$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa File: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (raw, json) Hash identifier: AdcRsOT48I09D7P7j+QAiM1vwNjI0umxryQ8N1+6Z50= Subject key identifier: 43:26:F6:66:44:96:22:0D:7C:55:B6:1C:F4:CF:7D:63:DA:57:34:EA Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Certificate serial: 010D0C9F4328584DA97AB8F40D9BD1F392DD2D00 Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa Signing time: Wed 29 Apr 2026 01:00:23 +0000 ROA not before: Wed 29 Apr 2026 01:00:23 +0000 ROA not after: Tue 28 Jul 2026 01:00:23 +0000 asID: 14497 IP address blocks: 199.168.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:7a:b8:f4:0d:9b:d1:f3:92:dd:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Validity Not Before: Apr 29 01:00:23 2026 GMT Not After : Jul 28 01:00:23 2026 GMT Subject: CN=f10d57a8-1b44-4f23-aad3-23c16be24349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:73:19:87:74:a0:a7:b8:4b:b8:fb:1c:a9: 57:5f:1e:bb:e1:e8:4f:a1:31:b5:17:0f:7e:70:4c: 6f:f6:77:00:c9:05:e9:6d:95:7d:d6:86:e2:97:66: 79:5a:81:36:08:68:ba:9e:8f:85:2f:ce:54:76:e0: 3c:56:bc:32:70:d6:3c:2d:ed:b1:94:d2:a8:e0:74: 00:6c:bd:fd:93:ad:91:d8:11:13:df:5b:5d:ca:e8: 40:c7:68:0d:81:83:fc:54:74:4a:d8:3a:29:56:75: b6:6b:bd:2e:50:00:cd:55:ad:51:81:d9:10:12:02: f9:cb:c6:30:52:af:e7:0b:af:98:2b:f8:54:08:10: 8f:8b:fa:06:77:7a:37:71:88:88:b5:87:ec:14:40: f9:d1:d3:0a:b8:24:aa:77:f6:bb:cd:38:29:ae:a9: 99:d8:ca:90:eb:fe:eb:30:f1:19:1c:b3:12:0e:78: 11:c0:e5:cf:f2:e0:fc:e9:63:3e:70:b4:2f:48:63: 29:88:9f:11:60:b4:09:63:c1:19:a6:be:a1:9a:1d: a8:3b:3a:7b:f3:38:8d:c9:b6:cb:58:ff:ec:0e:eb: ed:e9:10:32:6f:25:d6:b5:b5:3d:a2:37:63:53:a0: 24:5e:f8:db:6b:a3:10:37:06:6a:c0:7a:2a:5b:4b: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:26:F6:66:44:96:22:0D:7C:55:B6:1C:F4:CF:7D:63:DA:57:34:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/9fd81086-d2ab-3b69-873f-c043d5f1123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl X509v3 Authority Key Identifier: keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer sbgp-ipAddrBlock: critical IPv4: 199.168.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b8:fd:54:be:6e:85:28:42:d3:7e:b7:53:af:b5:e2:4c:6b: 47:7d:fa:46:e0:d7:de:e1:57:25:ee:52:1e:70:3e:6c:75:1c: 0a:5b:77:40:2a:d0:76:f1:5c:0c:53:c9:9a:c4:dd:03:ad:f6: 50:b0:a9:9b:b5:ee:4f:ee:64:3d:f7:9c:14:32:a4:36:59:5a: dc:99:32:9a:0c:10:b7:a4:d5:b9:1e:b3:6c:a5:79:11:08:bd: 07:f3:f3:92:3b:d5:a9:b9:34:b2:cc:01:f8:90:4d:af:83:c2: 61:d4:ca:f2:c1:8d:ac:e8:ef:44:14:68:d5:a4:8c:b4:1d:71: d5:63:e4:e9:b4:ef:f0:93:ba:3a:ad:46:bd:23:ce:f4:f2:e5: c3:e6:42:ab:e1:5b:b4:28:72:af:b1:ec:f0:4f:16:59:0d:6d: e2:3d:76:47:59:36:84:07:90:8c:23:97:8d:ff:2d:d1:72:8d: df:55:0b:9a:ca:e7:e9:fb:8b:a6:e5:ce:cd:93:80:16:e6:8f: 53:4b:01:4e:b4:b8:da:39:7d:23:42:17:df:9d:e8:ad:a9:4f: 8b:6c:b6:62:a3:cb:51:0e:3f:24:60:d3:3c:35:1e:02:7c:63: bf:6e:ee:36:a1:f1:25:f8:90:85:ee:d8:c9:32:7c:85:80:a1: db:92:b6:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2perj0DZvR85LdLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl MDg3MB4XDTI2MDQyOTAxMDAyM1oXDTI2MDcyODAxMDAyM1owLzEtMCsGA1UEAxMk ZjEwZDU3YTgtMWI0NC00ZjIzLWFhZDMtMjNjMTZiZTI0MzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdpzGYd0oKe4S7j7HKlXXx674ehPoTG1Fw9+ cExv9ncAyQXpbZV91obil2Z5WoE2CGi6no+FL85UduA8VrwycNY8Le2xlNKo4HQA bL39k62R2BET31tdyuhAx2gNgYP8VHRK2DopVnW2a70uUADNVa1RgdkQEgL5y8Yw Uq/nC6+YK/hUCBCPi/oGd3o3cYiItYfsFED50dMKuCSqd/a7zTgprqmZ2MqQ6/7r MPEZHLMSDngRwOXP8uD86WM+cLQvSGMpiJ8RYLQJY8EZpr6hmh2oOzp78ziNybbL WP/sDuvt6RAybyXWtbU9ojdjU6AkXvjba6MQNwZqwHoqW0vVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMm9mZEliINfFW2HPTPfWPaVzTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvOWZkODEwODYtZDJhYi0z YjY5LTg3M2YtYzA0M2Q1ZjExMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0 ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj Y2M4NGUwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6gcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi4/VS+boUoQtN+t1OvteJMa0d9+kbg197hVyXuUh5wPmx1HApbd0Aq 0HbxXAxTyZrE3QOt9lCwqZu17k/uZD33nBQypDZZWtyZMpoMELek1bkes2yleREI vQfz85I71am5NLLMAfiQTa+DwmHUyvLBjazo70QUaNWkjLQdcdVj5Om07/CTujqt Rr0jzvTy5cPmQqvhW7Qocq+x7PBPFlkNbeI9dkdZNoQHkIwjl43/LdFyjd9VC5rK 5+n7i6blzs2TgBbmj1NLAU60uNo5fSNCF9+d6K2pT4tstmKjy1EOPyRg0zw1HgJ8 Y79u7jah8SX4kIXu2MkyfIWAoduStmM= -----END CERTIFICATE-----Generated at Wed May 13 11:19:41 2026 by rpki-client