk GVKZJPYFGx+/jklhC9v9uz91v+ceE7/y+akgQZmGRx2/C+BDZO0waz/DpCesQKHA TJZ1hOB8o1EusEhJuLV8GYjZI3Zd3wLjtde+lOfMMFIlAtQYmEbMcsoGmc2Cl/v1 dmSngAX4KRwh0xudwsV4IlPwa0lQ13jj/Aa5vnoj1niAAXO2EwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFATb7Kmyi0J/kiwKLNCJFn45GshAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmM5 NDFhZS05NDQ5LTRmZDktODJiOC05YWU1ODY3ODg3ZWUvYzUxOGJjMGQtZjIwYy0z OTM2LThlMmMtOTYxZjcwZjcxNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZjOTQxYWUtOTQ0OS00ZmQ5LTgy YjgtOWFlNTg2Nzg4N2VlL2FmYzk0MWFlLTk0NDktNGZkOS04MmI4LTlhZTU4Njc4 ODdlZS5jcmwwHwYDVR0jBBgwFoAUF4M2sw7cWq6WuuF6cgUQbqDO4W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmM5NDFhZS05NDQ5LTRmZDktODJiOC05YWU1 ODY3ODg3ZWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDx2AAMA4E AgACMAgDBgAmAggCUDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTL26AwD59EJp1xCJ913LUK9Dq7RWaO9gL VPW4bLrs1hKEUbDQ4R36G6H7aJA6cLy7e8eD+GZIXXwA3DrfZHLmvr8rQKZ6Ztc2 cJqWarLu+LPj+V3zANvf+gKnY8e3oasFqIZAnk8DRgTrBZSPh3Rc0QDyvBi74Ojx 7MCl001UhAYhq71aXEEC5jBZB54afIDzE98PgX24LVldWC8SORA7FsufYzV8TGST osQoriBqVXoqDaCFcF52qJoIDpvbQTWsXDpiRcN6S7TUbO/Jn/wMT17jZJdn0wz7 P3LFmf5VqxxO8pkxxWtpw4/g6R4BqZUi6P5ddm6qJrFATCvitxsY -----END CERTIFICATE-----Generated at Wed May 13 14:53:22 2026 by rpki-client