$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/cfe478c1-216f-3215-84be-49070a769d68.roa File: cfe478c1-216f-3215-84be-49070a769d68.roa (raw, json) Hash identifier: 8rv8QF5ZV2ptOg3dKAJumBxcR+i5PQsgfV0xTgf2/UI= Subject key identifier: 68:57:9C:38:30:B7:77:E6:1D:B2:93:56:A5:00:E8:59:EF:54:A4:86 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584D905AA57EC70A98B4A3D59800 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/cfe478c1-216f-3215-84be-49070a769d68.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 15296 IP address blocks: 199.216.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a5:7e:c7:0a:98:b4:a3:d5:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=b0e81e80-b77a-4b66-9106-95b84fbafeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:55:2c:65:2d:5d:40:a3:12:0c:ee:cb:4a: bf:80:e3:3f:57:d8:37:c2:72:ff:bc:6e:d3:2b:af: ce:c6:67:d1:0f:8f:38:e7:d5:5d:fd:72:bb:b1:5c: d4:ff:04:68:fc:e7:a2:21:2b:39:8f:e2:59:12:d2: 85:d1:63:5b:57:92:59:1e:85:26:2e:e6:78:13:f5: 4e:dc:d9:c5:86:03:c0:38:ef:c1:ba:01:54:72:3d: 2a:a0:ed:66:f6:18:04:40:ca:76:f6:c6:d1:25:79: 38:8f:d9:07:e3:25:7c:55:87:b3:df:ce:14:c9:a6: 8f:f5:35:bd:b1:2f:cf:1c:95:3d:a6:d4:9c:a2:73: cc:77:34:a0:c9:ba:e3:f7:f4:0f:40:46:a5:ab:9b: a5:e4:c9:90:08:1e:32:c4:93:02:d4:c3:a5:e1:78: 4c:78:ff:ff:2c:4e:06:aa:ee:ce:ea:d5:3a:1b:d0: b4:44:44:bc:ff:99:8d:33:7c:be:92:72:59:3e:fe: da:1a:b2:7f:e4:02:54:76:56:24:63:b4:6a:d2:9d: b7:69:26:a2:17:28:0b:ba:39:47:96:55:5c:68:30: bb:a4:92:ca:09:39:e1:72:c7:b3:42:05:21:da:02: 83:90:54:09:73:8d:f1:ca:5b:26:67:75:d8:f3:f5: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:57:9C:38:30:B7:77:E6:1D:B2:93:56:A5:00:E8:59:EF:54:A4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/cfe478c1-216f-3215-84be-49070a769d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8c:67:2c:60:81:1a:5b:cd:e4:ea:58:4d:f6:b6:ff:9d:75: 5c:74:3b:a9:9b:e4:48:e0:35:2f:2d:7f:82:ea:c4:f7:57:07: e1:a3:0a:96:b3:b8:15:e9:18:fb:e2:c5:98:92:75:53:97:16: e3:84:84:90:9d:da:d0:44:bb:68:51:96:0d:43:d1:52:7f:b7: 79:df:e9:64:8a:c4:9a:16:24:0b:60:51:89:04:a8:48:5c:46: 07:29:6d:d2:ef:bf:ea:de:bd:10:3b:4a:4d:6c:e7:29:d8:66: e9:a8:8f:67:c5:a0:d6:04:4e:c8:a6:a5:c6:9c:1a:9b:b8:75: 7a:a3:71:54:1d:bc:24:90:42:c5:b4:ea:eb:08:2a:90:6a:6d: 04:50:3f:46:87:8c:90:ea:58:98:b6:4b:bb:6f:b2:46:6c:c7: da:73:f4:54:0a:85:1e:69:f6:e0:c8:ae:0d:df:b4:3a:9c:f2: ae:7f:a6:c0:33:df:50:bb:d0:9a:21:fc:30:8b:d3:bb:73:9c: 06:f0:24:8c:b6:f6:80:aa:a0:e2:bc:0f:f5:8a:c8:57:8e:bc: 06:1f:52:21:17:35:59:3f:6f:21:17:c6:71:32:f1:10:7d:d1: c3:36:cd:29:df:f8:4e:41:3a:02:ea:8b:2e:06:a4:e5:bb:53: 7d:40:bf:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqV+xwqYtKPVmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk YjBlODFlODAtYjc3YS00YjY2LTkxMDYtOTViODRmYmFmZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR9VLGUtXUCjEgzuy0q/gOM/V9g3wnL/vG7T K6/OxmfRD48459Vd/XK7sVzU/wRo/OeiISs5j+JZEtKF0WNbV5JZHoUmLuZ4E/VO 3NnFhgPAOO/BugFUcj0qoO1m9hgEQMp29sbRJXk4j9kH4yV8VYez384UyaaP9TW9 sS/PHJU9ptSconPMdzSgybrj9/QPQEalq5ul5MmQCB4yxJMC1MOl4XhMeP//LE4G qu7O6tU6G9C0RES8/5mNM3y+knJZPv7aGrJ/5AJUdlYkY7Rq0p23aSaiFygLujlH llVcaDC7pJLKCTnhcsezQgUh2gKDkFQJc43xylsmZ3XY8/VbmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhXnDgwt3fmHbKTVqUA6FnvVKSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvY2ZlNDc4YzEtMjE2Zi0z MjE1LTg0YmUtNDkwNzBhNzY5ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9j0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCMZyxggRpbzeTqWE32tv+ddVx0O6mb5EjgNS8tf4LqxPdXB+GjCpaz uBXpGPvixZiSdVOXFuOEhJCd2tBEu2hRlg1D0VJ/t3nf6WSKxJoWJAtgUYkEqEhc RgcpbdLvv+revRA7Sk1s5ynYZumoj2fFoNYETsimpcacGpu4dXqjcVQdvCSQQsW0 6usIKpBqbQRQP0aHjJDqWJi2S7tvskZsx9pz9FQKhR5p9uDIrg3ftDqc8q5/psAz 31C70Joh/DCL07tznAbwJIy29oCqoOK8D/WKyFeOvAYfUiEXNVk/byEXxnEy8RB9 0cM2zSnf+E5BOgLqiy4GpOW7U31Av5A= -----END CERTIFICATE-----Generated at Wed May 13 12:53:02 2026 by rpki-client