$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/8c5cabd6-4120-3eb1-8a86-d5379a4d97f5.roa File: 8c5cabd6-4120-3eb1-8a86-d5379a4d97f5.roa (raw, json) Hash identifier: IiNRhkB5o2mAtCbzIGh3R6oWhiHW9doLQRmwdMBDQZk= Subject key identifier: A1:BF:4F:D0:8D:FA:98:6C:55:82:EE:AC:B5:BF:FB:FC:02:41:10:36 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584D905AA571B9C0F50ED83524B0 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/8c5cabd6-4120-3eb1-8a86-d5379a4d97f5.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 15296 IP address blocks: 199.216.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a5:71:b9:c0:f5:0e:d8:35:24:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=019d7059-33d6-436c-b45e-147c9720513c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:d1:dc:c0:0a:6c:e9:14:8a:e7:68:4f:19: 39:26:e2:02:06:02:87:fd:fb:2d:d3:0f:94:89:4a: 94:bf:77:e9:2c:4a:f3:5d:e7:03:90:15:d3:b0:37: db:a4:be:6b:ed:be:28:ea:58:ca:bd:2b:7a:05:c8: c5:af:60:47:e4:0d:94:00:95:ad:5a:ce:60:cc:e7: 96:5f:4a:96:04:4f:b2:16:cf:f3:6b:f8:a4:3a:ae: c8:74:81:25:fd:e9:df:4c:cc:2a:9a:07:2d:3b:f5: 46:ff:d1:45:f7:b9:bb:83:71:82:69:d4:ea:51:10: ce:08:c6:c4:c4:43:dc:61:f2:41:ce:30:c9:1b:e6: 6e:0f:f3:9a:72:6e:bd:87:27:6b:0a:e8:00:c7:dc: b7:7f:2d:99:b6:fe:d2:28:a7:94:a4:c0:a9:16:82: 4f:79:ed:38:79:10:b8:c2:e7:8d:2e:9f:1f:6e:35: d8:90:96:5e:27:c9:ea:11:bd:4a:2a:12:0e:22:63: 38:42:38:75:b9:78:ff:9c:dc:60:e8:08:57:c2:a5: f0:bb:63:81:68:92:c0:66:86:1e:db:53:da:19:90: e4:34:59:e9:bf:cd:51:3e:e0:bf:58:78:77:ff:90: af:ac:a9:64:d2:08:e6:35:19:d8:95:16:ae:ef:0b: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BF:4F:D0:8D:FA:98:6C:55:82:EE:AC:B5:BF:FB:FC:02:41:10:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/8c5cabd6-4120-3eb1-8a86-d5379a4d97f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b8:56:04:df:21:03:86:80:f7:0d:3f:e0:7f:ed:17:20:39: 6b:0e:56:3f:fe:b8:10:fa:2b:f9:c7:aa:1e:16:ea:56:d6:c2: d3:29:54:c1:db:27:78:cc:61:b9:88:77:ad:66:a6:24:85:06: 2b:9f:f3:c9:69:a8:32:59:bd:ed:31:b1:2c:40:94:65:c7:51: 0c:4d:d1:67:11:17:2e:f1:04:3b:01:4d:59:e4:7d:94:aa:a8: 6d:da:1d:e9:0b:36:c1:67:6f:2a:d7:b0:f4:ed:d9:30:52:b0: e6:44:d5:7b:b3:a5:a0:43:2c:fa:58:88:61:b1:04:3f:ab:42: 26:0b:e5:eb:b0:81:ca:08:00:89:9b:e0:f6:4d:4d:62:50:25: 8c:78:f6:16:0f:06:46:af:0b:3f:7f:03:5f:c3:2a:db:bb:bd: 2f:3b:b7:86:0b:cc:fe:17:4e:9c:48:18:bb:2a:88:cf:15:50: be:99:5c:e7:77:b7:95:7d:07:dc:52:b5:25:a3:fc:79:33:33: 82:f4:a3:fe:85:fc:23:cd:d1:98:7c:62:4f:eb:e0:40:16:38: 1d:c4:e7:d5:9e:d1:0e:a3:bb:88:e0:0e:e0:e0:dd:ec:24:af: 67:6b:81:a3:03:84:57:d7:34:af:9d:22:28:0b:66:a6:b0:a5: 42:3f:47:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqVxucD1Dtg1JLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk MDE5ZDcwNTktMzNkNi00MzZjLWI0NWUtMTQ3Yzk3MjA1MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYDR3MAKbOkUiudoTxk5JuICBgKH/fst0w+U iUqUv3fpLErzXecDkBXTsDfbpL5r7b4o6ljKvSt6BcjFr2BH5A2UAJWtWs5gzOeW X0qWBE+yFs/za/ikOq7IdIEl/enfTMwqmgctO/VG/9FF97m7g3GCadTqURDOCMbE xEPcYfJBzjDJG+ZuD/Oacm69hydrCugAx9y3fy2Ztv7SKKeUpMCpFoJPee04eRC4 wueNLp8fbjXYkJZeJ8nqEb1KKhIOImM4Qjh1uXj/nNxg6AhXwqXwu2OBaJLAZoYe 21PaGZDkNFnpv81RPuC/WHh3/5CvrKlk0gjmNRnYlRau7wtkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG/T9CN+phsVYLurLW/+/wCQRA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvOGM1Y2FiZDYtNDEyMC0z ZWIxLThhODYtZDUzNzlhNGQ5N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG24VgTfIQOGgPcNP+B/7RcgOWsOVj/+uBD6K/nHqh4W6lbWwtMpVMHb J3jMYbmId61mpiSFBiuf88lpqDJZve0xsSxAlGXHUQxN0WcRFy7xBDsBTVnkfZSq qG3aHekLNsFnbyrXsPTt2TBSsOZE1XuzpaBDLPpYiGGxBD+rQiYL5euwgcoIAImb 4PZNTWJQJYx49hYPBkavCz9/A1/DKtu7vS87t4YLzP4XTpxIGLsqiM8VUL6ZXOd3 t5V9B9xStSWj/HkzM4L0o/6F/CPN0Zh8Yk/r4EAWOB3E59We0Q6ju4jgDuDg3ewk r2drgaMDhFfXNK+dIigLZqawpUI/R4k= -----END CERTIFICATE-----Generated at Wed May 13 10:33:34 2026 by rpki-client