$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/69c85a7e-5c7c-3cbc-8360-f4b315370081.roa File: 69c85a7e-5c7c-3cbc-8360-f4b315370081.roa (raw, json) Hash identifier: Xd4VC/uraTM1cBqSjbSC3E3K+rhz/RB23foU38GLsWE= Subject key identifier: 8E:B9:0F:D9:B5:C4:AE:FA:89:31:37:80:25:83:BD:86:07:98:99:97 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584DA6B012548AD0DF9B0359E700 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/69c85a7e-5c7c-3cbc-8360-f4b315370081.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 198949 IP address blocks: 192.236.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:12:54:8a:d0:df:9b:03:59:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=5157b423-8a76-4386-9976-d980de9d893e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:e5:55:88:ce:98:e8:c7:59:57:08:5f:29: 95:04:14:c8:72:33:38:c8:5d:f0:9b:91:7b:17:59: 81:d5:7c:0b:4a:bd:e4:44:a4:96:1e:c2:22:87:d3: c4:d9:19:44:4d:a6:63:17:8a:60:b3:28:44:d6:a6: e4:47:8d:65:6c:13:fc:eb:c1:9e:ec:c9:b7:8b:da: a1:6f:70:07:44:ec:13:3d:da:5d:82:42:32:7d:a9: e7:bf:3d:c5:ad:cd:b4:95:28:22:cc:eb:93:ea:ec: 23:4d:62:10:ff:46:97:29:9a:31:23:d0:f9:87:03: 7e:5a:21:e1:74:dd:b1:33:d4:0c:6a:d2:cb:95:66: 16:8c:90:e8:e2:d7:84:5c:84:c3:6e:93:c4:a2:d1: 80:d7:f3:9a:38:36:af:33:3a:f4:8f:23:bb:9e:f7: 4f:9c:a1:3d:7c:28:86:f1:dc:ff:3a:49:be:2b:c4: f2:ee:82:28:a6:14:56:9a:ab:cb:8d:bf:14:9b:0a: df:96:36:58:d9:d7:65:7a:f1:90:ea:21:31:52:66: e3:60:f8:bd:71:e8:71:95:19:4e:4e:28:05:53:0c: 2a:6c:b1:75:8d:81:3c:ed:c0:28:18:e6:02:9e:e0: ac:60:30:01:40:d6:bf:e2:33:e6:45:ea:35:ae:2c: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:0F:D9:B5:C4:AE:FA:89:31:37:80:25:83:BD:86:07:98:99:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/69c85a7e-5c7c-3cbc-8360-f4b315370081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 192.236.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:85:2e:7a:6c:0d:38:66:0c:60:16:f6:f1:07:97:58:43:3e: c7:4e:9e:e2:10:c3:53:cd:b0:1f:b3:a9:60:a5:99:db:db:24: fe:c9:11:aa:72:11:ee:6f:80:e4:54:5f:53:51:9c:4a:43:a4: 4b:f8:f7:aa:ff:93:51:60:7d:10:2c:92:cb:42:29:4d:7a:71: 1b:dc:5b:48:1e:7e:85:70:7a:e4:b1:56:56:68:91:3b:ca:18: 00:6d:d4:a3:f3:3f:59:f4:e7:fd:33:7b:bf:9b:15:72:40:3c: e1:da:cb:8e:04:9e:28:13:9c:66:16:90:aa:04:db:52:4d:8a: 4f:64:85:35:b4:fb:1e:99:d5:5c:0c:75:fa:bd:0d:c6:b7:f0: d2:68:dd:41:d3:e1:b4:c5:24:1e:2e:1b:81:8a:ca:9a:ad:5a: 4b:79:56:4d:4c:ff:01:b7:fa:ff:0e:7c:a8:d2:29:be:ca:99: 86:64:6e:7a:c5:49:91:4f:47:fc:b9:f1:32:13:c5:6a:ef:2d: 9f:f5:45:62:7b:57:9e:b3:03:d1:46:3c:a5:b8:fb:c8:f5:56: 07:76:8f:5a:54:49:04:89:b4:a4:c4:6b:b2:cf:53:7f:b6:77: 8f:43:a7:5d:b5:5b:c5:1a:f2:29:b5:a6:eb:1c:d0:7f:1e:cd: 4f:28:f0:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBJUitDfmwNZ5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTE1N2I0MjMtOGE3Ni00Mzg2LTk5NzYtZDk4MGRlOWQ4OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxDlVYjOmOjHWVcIXymVBBTIcjM4yF3wm5F7 F1mB1XwLSr3kRKSWHsIih9PE2RlETaZjF4pgsyhE1qbkR41lbBP868Ge7Mm3i9qh b3AHROwTPdpdgkIyfannvz3Frc20lSgizOuT6uwjTWIQ/0aXKZoxI9D5hwN+WiHh dN2xM9QMatLLlWYWjJDo4teEXITDbpPEotGA1/OaODavMzr0jyO7nvdPnKE9fCiG 8dz/Okm+K8Ty7oIophRWmqvLjb8UmwrfljZY2ddlevGQ6iExUmbjYPi9cehxlRlO TigFUwwqbLF1jYE87cAoGOYCnuCsYDABQNa/4jPmReo1riye2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI65D9m1xK76iTE3gCWDvYYHmJmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvNjljODVhN2UtNWM3Yy0z Y2JjLTgzNjAtZjRiMzE1MzcwMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwOwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWFLnpsDThmDGAW9vEHl1hDPsdOnuIQw1PNsB+zqWClmdvbJP7JEapy Ee5vgORUX1NRnEpDpEv496r/k1FgfRAskstCKU16cRvcW0gefoVweuSxVlZokTvK GABt1KPzP1n05/0ze7+bFXJAPOHay44EnigTnGYWkKoE21JNik9khTW0+x6Z1VwM dfq9Dca38NJo3UHT4bTFJB4uG4GKypqtWkt5Vk1M/wG3+v8OfKjSKb7KmYZkbnrF SZFPR/y58TITxWrvLZ/1RWJ7V56zA9FGPKW4+8j1Vgd2j1pUSQSJtKTEa7LPU3+2 d49Dp121W8Ua8im1pusc0H8ezU8o8Bk= -----END CERTIFICATE-----Generated at Wed May 13 14:30:17 2026 by rpki-client