$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa File: cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa (raw, json) Hash identifier: 4jgKfY8WxX0v7xJiDeGd0BsV39LNu76mCI3BL7yZz6o= Subject key identifier: 2C:1D:97:F9:2D:44:F2:3F:CA:84:2F:F0:AD:98:D9:B4:C4:1C:F5:7F Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584DAAE035F4F4012055C3B53600 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 26196 IP address blocks: 199.47.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:35:f4:f4:01:20:55:c3:b5:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=28e10f6b-5df5-4f7b-b982-e4a02339a824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:23:26:3a:6e:10:c5:5a:f7:5d:40:55:f1: b9:c5:cc:c2:2d:4d:13:29:c4:27:37:4d:24:b9:26: 33:1a:99:07:ce:e8:f5:c8:4f:e5:5d:0f:69:cd:64: 38:81:ed:6d:4f:e3:f0:8b:15:44:d8:90:ea:1c:2e: 0a:81:1b:7a:eb:dd:a8:b5:b8:0e:f4:bf:a9:1a:79: 57:42:b7:96:51:ae:a8:b8:c9:eb:d8:05:fa:85:7b: 5c:12:64:70:3c:6f:1c:0b:1c:0f:92:db:c8:73:20: 36:ba:67:a3:4a:1f:ef:6d:11:12:eb:94:fb:c9:fe: 1a:3e:f8:0b:74:68:89:24:ca:eb:2c:dd:80:35:33: 36:e3:36:e1:3b:a8:10:28:91:d2:8d:ba:5d:d5:9e: 91:4a:79:08:42:08:fc:d8:25:db:3a:7b:1b:99:9d: 20:41:ad:bb:f3:d8:b9:42:35:e6:ea:ce:56:72:ce: ed:0a:ea:9a:46:bd:14:be:9a:56:6f:22:31:7b:4d: e3:79:a6:8a:e4:f8:d2:a5:48:c1:3e:ec:69:4a:f7: f9:c1:e3:77:92:76:80:92:3c:3d:74:e8:1c:75:90: de:ec:b2:38:98:2f:78:9a:5f:4f:ec:8d:28:e4:7f: b2:b3:cb:b6:a2:0b:2a:56:22:7e:a3:4b:6c:0e:2a: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:97:F9:2D:44:F2:3F:CA:84:2F:F0:AD:98:D9:B4:C4:1C:F5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/cb48da0f-91a7-3ff5-9c0b-514cb42fdd1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 199.47.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:bd:85:0f:47:f5:4e:5f:b9:1f:ff:46:79:f4:30:93:8f:52: a9:dd:88:de:24:23:95:89:38:69:88:0f:fa:f1:5f:aa:c0:a6: d5:be:88:f5:68:d0:e8:b9:98:6e:9e:94:b4:80:e7:19:69:d7: c6:31:cd:50:03:53:b6:88:30:be:a9:97:bc:07:86:b4:c2:40: fc:d4:80:66:57:a1:29:20:c4:23:23:2c:04:d6:4d:f5:b0:65: b2:03:39:22:90:ae:49:7b:ca:a6:83:a9:2f:cd:ac:56:d8:a6: 5d:d3:80:df:55:98:ae:1c:82:35:1b:53:e8:05:8c:e5:bd:64: 0d:49:3b:57:88:3a:c0:f7:eb:a7:ea:94:3e:97:4e:67:e5:db: 3d:7e:4a:1a:09:fc:22:99:3b:41:8e:d8:69:b2:d5:ab:2c:5c: 2e:13:a3:c0:3b:47:cf:8c:e8:9d:40:5c:72:eb:f4:a2:70:7c: 80:8a:b9:78:b3:7e:dc:d7:5e:c0:e3:29:b4:89:0e:44:f9:79: 0a:d6:09:0b:72:e1:65:38:3f:7b:7e:37:7b:17:91:c3:73:e5: bc:f1:e1:cb:23:d9:7a:52:29:03:d6:4f:df:d7:d1:a2:4d:fa: ea:55:4e:90:4b:19:d0:44:76:06:21:b7:09:0d:5a:d3:46:9b: 6d:e1:70:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DX09AEgVcO1NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk MjhlMTBmNmItNWRmNS00ZjdiLWI5ODItZTRhMDIzMzlhODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgMjJjpuEMVa911AVfG5xczCLU0TKcQnN00k uSYzGpkHzuj1yE/lXQ9pzWQ4ge1tT+PwixVE2JDqHC4KgRt6692otbgO9L+pGnlX QreWUa6ouMnr2AX6hXtcEmRwPG8cCxwPktvIcyA2umejSh/vbRES65T7yf4aPvgL dGiJJMrrLN2ANTM24zbhO6gQKJHSjbpd1Z6RSnkIQgj82CXbOnsbmZ0gQa2789i5 QjXm6s5Wcs7tCuqaRr0UvppWbyIxe03jeaaK5PjSpUjBPuxpSvf5weN3knaAkjw9 dOgcdZDe7LI4mC94ml9P7I0o5H+ys8u2ogsqViJ+o0tsDioCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwdl/ktRPI/yoQv8K2Y2bTEHPV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvY2I0OGRhMGYtOTFhNy0z ZmY1LTljMGItNTE0Y2I0MmZkZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO9hQ9H9U5fuR//Rnn0MJOPUqndiN4kI5WJOGmID/rxX6rAptW+iPVo 0Oi5mG6elLSA5xlp18YxzVADU7aIML6pl7wHhrTCQPzUgGZXoSkgxCMjLATWTfWw ZbIDOSKQrkl7yqaDqS/NrFbYpl3TgN9VmK4cgjUbU+gFjOW9ZA1JO1eIOsD366fq lD6XTmfl2z1+ShoJ/CKZO0GO2Gmy1assXC4To8A7R8+M6J1AXHLr9KJwfICKuXiz ftzXXsDjKbSJDkT5eQrWCQty4WU4P3t+N3sXkcNz5bzx4csj2XpSKQPWT9/X0aJN +upVTpBLGdBEdgYhtwkNWtNGm23hcGg= -----END CERTIFICATE-----Generated at Wed May 13 12:03:40 2026 by rpki-client