$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa File: a474ef21-5145-3424-b8cb-6fe09836be86.roa (raw, json) Hash identifier: UcwICub/qqizu8rM9s+JTkVomvk7lG8F9zTFup0XXkQ= Subject key identifier: 87:D8:01:DE:AB:CE:98:88:50:3D:92:36:7B:87:8B:B9:43:0B:57:E2 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584DCAFAF82D94390E4D5A38E2C0 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 53542 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:f8:2d:94:39:0e:4d:5a:38:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=3d321c9c-5066-4179-a421-93b8db1d6d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:c2:36:a0:6c:4e:c3:11:c6:2d:f7:6d:d3: d4:dc:c8:c5:44:dc:30:d5:33:57:12:a8:f9:3e:3b: ee:c8:86:58:6f:3c:91:4d:c1:82:7b:ee:4c:c9:37: a6:11:a3:19:ac:78:d6:f8:81:08:60:72:8a:0c:e3: ac:70:2f:61:27:ac:d7:eb:c7:11:54:8b:99:d7:21: 11:7d:40:42:24:67:29:e3:21:ef:e8:43:fb:9c:37: 68:5a:2f:1d:80:1c:99:2e:38:2f:2d:64:dd:1c:a1: 2b:5d:b4:41:ce:48:28:44:f6:9a:c9:f7:32:b0:96: c0:66:16:7e:67:d7:0b:84:67:34:af:be:01:54:8b: ec:e6:21:3b:1c:a3:4b:42:fc:4c:2b:2c:42:8c:d2: 43:50:6b:30:f4:db:55:46:64:08:54:0f:d9:3e:43: 6d:9a:e6:e2:fa:3d:69:04:5d:8b:08:e4:90:c1:62: f0:9e:ae:7b:e3:4c:10:6c:d8:09:d7:80:2c:f7:89: 7a:39:27:fd:22:4e:9e:85:13:98:af:5d:28:dd:b9: 14:98:63:3a:24:c4:ba:fe:df:75:91:55:c8:a3:06: 95:30:30:ee:fc:79:74:9c:78:3d:ac:a4:76:79:b7: 3b:3b:da:c2:fd:61:4f:99:58:bb:5c:dc:51:01:7f: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D8:01:DE:AB:CE:98:88:50:3D:92:36:7B:87:8B:B9:43:0B:57:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a474ef21-5145-3424-b8cb-6fe09836be86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ec:e3:c6:d4:7c:3f:fd:70:82:e2:e7:c3:5b:39:ad:74:d6: 26:01:06:29:fe:01:ef:3c:9a:e5:05:01:79:06:d7:76:98:f6: e2:1d:f4:e7:93:45:e7:94:a6:ef:1d:c6:85:41:61:98:0f:ba: ed:e9:93:63:96:e4:34:01:90:3b:1e:88:48:ea:42:28:da:cc: 1e:92:c1:1e:ee:b5:0b:5b:f5:6e:b1:0e:ef:46:e3:48:cc:c6: cc:5a:8a:65:57:71:d7:50:0b:7c:9b:1a:d4:c3:69:8a:cc:be: 45:2c:38:1e:ff:91:b7:37:74:91:ba:92:6d:20:61:02:c2:ff: b6:a0:a1:bc:4c:84:dd:f5:8e:d0:e8:17:06:8d:97:e4:39:18: e1:66:95:28:a0:e1:a7:ca:71:ee:02:2a:71:57:ba:87:4f:c5: bd:b9:ea:45:20:69:4a:9e:99:50:1b:21:fc:1f:ec:35:46:f7: da:18:ee:11:10:7c:c2:c9:99:67:8c:01:35:29:05:72:ce:58: 40:d7:0e:a8:22:2e:f9:4d:26:75:d9:8f:5d:3f:17:5e:87:18: 10:8b:c2:8c:a3:c5:d0:1e:49:ba:99:91:0f:41:8e:44:01:8b: 87:e2:dd:7e:c0:aa:94:33:20:ae:06:80:3d:71:f9:e2:ab:11: e6:f1:44:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vgtlDkOTVo44sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2QzMjFjOWMtNTA2Ni00MTc5LWE0MjEtOTNiOGRiMWQ2ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9bCNqBsTsMRxi33bdPU3MjFRNww1TNXEqj5 PjvuyIZYbzyRTcGCe+5MyTemEaMZrHjW+IEIYHKKDOOscC9hJ6zX68cRVIuZ1yER fUBCJGcp4yHv6EP7nDdoWi8dgByZLjgvLWTdHKErXbRBzkgoRPaayfcysJbAZhZ+ Z9cLhGc0r74BVIvs5iE7HKNLQvxMKyxCjNJDUGsw9NtVRmQIVA/ZPkNtmubi+j1p BF2LCOSQwWLwnq5740wQbNgJ14As94l6OSf9Ik6ehROYr10o3bkUmGM6JMS6/t91 kVXIowaVMDDu/Hl0nHg9rKR2ebc7O9rC/WFPmVi7XNxRAX9wLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfYAd6rzpiIUD2SNnuHi7lDC1fiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvYTQ3NGVmMjEtNTE0NS0z NDI0LWI4Y2ItNmZlMDk4MzZiZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFns48bUfD/9cILi58NbOa101iYBBin+Ae88muUFAXkG13aY9uId9OeT ReeUpu8dxoVBYZgPuu3pk2OW5DQBkDseiEjqQijazB6SwR7utQtb9W6xDu9G40jM xsxaimVXcddQC3ybGtTDaYrMvkUsOB7/kbc3dJG6km0gYQLC/7agobxMhN31jtDo FwaNl+Q5GOFmlSig4afKce4CKnFXuodPxb256kUgaUqemVAbIfwf7DVG99oY7hEQ fMLJmWeMATUpBXLOWEDXDqgiLvlNJnXZj10/F16HGBCLwoyjxdAeSbqZkQ9BjkQB i4fi3X7AqpQzIK4GgD1x+eKrEebxRPI= -----END CERTIFICATE-----Generated at Wed May 13 19:13:04 2026 by rpki-client