$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa File: e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa (raw, json) Hash identifier: sX35Z0s2Vnd1pwuMOk7zWYxCMnUXDT9CMbzAF0t2mP8= Subject key identifier: 16:3D:15:04:A2:9F:72:91:A5:F6:42:55:E5:1D:F7:09:FA:5F:2C:96 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584DC565997EFA05FEB6D8B1E280 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 3756 IP address blocks: 199.109.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:99:7e:fa:05:fe:b6:d8:b1:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=4ad0fc23-6d92-4316-bd97-6e9a68b6f7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:1a:01:7e:63:09:92:01:bd:09:d1:c7:2e: dd:a8:f7:fc:f8:16:11:0f:8b:26:95:3f:6f:4a:ce: f4:82:69:82:fc:6d:28:94:14:a5:ff:86:54:23:9b: 96:0c:7c:83:88:e3:a1:19:74:66:51:9a:3c:14:42: d6:9a:fc:3a:5f:c3:5d:fa:5f:60:86:21:11:1f:d9: ca:06:d1:0f:bd:bc:cb:23:aa:06:72:72:44:77:32: 1c:10:00:e3:6b:45:db:bf:32:1b:8a:ec:41:a6:fd: b0:e2:b4:91:f6:1c:19:00:e9:3b:29:68:49:0e:1a: 3f:fe:ab:0f:f9:55:d7:06:52:49:66:00:22:26:ba: b2:b0:b6:46:40:3f:be:7c:ec:70:02:fe:a1:fb:62: e6:a4:11:ed:13:04:de:81:df:f9:20:cc:95:68:93: 04:1e:52:68:a8:6c:1b:6d:7c:ea:d2:62:4f:a3:e8: ba:ce:54:47:f8:84:f0:27:d7:98:86:02:ac:df:3b: 51:86:79:13:f7:c5:d0:4d:13:65:2d:99:c6:b8:f3: a1:a7:58:14:30:57:99:72:b1:81:8a:d9:9d:28:67: d6:41:15:15:b3:05:4e:65:05:b5:4b:a1:9b:7a:c2: 7b:6f:21:c9:e5:33:87:ef:c8:37:5d:32:0f:f6:72: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:15:04:A2:9F:72:91:A5:F6:42:55:E5:1D:F7:09:FA:5F:2C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e4a3a58c-67a2-3fd5-866c-4f873cffd716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ed:75:ba:3b:f1:1c:3a:d3:99:9b:89:cd:19:b5:6a:0b:f3: 4d:2f:a1:fe:40:74:ce:ff:39:a1:56:2d:90:51:77:04:1f:30: 3a:1e:80:c5:ef:3f:82:b1:34:16:09:54:cc:bc:b7:b3:36:bc: d9:e2:1a:89:bc:9a:80:02:4d:be:00:64:e0:d2:41:28:bd:0e: 1f:45:c9:fe:23:69:fe:94:8b:10:c4:d3:38:b2:f9:a1:c5:6f: 02:ff:de:4e:06:2e:f4:17:2f:3f:ee:05:fd:52:5f:67:81:43: 44:46:01:fa:31:d5:67:8d:86:ec:d3:ab:ea:65:18:0f:70:89: 6e:04:48:92:cb:27:74:69:4a:6d:10:53:b1:b9:55:0d:64:bd: e2:70:3f:04:95:54:97:6b:b7:10:4b:36:c7:1f:18:fb:08:97: df:1a:bb:17:53:07:88:fc:86:3d:81:af:79:bf:d5:97:e6:cb: 73:4f:7e:54:71:26:16:8f:f4:84:99:39:ed:36:3d:0f:db:39: 5d:1a:6f:5e:76:2d:76:d2:75:ba:2d:7c:15:dd:2e:bd:c7:ed: 9e:9c:bd:76:6d:84:54:73:2e:92:f9:eb:05:cd:83:e7:74:af: 11:aa:c2:8f:e4:f2:a6:9a:85:80:52:0c:39:26:94:2e:61:98: 4a:a0:50:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZl++gX+ttix4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk NGFkMGZjMjMtNmQ5Mi00MzE2LWJkOTctNmU5YTY4YjZmN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGcaAX5jCZIBvQnRxy7dqPf8+BYRD4smlT9v Ss70gmmC/G0olBSl/4ZUI5uWDHyDiOOhGXRmUZo8FELWmvw6X8Nd+l9ghiERH9nK BtEPvbzLI6oGcnJEdzIcEADja0XbvzIbiuxBpv2w4rSR9hwZAOk7KWhJDho//qsP +VXXBlJJZgAiJrqysLZGQD++fOxwAv6h+2LmpBHtEwTegd/5IMyVaJMEHlJoqGwb bXzq0mJPo+i6zlRH+ITwJ9eYhgKs3ztRhnkT98XQTRNlLZnGuPOhp1gUMFeZcrGB itmdKGfWQRUVswVOZQW1S6GbesJ7byHJ5TOH78g3XTIP9nIiQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY9FQSin3KRpfZCVeUd9wn6XyyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZTRhM2E1OGMtNjdhMi0z ZmQ1LTg2NmMtNGY4NzNjZmZkNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx20SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbtdbo78Rw605mbic0ZtWoL800vof5AdM7/OaFWLZBRdwQfMDoegMXv P4KxNBYJVMy8t7M2vNniGom8moACTb4AZODSQSi9Dh9Fyf4jaf6UixDE0ziy+aHF bwL/3k4GLvQXLz/uBf1SX2eBQ0RGAfox1WeNhuzTq+plGA9wiW4ESJLLJ3RpSm0Q U7G5VQ1kveJwPwSVVJdrtxBLNscfGPsIl98auxdTB4j8hj2Br3m/1Zfmy3NPflRx JhaP9ISZOe02PQ/bOV0ab152LXbSdbotfBXdLr3H7Z6cvXZthFRzLpL56wXNg+d0 rxGqwo/k8qaahYBSDDkmlC5hmEqgUCo= -----END CERTIFICATE-----Generated at Wed May 13 07:26:00 2026 by rpki-client