$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa File: a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa (raw, json) Hash identifier: kssgdM0A8HM6LEhZYsZXkbzLez7+PgSHOE0+cjpzg/Y= Subject key identifier: 9F:77:79:23:B8:E7:11:E1:9B:55:56:FE:C5:19:32:99:FB:D6:4F:EA Certificate issuer: /CN=e58dee25-2204-469c-b0eb-da831443b959 Certificate serial: 010D0C9F4328584D8EF5785E78E0E82DBF5AB180 Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 40521 IP address blocks: 198.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:78:5e:78:e0:e8:2d:bf:5a:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=942e1081-db71-4cd6-9ee8-92f5d0bad19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:26:88:98:7f:b8:a4:18:62:67:98:76:4a: fd:fb:65:5f:2b:2c:5e:c1:0f:26:db:0b:7a:e2:0e: 71:38:ea:5f:31:e6:05:1e:d6:b8:13:28:ec:2d:6e: 87:c5:e7:33:e1:5b:f6:aa:9c:ab:7a:40:d6:98:86: cf:71:33:50:97:2d:2b:a8:6c:f7:99:7e:d6:67:af: b0:78:f8:25:14:76:75:75:b1:07:31:62:fd:14:55: 29:ac:2b:c3:5d:dd:18:33:5b:e5:2a:f0:2b:30:6f: b6:cb:4e:4e:d3:6e:c8:95:09:10:7f:bc:29:16:1c: 12:9a:ff:24:6c:bf:d7:c2:56:02:ef:4e:a7:5a:d3: c8:c4:c2:5b:f4:11:7d:fa:03:1c:75:65:c3:96:26: 5c:b2:a9:15:66:ff:18:db:22:28:da:b1:f4:9d:f1: a1:2e:ca:f1:94:7d:30:b5:94:2f:8c:77:c7:38:26: 75:d0:8c:5d:22:13:18:d3:b4:c7:5c:03:8b:f0:19: cc:c2:2b:e5:79:20:87:47:e9:7f:10:f2:e5:ac:aa: 42:4a:d4:64:de:7e:88:8a:56:f2:13:b1:52:67:0e: 7f:61:1d:63:81:c1:6f:d2:84:7f:aa:1e:fa:76:71: 4c:d8:66:29:91:d9:de:d7:bc:c6:51:ec:e5:14:81: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:77:79:23:B8:E7:11:E1:9B:55:56:FE:C5:19:32:99:FB:D6:4F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl X509v3 Authority Key Identifier: keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer sbgp-ipAddrBlock: critical IPv4: 198.251.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:5a:7a:6b:a2:eb:3e:d6:67:ef:0a:02:21:a5:73:71:61:09: 80:d0:28:dd:1b:01:e2:18:d3:c8:6b:6b:8e:3e:79:1f:ce:de: 49:6c:46:83:e2:29:3c:5e:2a:23:48:66:e7:b1:13:50:6f:de: de:8d:52:46:89:9a:9d:8c:6a:bb:41:31:a7:a9:ec:10:25:b1: 56:c2:9e:4d:e3:19:f8:66:17:a8:5d:41:c4:41:a5:97:5a:d0: 2c:ab:a8:61:95:49:6b:67:85:2e:62:bb:95:d6:92:e5:9b:7e: 97:99:1b:84:54:37:e1:42:1c:5c:a2:3e:03:ea:f3:00:7e:b5: 4a:74:4a:33:52:da:d8:b0:93:12:80:23:7a:9b:56:91:04:09: 41:db:ee:69:68:59:02:f0:c8:07:f7:02:3b:3d:02:c8:c4:28: bc:2c:54:94:6b:7d:0c:25:c5:09:08:08:3e:42:0d:58:cd:a5: 73:e7:fe:f6:c4:f1:62:7b:6b:1e:c5:74:7c:21:5b:bc:3b:e9: fc:61:ea:b6:a6:65:a8:3c:eb:0f:6d:a9:ed:6b:f4:8d:b6:b6: aa:e7:f4:63:65:82:e0:da:8d:9e:2e:f4:32:d1:2d:c6:9f:a8: 7d:a6:47:d8:42:82:cd:36:e5:81:a7:63:20:ac:49:49:5f:63: c9:e2:06:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XheeODoLb9asYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTU4ZGVlMjUtMjIwNC00NjljLWIwZWItZGE4MzE0NDNi OTU5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTQyZTEwODEtZGI3MS00Y2Q2LTllZTgtOTJmNWQwYmFkMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpQmiJh/uKQYYmeYdkr9+2VfKyxewQ8m2wt6 4g5xOOpfMeYFHta4EyjsLW6Hxecz4Vv2qpyrekDWmIbPcTNQly0rqGz3mX7WZ6+w ePglFHZ1dbEHMWL9FFUprCvDXd0YM1vlKvArMG+2y05O027IlQkQf7wpFhwSmv8k bL/XwlYC706nWtPIxMJb9BF9+gMcdWXDliZcsqkVZv8Y2yIo2rH0nfGhLsrxlH0w tZQvjHfHOCZ10IxdIhMY07THXAOL8BnMwivleSCHR+l/EPLlrKpCStRk3n6Iilby E7FSZw5/YR1jgcFv0oR/qh76dnFM2GYpkdne17zGUezlFIF5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ93eSO45xHhm1VW/sUZMpn71k/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNThk ZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgzMTQ0M2I5NTkvYTNjZjdmNGEtZDA0OS0z NjA3LWEzMWItYzcwMmFmZWVhZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTU4ZGVlMjUtMjIwNC00NjljLWIw ZWItZGE4MzE0NDNiOTU5L2U1OGRlZTI1LTIyMDQtNDY5Yy1iMGViLWRhODMxNDQz Yjk1OS5jcmwwHwYDVR0jBBgwFoAUUnUQ5/3m/Rd4J0tjZp1pLp+xtrYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lNThkZWUyNS0yMjA0LTQ2OWMtYjBlYi1kYTgz MTQ0M2I5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvsfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlaemui6z7WZ+8KAiGlc3FhCYDQKN0bAeIY08hra44+eR/O3klsRoPi KTxeKiNIZuexE1Bv3t6NUkaJmp2MartBMaep7BAlsVbCnk3jGfhmF6hdQcRBpZda 0CyrqGGVSWtnhS5iu5XWkuWbfpeZG4RUN+FCHFyiPgPq8wB+tUp0SjNS2tiwkxKA I3qbVpEECUHb7mloWQLwyAf3Ajs9AsjEKLwsVJRrfQwlxQkICD5CDVjNpXPn/vbE 8WJ7ax7FdHwhW7w76fxh6ramZag86w9tqe1r9I22tqrn9GNlguDajZ4u9DLRLcaf qH2mR9hCgs025YGnYyCsSUlfY8niBs0= -----END CERTIFICATE-----Generated at Wed May 13 12:20:26 2026 by rpki-client