$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b/4351c68f-5139-3bae-9272-f3c9cb3ff4a6.roa File: 4351c68f-5139-3bae-9272-f3c9cb3ff4a6.roa (raw, json) Hash identifier: dKZxkKj5PztnIab7hmieFyZuFyrdzGwUJkSY93khl4Y= Subject key identifier: EE:C6:FE:D1:22:5E:70:C3:AA:3F:CD:71:1B:10:06:DB:B2:0D:B9:5F Certificate issuer: /CN=08005243-17d8-4906-8967-d1ffb6b6170b Certificate serial: 010D0C9F4328584DAAE052FB7E3A0269F1B32D00 Authority key identifier: 86:A8:FC:B2:A2:08:40:97:AE:64:03:76:83:EA:D2:52:9F:1E:BF:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b/4351c68f-5139-3bae-9272-f3c9cb3ff4a6.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 400566 IP address blocks: 199.201.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b/08005243-17d8-4906-8967-d1ffb6b6170b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b/08005243-17d8-4906-8967-d1ffb6b6170b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:52:fb:7e:3a:02:69:f1:b3:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08005243-17d8-4906-8967-d1ffb6b6170b Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=72f3ca21-3d9e-4447-9e0d-d9daafdaec38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:27:7b:96:6a:e4:56:95:e3:95:11:fc:b7:e3: 34:1c:b5:ba:56:66:f7:a4:55:be:ac:48:59:70:e3: 7f:b0:d0:33:81:cb:de:63:16:f2:b7:ce:0b:09:6a: 9b:98:72:34:19:31:d4:8e:56:95:db:65:42:d3:7e: ae:c0:08:b1:07:45:b7:85:cc:48:79:0c:a5:2f:0c: 80:f1:32:5f:3e:24:9a:a6:52:00:f9:81:22:60:7a: 4b:37:ab:a0:91:15:34:35:0e:35:2e:a6:64:3e:78: a4:8a:c0:1a:8c:71:73:e7:5e:26:19:9d:22:b7:4a: 05:a5:8c:5e:b4:92:d4:49:e6:ac:3a:3a:3d:93:43: 18:78:c5:1f:48:b4:84:42:be:07:18:5e:36:24:bd: 11:64:de:80:97:dd:eb:ce:66:9b:db:3b:fe:d6:c5: 19:87:53:ba:68:3f:f1:bd:74:cd:12:f3:04:ff:4e: 19:4d:33:b9:e7:6b:0a:3f:ec:0c:97:31:8a:a3:5d: 52:7b:55:86:ad:20:ad:db:c8:54:41:51:4c:0e:92: d1:66:1b:79:a7:2d:4a:76:11:a8:6f:cd:c3:af:26: 87:11:6c:75:e7:05:f5:ef:3e:d3:8b:08:d4:0c:99: db:b6:65:ae:c7:c3:ef:ff:62:1d:fc:cc:6a:61:3f: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C6:FE:D1:22:5E:70:C3:AA:3F:CD:71:1B:10:06:DB:B2:0D:B9:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b/4351c68f-5139-3bae-9272-f3c9cb3ff4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b/08005243-17d8-4906-8967-d1ffb6b6170b.crl X509v3 Authority Key Identifier: keyid:86:A8:FC:B2:A2:08:40:97:AE:64:03:76:83:EA:D2:52:9F:1E:BF:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/08005243-17d8-4906-8967-d1ffb6b6170b.cer sbgp-ipAddrBlock: critical IPv4: 199.201.