$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa File: afe4eaec-855a-3198-8438-4f284572e247.roa (raw, json) Hash identifier: nMCNgBPF/crSnQlxGA86Mqz13OSGA6ZW/A5WcC5QwAg= Subject key identifier: 17:1B:67:F8:54:C6:92:33:7F:91:15:AD:ED:C9:06:3F:EE:48:B5:F5 Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391 Certificate serial: 010D0C9F4328584DB0757F1EB75B9FF04AEF75C0 Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 26548 IP address blocks: 199.96.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:7f:1e:b7:5b:9f:f0:4a:ef:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=df427cc1-bf89-4009-b796-cff8f6a6dc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:25:31:ef:1e:25:ca:dd:96:74:3d:a7:a7: b6:0e:39:dd:03:94:37:ec:87:31:6f:3f:10:1a:45: 76:f9:9e:cb:63:bd:94:4c:3b:74:69:1b:99:24:6b: 1d:2d:e0:01:39:5f:7c:4e:10:06:d8:02:4f:ef:00: 41:50:7a:ba:25:3c:d1:92:2d:bf:66:99:74:9b:ad: 30:39:d5:22:88:63:af:fd:84:a0:49:84:db:e0:ad: 4b:a2:f2:91:62:39:28:ef:14:5e:d1:00:b8:42:a3: cd:fd:09:49:8d:11:ce:43:b5:2c:12:a6:ed:f1:98: dd:25:88:f8:c1:16:b3:35:2e:d4:e3:80:f0:9f:52: 21:b8:05:2b:4a:70:91:9c:b3:ba:8a:63:3b:61:59: 95:69:c3:2f:29:ab:73:b2:92:17:e2:49:0f:3b:2f: 9b:28:99:0a:ab:4b:75:58:73:77:76:77:c0:cc:cf: 18:c7:4d:c7:07:97:0c:98:34:94:aa:61:bb:d8:0c: d8:b8:a5:1e:49:9a:dc:36:e4:1b:e6:cd:6a:0e:53: c2:75:cc:0b:bd:01:49:fd:4c:c2:6b:e0:82:a1:27: 37:d5:61:52:29:60:5b:0d:0d:0a:43:3d:83:cb:7c: 37:c2:97:8c:df:5a:fa:cd:95:ce:fb:20:63:0a:37: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1B:67:F8:54:C6:92:33:7F:91:15:AD:ED:C9:06:3F:EE:48:B5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl X509v3 Authority Key Identifier: keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer sbgp-ipAddrBlock: critical IPv4: 199.96.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e7:f6:21:5d:cb:fa:45:3e:27:50:d3:8b:3a:18:04:d5:ac: 16:63:5f:d4:86:3d:a0:67:d0:27:0e:75:07:88:a2:30:09:36: 52:14:d1:47:fa:12:9c:ef:0b:b6:c2:8f:05:5b:61:65:07:5a: 35:14:6b:61:b3:f8:27:e8:5b:dd:fa:c3:23:15:7e:ef:38:61: 0e:85:cf:0f:29:d3:84:e3:a7:bb:14:8f:31:35:17:a1:1a:f3: 5f:eb:d0:3d:aa:20:cf:c6:8c:5d:3c:57:f2:04:ad:b4:7b:30: a5:c5:ff:69:b2:0b:2b:fe:f9:0f:fb:18:c5:70:6b:ef:8e:c4: 46:ec:db:11:09:be:03:76:2a:ff:ac:a7:d1:60:00:ae:c1:ff: 34:ff:4f:a8:ae:44:5c:8a:84:05:6a:a4:53:46:55:be:25:26: ed:11:d2:87:60:46:cf:de:73:3e:8d:f9:8a:da:ef:4f:c3:03: 92:45:5a:21:ec:92:0b:6a:d9:bd:99:e7:08:2d:3e:56:65:8a: 66:90:ed:4f:e5:2a:c5:ee:b5:d2:f3:07:30:6b:af:f3:0d:03: 6c:09:77:b5:ac:a0:de:52:c9:08:f6:96:af:15:af:97:34:3b: 07:64:13:89:b1:d4:08:2a:81:2b:cf:02:dd:01:03:15:de:a7: 0e:31:e4:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdX8et1uf8ErvdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZh MzkxMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk ZGY0MjdjYzEtYmY4OS00MDA5LWI3OTYtY2ZmOGY2YTZkYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnslMe8eJcrdlnQ9p6e2DjndA5Q37Icxbz8Q GkV2+Z7LY72UTDt0aRuZJGsdLeABOV98ThAG2AJP7wBBUHq6JTzRki2/Zpl0m60w OdUiiGOv/YSgSYTb4K1LovKRYjko7xRe0QC4QqPN/QlJjRHOQ7UsEqbt8ZjdJYj4 wRazNS7U44Dwn1IhuAUrSnCRnLO6imM7YVmVacMvKatzspIX4kkPOy+bKJkKq0t1 WHN3dnfAzM8Yx03HB5cMmDSUqmG72AzYuKUeSZrcNuQb5s1qDlPCdcwLvQFJ/UzC a+CCoSc31WFSKWBbDQ0KQz2Dy3w3wpeM31r6zZXO+yBjCjf4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcbZ/hUxpIzf5EVre3JBj/uSLX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDE4 YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvYWZlNGVhZWMtODU1YS0z MTk4LTg0MzgtNGYyODQ1NzJlMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQxOGI3YmItN2YxYy00MzMzLTli OGUtYmFiZjhiOGZhMzkxLzQ0MThiN2JiLTdmMWMtNDMzMy05YjhlLWJhYmY4Yjhm YTM5MS5jcmwwHwYDVR0jBBgwFoAUF+nkvGubJJ1zMAqaiW7ze5zlQ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJm OGI4ZmEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDn9iFdy/pFPidQ04s6GATVrBZjX9SGPaBn0CcOdQeIojAJNlIU0Uf6 EpzvC7bCjwVbYWUHWjUUa2Gz+CfoW936wyMVfu84YQ6Fzw8p04Tjp7sUjzE1F6Ea 81/r0D2qIM/GjF08V/IErbR7MKXF/2myCyv++Q/7GMVwa++OxEbs2xEJvgN2Kv+s p9FgAK7B/zT/T6iuRFyKhAVqpFNGVb4lJu0R0odgRs/ecz6N+Yra70/DA5JFWiHs kgtq2b2Z5wgtPlZlimaQ7U/lKsXutdLzBzBrr/MNA2wJd7WsoN5SyQj2lq8Vr5c0 OwdkE4mx1AgqgSvPAt0BAxXepw4x5EY= -----END CERTIFICATE-----Generated at Wed May 13 04:35:54 2026 by rpki-client