$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa File: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (raw, json) Hash identifier: 1cQyIBCslTDfmiMl3jqAgGAXCn2+dMq/Mr4ZeDSwCBA= Subject key identifier: BD:FC:F0:A3:95:D8:3F:17:37:5C:8D:B4:DB:E6:ED:0E:D6:50:63:AC Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584DCAFAF8493ACBCE7800C0D1C0 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 16509 IP address blocks: 199.255.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:f8:49:3a:cb:ce:78:00:c0:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=6cdbe18c-525b-4cdc-bdeb-36b372f2ab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:ef:42:2b:0b:b2:cf:54:56:dd:9f:c3:fc: 46:87:e7:e5:9f:01:61:6b:2e:f7:3e:ce:d8:47:01: b3:63:11:4a:02:bf:41:88:fb:46:ae:65:3c:45:98: 8e:a8:03:ad:8e:f0:61:ec:d6:f8:02:e2:ad:0b:d0: 14:e2:fb:9e:71:fa:e8:e3:40:08:75:b4:75:66:6d: c9:43:49:a1:7f:7b:68:09:80:03:43:3e:b6:da:5f: f2:13:05:9e:2e:5f:5c:be:84:0c:b6:85:e0:e8:6a: ec:29:f9:27:6d:98:c0:ff:5a:f9:94:6f:a0:b2:bd: 57:e3:5c:3a:f4:b8:28:14:4c:9b:53:91:0f:a9:99: bc:69:ef:63:1f:79:af:99:56:95:40:e5:a4:d8:8e: 20:7c:9c:dd:2f:a4:0b:84:5d:92:95:a6:f6:cb:97: d5:f5:a1:38:b2:e0:b9:d1:b3:8e:38:5a:9b:2a:13: 51:c0:e0:a1:d9:08:c6:f4:47:62:e2:cd:8a:b5:b5: 3c:d7:ec:d9:1a:4c:39:dc:33:06:49:4a:01:0b:c3: 7c:2a:9a:92:00:b2:c7:94:93:ea:60:9a:6f:05:ed: 1a:cd:02:de:30:6d:ec:6f:00:bd:a2:20:a2:8c:b2: ad:25:07:be:7c:ae:2d:40:fc:5d:c0:e0:84:44:09: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FC:F0:A3:95:D8:3F:17:37:5C:8D:B4:DB:E6:ED:0E:D6:50:63:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2f:89:f2:4a:72:df:46:15:46:09:2e:72:0d:15:65:56:ab: e6:ad:1a:67:b9:e5:67:eb:51:25:1e:f9:dd:17:38:ea:59:8b: 18:78:37:ed:d0:96:15:35:e7:90:72:8f:9f:9d:a8:51:83:04: 45:42:03:e5:65:83:8b:3a:97:95:e7:c0:6f:78:6d:44:7b:9b: b7:57:0a:de:8a:03:cc:32:b6:a9:51:59:be:1a:1e:46:4f:7a: d0:44:f6:64:0c:93:53:ca:78:53:45:40:ca:2c:ea:e4:fe:21: 5e:93:81:b1:ef:be:87:4a:c9:05:4f:43:9e:1e:13:74:80:6b: 34:ca:18:6a:dc:2e:8b:c1:2e:09:57:87:75:1d:74:c4:38:ca: 1b:64:dc:ae:3f:78:6f:0b:3e:e4:62:46:36:61:af:60:41:d5: 5e:5a:f3:fb:8e:40:11:41:dc:70:8b:44:14:f9:16:cc:e0:8d: 7a:4c:6e:6a:81:11:6a:c1:b5:1f:3b:9f:63:93:12:91:54:09: f0:49:ed:fe:ba:b1:fe:f1:61:1c:3c:25:3d:59:d1:62:b1:ae: e9:94:96:3d:c5:53:7b:96:61:b5:da:8f:e2:e7:4d:71:bb:3a: 66:38:9d:02:3d:e0:97:d3:f4:af:e2:29:66:4e:93:43:ef:f4: bc:bf:31:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vhJOsvOeADA0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk NmNkYmUxOGMtNTI1Yi00Y2RjLWJkZWItMzZiMzcyZjJhYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwXvQisLss9UVt2fw/xGh+flnwFhay73Ps7Y RwGzYxFKAr9BiPtGrmU8RZiOqAOtjvBh7Nb4AuKtC9AU4vuecfro40AIdbR1Zm3J Q0mhf3toCYADQz622l/yEwWeLl9cvoQMtoXg6GrsKfknbZjA/1r5lG+gsr1X41w6 9LgoFEybU5EPqZm8ae9jH3mvmVaVQOWk2I4gfJzdL6QLhF2Slab2y5fV9aE4suC5 0bOOOFqbKhNRwOCh2QjG9Edi4s2KtbU81+zZGkw53DMGSUoBC8N8KpqSALLHlJPq YJpvBe0azQLeMG3sbwC9oiCijLKtJQe+fK4tQPxdwOCERAmbPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL388KOV2D8XN1yNtNvm7Q7WUGOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvY2E5NDM3YWItM2I0Ny0z YjI4LTliNzEtYjdmNGU0MjEzNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMvifJKct9GFUYJLnINFWVWq+atGme55WfrUSUe+d0XOOpZixh4N+3Q lhU155Byj5+dqFGDBEVCA+Vlg4s6l5XnwG94bUR7m7dXCt6KA8wytqlRWb4aHkZP etBE9mQMk1PKeFNFQMos6uT+IV6TgbHvvodKyQVPQ54eE3SAazTKGGrcLovBLglX h3UddMQ4yhtk3K4/eG8LPuRiRjZhr2BB1V5a8/uOQBFB3HCLRBT5FszgjXpMbmqB EWrBtR87n2OTEpFUCfBJ7f66sf7xYRw8JT1Z0WKxrumUlj3FU3uWYbXaj+LnTXG7 OmY4nQI94JfT9K/iKWZOk0Pv9Ly/Mfg= -----END CERTIFICATE-----Generated at Wed May 13 17:25:46 2026 by rpki-client