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:31:4b:6f:43:61:d0:fe:b5:4c:ec:87:c4:63:d9:01:44:12: 08:9f:e7:c1:98:63:62:af:e1:09:93:0d:9d:2b:35:93:bc:e5: 42:2c:35:b6:f3:63:af:75:eb:47:ac:f8:bd:e4:9e:a5:4c:3d: f7:7d:25:45:94:67:54:1f:54:9c:9f:56:de:92:a2:70:77:b1: d9:08:fd:b6:48:11:6b:ca:47:55:6f:6f:67:c7:e8:00:97:d4: 3a:de:2f:45:c0:e0:ad:d5:c1:ee:a0:2e:18:4c:d8:9e:db:44: 3e:34:39:bc:46:1f:ce:1e:fe:38:56:d2:d8:a5:66:94:2d:02: 73:c2:51:55:d6:67:2d:01:28:cd:51:67:53:ca:b1:36:9b:65: 8e:95:94:a3:b2:7b:be:d5:fa:85:74:29:c1:ba:bd:9b:67:34: 29:0e:5f:39:2f:16:71:61:37:65:ad:9a:25:16:11:8e:4e:9d: bb:b9:b9:bb:02:22:95:b3:96:7d:90:d5:fd:19:be:e2:3a:75: 8f:41:59:16:db:a3:3f:9f:37:71:2f:e8:ea:59:f2:3e:f7:18: 58:7a:57:dd:41:65:52:41:96:ba:b8:cf:b6:b5:10:39:82:16: 49:65:bb:cf:be:f8:60:b0:78:24:99:f3:ae:67:7a:1b:66:2c: 9e:e5:0b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4FL7fjoCafGzLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgwMDUyNDMtMTdkOC00OTA2LTg5NjctZDFmZmI2YjYx NzBiMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NzJmM2NhMjEtM2Q5ZS00NDQ3LTllMGQtZDlkYWFmZGFlYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCd7lmrkVpXjlRH8t+M0HLW6Vmb3pFW+rEhZ cON/sNAzgcveYxbyt84LCWqbmHI0GTHUjlaV22VC036uwAixB0W3hcxIeQylLwyA 8TJfPiSaplIA+YEiYHpLN6ugkRU0NQ41LqZkPnikisAajHFz514mGZ0it0oFpYxe tJLUSeasOjo9k0MYeMUfSLSEQr4HGF42JL0RZN6Al93rzmab2zv+1sUZh1O6aD/x vXTNEvME/04ZTTO552sKP+wMlzGKo11Se1WGrSCt28hUQVFMDpLRZht5py1KdhGo b83DryaHEWx15wX17z7TiwjUDJnbtmWux8Pv/2Id/MxqYT9DjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7G/tEiXnDDqj/NcRsQBtuyDblfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODAw NTI0My0xN2Q4LTQ5MDYtODk2Ny1kMWZmYjZiNjE3MGIvNDM1MWM2OGYtNTEzOS0z YmFlLTkyNzItZjNjOWNiM2ZmNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDgwMDUyNDMtMTdkOC00OTA2LTg5 NjctZDFmZmI2YjYxNzBiLzA4MDA1MjQzLTE3ZDgtNDkwNi04OTY3LWQxZmZiNmI2 MTcwYi5jcmwwHwYDVR0jBBgwFoAUhqj8sqIIQJeuZAN2g+rSUp8ev2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wODAwNTI0My0xN2Q4LTQ5MDYtODk2Ny1kMWZm YjZiNjE3MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8ndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUxS29DYdD+tUzsh8Rj2QFEEgif58GYY2Kv4QmTDZ0rNZO85UIsNbbz Y69160es+L3knqVMPfd9JUWUZ1QfVJyfVt6SonB3sdkI/bZIEWvKR1Vvb2fH6ACX 1DreL0XA4K3Vwe6gLhhM2J7bRD40ObxGH84e/jhW0tilZpQtAnPCUVXWZy0BKM1R Z1PKsTabZY6VlKOye77V+oV0KcG6vZtnNCkOXzkvFnFhN2WtmiUWEY5Onbu5ubsC IpWzln2Q1f0ZvuI6dY9BWRbboz+fN3Ev6OpZ8j73GFh6V91BZVJBlrq4z7a1EDmC Fkllu8+++GCweCSZ865nehtmLJ7lC9s= -----END CERTIFICATE-----Generated at Wed May 13 15:17:32 2026 by rpki-client