$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa File: add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa (raw, json) Hash identifier: gIwIGtMR9OKyeoncwzey94sbi1ocQfcIQwCquARNEQk= Subject key identifier: 88:AB:A2:6B:7E:C5:07:91:A8:F2:88:7C:77:08:3B:84:2B:36:A5:F5 Certificate issuer: /CN=ead863e4-358d-4a38-ac7a-947961e420de Certificate serial: 010D0C9F4328584DA831C1F42EF0ED997821F3BC Authority key identifier: 26:E5:A8:5C:80:53:C2:37:74:BF:46:BC:82:AE:8F:23:32:9D:49:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa Signing time: Tue 28 Apr 2026 13:57:38 +0000 ROA not before: Tue 28 Apr 2026 13:57:38 +0000 ROA not after: Mon 27 Jul 2026 13:57:38 +0000 asID: 47041 IP address blocks: 199.249.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/ead863e4-358d-4a38-ac7a-947961e420de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/ead863e4-358d-4a38-ac7a-947961e420de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:31:c1:f4:2e:f0:ed:99:78:21:f3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead863e4-358d-4a38-ac7a-947961e420de Validity Not Before: Apr 28 13:57:38 2026 GMT Not After : Jul 27 13:57:38 2026 GMT Subject: CN=cdf08e20-feb9-49f9-b6d0-63f6f0529434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:ab:c7:b9:e4:39:ad:00:dc:b0:ab:9e:77: f1:7b:b9:97:1f:95:f5:74:27:c6:65:39:0c:32:9f: 48:89:f4:56:02:43:e4:b5:34:43:3a:4c:ae:99:31: 3b:cb:6a:f0:25:92:21:41:92:bd:63:69:75:ba:8c: a6:5f:2b:eb:d3:bc:33:be:66:65:16:0f:c1:64:1e: b0:9f:bd:e2:9d:da:11:ab:da:c1:72:6c:5b:ab:7b: 59:39:cc:59:4b:8e:d8:df:3a:43:86:dc:55:12:ce: 6c:c3:42:1a:9b:b3:0f:68:03:70:d4:78:72:9f:33: d6:2e:fb:dc:5b:fe:ad:a4:3b:18:ca:46:5f:e4:fd: 45:12:f5:83:73:ff:2f:10:09:fc:24:94:dc:39:58: 8c:95:3d:2b:7a:33:9c:1f:6c:b0:0e:ea:a4:0e:89: 42:5d:0c:c1:ed:99:9c:89:49:a8:5c:3d:32:79:da: 13:a7:44:8d:29:b7:46:56:a4:d5:e5:14:c0:0e:02: cf:6b:e1:fd:2d:32:ee:eb:e2:88:95:90:95:c2:29: 75:27:49:4b:d7:a3:c0:0e:64:a7:2a:60:f2:72:cc: 74:16:dd:e5:60:7e:74:42:68:42:a7:a6:98:3c:3f: 3c:5d:2f:c1:51:a7:bb:dd:cf:d2:90:19:f3:e7:7d: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:A2:6B:7E:C5:07:91:A8:F2:88:7C:77:08:3B:84:2B:36:A5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/add8d3dd-2cd9-3411-a358-1067c3d4b8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de/ead863e4-358d-4a38-ac7a-947961e420de.crl X509v3 Authority Key Identifier: keyid:26:E5:A8:5C:80:53:C2:37:74:BF:46:BC:82:AE:8F:23:32:9D:49:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ead863e4-358d-4a38-ac7a-947961e420de.cer sbgp-ipAddrBlock: critical IPv4: 199.249.