$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa File: f304bfed-6aa3-3d7a-a7df-324800baf33c.roa (raw, json) Hash identifier: ilPaavNJbxIs+VPVmUZtNu/7cRSM6DfS3jywAuHEQKs= Subject key identifier: 5C:56:B1:8F:AE:63:4F:26:C0:78:03:41:86:34:C1:41:A3:92:39:19 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584DAC4576AC331E47E9CEB59EC0 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 198949 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:76:ac:33:1e:47:e9:ce:b5:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=eb572b05-2cd6-46ac-986d-54d323d69875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9f:cd:2f:1d:dc:34:dd:cb:40:ec:49:63:6a: 87:13:33:09:7e:bb:c4:c0:2e:86:a3:71:5c:c3:e3: 6c:b2:98:90:a7:1f:d0:f3:33:a7:7b:92:47:fb:f5: 6e:c8:93:da:ec:46:ee:bf:b6:7b:50:bf:1c:46:46: 7e:56:e2:cc:a8:ac:1c:31:43:2b:4d:de:2a:db:e3: c7:5b:33:28:e7:9e:44:ad:3b:06:44:8b:31:e6:e5: 65:34:ae:c2:a4:47:2c:9a:10:d6:4c:3c:1a:1f:ae: 40:e8:61:6d:81:f6:b6:57:26:71:82:47:8e:55:ba: af:8a:1d:2b:5e:97:b3:85:83:64:cf:8f:a5:54:e4: 8e:19:33:f0:0f:74:7f:8d:5f:6d:a0:b7:d2:31:d0: f0:a0:9f:4e:c2:24:7e:3b:4e:63:c9:30:f8:d4:76: b4:02:cd:4e:46:da:74:27:26:71:1d:e9:28:0d:10: 39:d2:a0:07:e8:8f:4e:00:eb:b6:4a:3a:9e:3c:69: ae:54:ab:a0:ab:5c:53:1a:4f:da:d9:b7:aa:48:03: e7:39:be:75:a5:5c:2b:33:d6:2c:b3:86:87:0c:fa: d0:97:53:b6:35:d5:82:a7:93:3c:2b:09:ef:05:b1: 2c:4e:45:db:cb:e6:ab:40:1e:69:46:3c:5b:dc:9e: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:B1:8F:AE:63:4F:26:C0:78:03:41:86:34:C1:41:A3:92:39:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:87:63:b8:74:27:09:22:3f:d7:19:02:9e:1a:d1:b6:75:ee: fb:c4:29:89:d7:95:a5:47:98:52:23:65:45:ed:5e:8f:bc:71: 27:9d:09:74:1f:69:64:62:ff:ab:08:1e:1d:c1:04:eb:22:b7: ff:e5:6a:3a:ad:57:1a:3a:5f:e1:70:44:83:de:bd:8e:e7:c7: 80:6f:0e:60:48:61:55:0e:b5:2d:25:8e:bd:9b:68:e5:2d:17: ee:cc:ea:92:29:fc:02:0a:5c:7b:d2:29:97:2a:f3:70:78:d6: 57:de:3a:28:0d:5e:ea:57:00:a4:b2:45:04:01:41:39:4d:d5: 68:98:ab:0c:69:f4:54:fa:99:a9:0f:39:bb:21:98:ec:a8:60: 4f:35:24:d2:1b:49:5c:e8:5a:30:a3:19:a3:7c:80:9d:a1:d9: 29:8f:89:7b:6b:93:82:95:80:9d:22:e6:9d:f3:e5:7c:fd:3d: 00:f6:bd:52:2b:85:8b:50:8b:c5:a5:fa:98:59:36:c5:20:c6: eb:db:dc:a0:d2:d3:e0:60:81:e7:58:0b:ec:0a:70:9d:17:c7: d4:06:5f:39:69:91:44:1b:8d:e3:b5:58:c0:2d:51:25:e9:5b: ab:ed:cd:61:7f:3d:e6:b7:06:2e:e7:b9:6c:c2:6b:18:de:07: 40:02:e0:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXasMx5H6c61nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZWI1NzJiMDUtMmNkNi00NmFjLTk4NmQtNTRkMzIzZDY5ODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8J/NLx3cNN3LQOxJY2qHEzMJfrvEwC6Go3Fc w+NsspiQpx/Q8zOne5JH+/VuyJPa7Ebuv7Z7UL8cRkZ+VuLMqKwcMUMrTd4q2+PH WzMo555ErTsGRIsx5uVlNK7CpEcsmhDWTDwaH65A6GFtgfa2VyZxgkeOVbqvih0r XpezhYNkz4+lVOSOGTPwD3R/jV9toLfSMdDwoJ9OwiR+O05jyTD41Ha0As1ORtp0 JyZxHekoDRA50qAH6I9OAOu2SjqePGmuVKugq1xTGk/a2beqSAPnOb51pVwrM9Ys s4aHDPrQl1O2NdWCp5M8KwnvBbEsTkXby+arQB5pRjxb3J4nSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxWsY+uY08mwHgDQYY0wUGjkjkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvZjMwNGJmZWQtNmFhMy0z ZDdhLWE3ZGYtMzI0ODAwYmFmMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGHY7h0JwkiP9cZAp4a0bZ17vvEKYnXlaVHmFIjZUXtXo+8cSedCXQf aWRi/6sIHh3BBOsit//lajqtVxo6X+FwRIPevY7nx4BvDmBIYVUOtS0ljr2baOUt F+7M6pIp/AIKXHvSKZcq83B41lfeOigNXupXAKSyRQQBQTlN1WiYqwxp9FT6makP ObshmOyoYE81JNIbSVzoWjCjGaN8gJ2h2SmPiXtrk4KVgJ0i5p3z5Xz9PQD2vVIr hYtQi8Wl+phZNsUgxuvb3KDS0+BggedYC+wKcJ0Xx9QGXzlpkUQbjeO1WMAtUSXp W6vtzWF/Pea3Bi7nuWzCaxjeB0AC4O8= -----END CERTIFICATE-----Generated at Wed May 13 11:16:43 2026 by rpki-client