$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa File: 437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa (raw, json) Hash identifier: N1p0VF30cp+c1vHorAlzWz9jk5RLFP/Ffy3xwrfZ+1A= Subject key identifier: 46:14:63:E9:0D:3A:50:F4:9C:90:24:14:E9:CF:A3:80:5F:EA:F8:FC Certificate issuer: /CN=ca91b8b1-a975-4a43-947f-794da888c198 Certificate serial: 010D0C9F4328584DC29ADFE300F6AACC92846000 Authority key identifier: 12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 396982 IP address blocks: 204.138.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:df:e3:00:f6:aa:cc:92:84:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca91b8b1-a975-4a43-947f-794da888c198 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=7a7202ff-4b4b-4919-8a90-0cbd95e9529d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:8b:a1:23:58:c3:c5:2d:94:27:aa:73:97: 89:80:b8:e4:54:31:e5:0a:d9:37:60:69:f1:11:11: 49:b1:60:04:48:df:17:78:fb:74:79:dd:43:e3:08: 58:05:a1:b5:ac:0e:58:9b:22:72:34:40:34:0d:3b: e4:57:bb:83:71:32:52:09:1c:c2:66:27:b1:9e:87: 9b:2c:12:b8:5d:a6:c1:a9:69:4d:37:5d:52:e8:89: 9b:92:51:66:a1:5c:f1:5d:b9:50:a1:13:ad:b2:9d: 2a:89:9d:1c:a5:46:40:32:a7:fe:c1:5f:15:3b:c0: 20:12:5e:3c:d1:ca:44:07:ed:0d:30:e4:ca:14:aa: 5d:1b:74:17:d1:34:fe:e8:be:92:33:1c:41:f7:4b: 83:2b:61:25:3a:49:f3:b0:1a:61:76:f4:40:05:d9: bd:47:2a:b6:c3:54:aa:93:49:73:32:42:42:d0:3d: d0:b3:86:7f:98:cb:4f:54:70:c7:b6:85:9f:e1:53: f7:3e:a4:fd:f0:7e:26:fd:bc:ce:07:01:9f:b0:75: da:e0:80:17:9c:53:8e:2a:52:6a:16:86:cc:ac:14: 5c:2a:06:01:4f:b5:4d:4b:83:d4:2e:3f:14:9e:ce: 73:4b:b6:0a:22:3e:42:6c:5a:59:78:9f:19:7e:9d: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:14:63:E9:0D:3A:50:F4:9C:90:24:14:E9:CF:A3:80:5F:EA:F8:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl X509v3 Authority Key Identifier: keyid:12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer sbgp-ipAddrBlock: critical IPv4: 204.138.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:03:ef:86:0e:6d:f6:27:8e:9e:26:d4:1a:f8:d1:32:f5:03: f1:ae:8b:86:49:3a:94:d9:69:07:f9:22:4d:2e:6e:73:3b:27: 17:50:91:c1:4d:5b:4a:7f:dd:88:e2:cd:89:18:d9:e4:47:2d: f7:78:29:36:cb:26:05:cf:25:ce:8a:8d:3f:c8:e4:95:df:41: b9:2b:b7:e3:b4:68:16:00:fc:dd:66:43:67:a5:74:65:e4:94: 0b:9b:1d:db:d2:3f:d9:f1:c5:9e:cb:7e:b7:c2:fc:ff:14:61: 8b:7b:0e:0c:ae:51:0b:7f:ff:e6:04:44:06:a4:41:ac:78:00: 01:fb:fc:73:51:2b:eb:82:3b:bb:99:1f:e8:9a:ab:94:a5:ec: 0a:3a:7e:5b:a7:9d:de:e4:17:11:b7:d4:3a:bf:fe:44:40:b8: 07:66:c9:a4:fd:07:17:95:3b:60:fe:fc:af:f1:77:79:02:0f: 1e:88:63:3a:2d:f1:9e:ea:b7:c9:13:1b:be:1e:1d:f7:74:94: bb:b5:0f:b4:cd:e4:7b:73:f3:eb:70:b5:93:bb:ba:71:7c:31: 7a:35:ba:94:36:7d:cc:fa:25:28:bd:e7:17:8d:a3:8e:00:48: 9c:9a:27:4f:01:9c:38:2f:d6:e3:f8:15:0e:53:07:5e:58:68: ed:e0:30:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Cmt/jAPaqzJKEYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E5MWI4YjEtYTk3NS00YTQzLTk0N2YtNzk0ZGE4ODhj MTk4MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk N2E3MjAyZmYtNGI0Yi00OTE5LThhOTAtMGNiZDk1ZTk1MjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8KLoSNYw8UtlCeqc5eJgLjkVDHlCtk3YGnx ERFJsWAESN8XePt0ed1D4whYBaG1rA5YmyJyNEA0DTvkV7uDcTJSCRzCZiexnoeb LBK4XabBqWlNN11S6ImbklFmoVzxXblQoROtsp0qiZ0cpUZAMqf+wV8VO8AgEl48 0cpEB+0NMOTKFKpdG3QX0TT+6L6SMxxB90uDK2ElOknzsBphdvRABdm9Ryq2w1Sq k0lzMkJC0D3Qs4Z/mMtPVHDHtoWf4VP3PqT98H4m/bzOBwGfsHXa4IAXnFOOKlJq FobMrBRcKgYBT7VNS4PULj8Uns5zS7YKIj5CbFpZeJ8Zfp2ZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYUY+kNOlD0nJAkFOnPo4Bf6vj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkx YjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRkYTg4OGMxOTgvNDM3ZDBlNmMtYTgxNS0z MTRkLThjYjAtZDRiNGVlMjQ2ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2E5MWI4YjEtYTk3NS00YTQzLTk0 N2YtNzk0ZGE4ODhjMTk4L2NhOTFiOGIxLWE5NzUtNGE0My05NDdmLTc5NGRhODg4 YzE5OC5jcmwwHwYDVR0jBBgwFoAUEpCo+yXzGPB41MR8iU/D1J6lieMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkxYjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRk YTg4OGMxOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADED74YObfYnjp4m1Br40TL1A/Gui4ZJOpTZaQf5Ik0ubnM7JxdQkcFN W0p/3YjizYkY2eRHLfd4KTbLJgXPJc6KjT/I5JXfQbkrt+O0aBYA/N1mQ2eldGXk lAubHdvSP9nxxZ7LfrfC/P8UYYt7DgyuUQt//+YERAakQax4AAH7/HNRK+uCO7uZ H+iaq5Sl7Ao6flunnd7kFxG31Dq//kRAuAdmyaT9BxeVO2D+/K/xd3kCDx6IYzot 8Z7qt8kTG74eHfd0lLu1D7TN5Htz8+twtZO7unF8MXo1upQ2fcz6JSi95xeNo44A SJyaJ08BnDgv1uP4FQ5TB15YaO3gMLc= -----END CERTIFICATE-----Generated at Wed May 13 17:53:05 2026 by rpki-client