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:32:8b:a4:7e:76:1d:2a:04:ea:ac:cb:30:42:23:13:7d:1b: 53:59:9f:93:c9:84:7b:46:60:b3:a7:de:fb:98:ce:36:8b:bf: 7c:3b:f1:67:57:ab:d4:08:01:ad:87:7c:2a:45:98:77:b2:4f: b6:4c:3d:ba:bf:1f:80:d3:08:30:e0:10:7a:e8:24:96:42:5a: 11:89:74:a3:9a:2b:6f:1e:cb:05:27:b3:45:24:a8:9d:f3:da: 01:05:54:d6:46:10:aa:4c:1d:aa:23:13:5d:29:24:bf:78:f0: f2:6c:a7:70:f7:49:eb:a8:69:03:14:62:55:9a:fb:23:a4:fe: 35:83:eb:c4:40:ce:39:4f:04:48:26:51:9c:47:c3:59:95:0c: 79:c9:94:33:45:a8:4e:28:5b:44:9f:a9:38:74:fe:dc:97:ea: ef:2d:70:fd:55:94:7a:78:bd:cc:35:b3:bc:1c:26:07:48:2e: 0d:a8:84:41:65:20:b5:b1:e7:6f:a0:d3:6a:14:b2:0f:00:ff: 29:55:b1:64:59:03:b0:69:44:eb:e3:17:ae:80:12:1a:29:32: e2:10:12:bb:99:c0:b1:5b:37:52:d8:d4:06:a5:d3:b3:21:4a: e7:ea:53:1f:53:0f:70:73:60:af:71:3d:98:bd:c3:9a:c4:f9: 74:f7:97:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oMcH0LvDtmXgh87wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFkODYzZTQtMzU4ZC00YTM4LWFjN2EtOTQ3OTYxZTQy MGRlMB4XDTI2MDQyODEzNTczOFoXDTI2MDcyNzEzNTczOFowLzEtMCsGA1UEAxMk Y2RmMDhlMjAtZmViOS00OWY5LWI2ZDAtNjNmNmYwNTI5NDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTCrx7nkOa0A3LCrnnfxe7mXH5X1dCfGZTkM Mp9IifRWAkPktTRDOkyumTE7y2rwJZIhQZK9Y2l1uoymXyvr07wzvmZlFg/BZB6w n73indoRq9rBcmxbq3tZOcxZS47Y3zpDhtxVEs5sw0Iam7MPaANw1HhynzPWLvvc W/6tpDsYykZf5P1FEvWDc/8vEAn8JJTcOViMlT0rejOcH2ywDuqkDolCXQzB7Zmc iUmoXD0yedoTp0SNKbdGVqTV5RTADgLPa+H9LTLu6+KIlZCVwil1J0lL16PADmSn KmDycsx0Ft3lYH50QmhCp6aYPD88XS/BUae73c/SkBnz5339gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiromt+xQeRqPKIfHcIO4QrNqX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lYWQ4 NjNlNC0zNThkLTRhMzgtYWM3YS05NDc5NjFlNDIwZGUvYWRkOGQzZGQtMmNkOS0z NDExLWEzNTgtMTA2N2MzZDRiOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWFkODYzZTQtMzU4ZC00YTM4LWFj N2EtOTQ3OTYxZTQyMGRlL2VhZDg2M2U0LTM1OGQtNGEzOC1hYzdhLTk0Nzk2MWU0 MjBkZS5jcmwwHwYDVR0jBBgwFoAUJuWoXIBTwjd0v0a8gq6PIzKdScIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lYWQ4NjNlNC0zNThkLTRhMzgtYWM3YS05NDc5 NjFlNDIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYyi6R+dh0qBOqsyzBCIxN9G1NZn5PJhHtGYLOn3vuYzjaLv3w78WdX q9QIAa2HfCpFmHeyT7ZMPbq/H4DTCDDgEHroJJZCWhGJdKOaK28eywUns0UkqJ3z 2gEFVNZGEKpMHaojE10pJL948PJsp3D3SeuoaQMUYlWa+yOk/jWD68RAzjlPBEgm UZxHw1mVDHnJlDNFqE4oW0SfqTh0/tyX6u8tcP1VlHp4vcw1s7wcJgdILg2ohEFl ILWx52+g02oUsg8A/ylVsWRZA7BpROvjF66AEhopMuIQEruZwLFbN1LY1Aal07Mh SufqUx9TD3BzYK9xPZi9w5rE+XT3l84= -----END CERTIFICATE-----Generated at Wed May 13 12:40:02 2026 by rpki-client