$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa File: 1b54a3eb-c57f-38c6-85bb-063509906029.roa (raw, json) Hash identifier: cBePUJxa7zisPnpcxFZ8tmUf+ySk11JRSx2XIxUtAo0= Subject key identifier: 19:3D:4E:04:B8:E7:66:79:34:75:65:2F:07:8C:2F:5B:51:15:08:E9 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC4583F89B9CA2ACE1299800 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 199.27.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:83:f8:9b:9c:a2:ac:e1:29:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=1a2808a7-43ce-4fd4-85fd-6abb3ca836a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:41:ac:2e:b2:ab:e0:32:c7:1d:1e:68:b5:2f: 8a:42:b7:43:f3:e5:90:4e:a4:8e:2c:a2:b6:60:c7: b2:a3:bd:9e:28:4d:92:0a:c5:d8:ea:49:3d:d2:b9: 67:12:7f:d2:b3:4a:69:c6:85:12:71:0c:8b:e6:47: 4b:ce:09:e9:85:a1:4e:8d:27:55:c7:f1:48:4c:e6: b2:bb:a6:a4:54:37:c8:85:6d:56:86:5a:54:35:57: 1a:50:76:9b:8b:aa:b8:90:06:0c:27:17:15:62:9e: 34:35:de:55:e4:80:7c:c7:49:01:04:01:a6:83:64: 23:62:3d:fb:09:c9:22:32:0f:0b:68:13:1b:2f:9e: 48:ec:b4:84:ee:a2:f7:f8:d7:0c:bb:b8:06:03:75: 00:e5:31:bc:62:ce:91:3b:da:50:82:9e:8d:eb:9f: a6:32:b5:56:59:26:5f:58:5e:11:a3:8b:67:1a:f9: 9b:e3:e6:19:07:fb:b1:e3:e0:7f:1f:fa:f1:62:dd: 71:c2:dd:c5:5b:23:8f:c2:21:db:8d:13:26:b1:db: d2:41:d6:d1:84:c6:f2:d6:a7:7e:dc:ba:c6:25:c4: d0:54:86:8b:26:7d:1a:3a:be:f4:9f:9b:94:cd:de: d1:b2:ef:9b:6a:bf:42:80:9e:4d:c9:b8:47:43:58: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3D:4E:04:B8:E7:66:79:34:75:65:2F:07:8C:2F:5B:51:15:08:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1b54a3eb-c57f-38c6-85bb-063509906029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.27.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:07:37:f3:9d:54:97:54:22:05:28:ee:4a:5c:3d:d7:f2:cc: a6:3f:e1:e7:b2:12:a6:9a:da:53:78:af:2f:33:a6:f4:c6:8c: 31:a3:aa:0f:c7:53:22:69:4d:2e:ec:b8:6f:ee:15:1f:ee:a5: cc:4c:32:3c:3d:df:77:0c:63:ef:10:75:e3:9a:c8:a5:d7:af: 3e:8b:81:25:9f:d2:b2:17:45:1f:33:82:b7:31:cb:43:15:ed: ff:4a:65:d7:47:d1:d7:03:50:22:03:8f:7b:43:63:03:7d:ab: eb:33:0a:05:3a:8e:f0:bd:9a:58:a7:44:03:5c:d1:d9:06:f0: e2:cb:ba:48:a4:a0:76:9d:a4:70:19:e8:a0:e6:4e:f3:82:1b: 2a:3f:45:1e:ae:92:10:2e:ec:02:26:8d:3e:dd:ca:91:75:93: 54:db:3e:af:b0:db:8e:d8:5a:74:91:69:73:07:27:bc:93:ec: fe:a3:49:ed:54:81:61:cf:fd:a9:32:c8:57:90:03:aa:8e:d3: 33:d9:8d:e9:3d:ce:3b:c2:bc:36:71:b9:28:ae:c2:91:f7:8b: 8d:db:9d:ce:de:48:79:59:87:29:69:79:82:61:21:86:87:40: e8:55:8c:9b:a2:3f:44:7b:23:68:da:04:69:62:0e:b9:9a:31: 7b:f7:fa:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYP4m5yirOEpmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MWEyODA4YTctNDNjZS00ZmQ0LTg1ZmQtNmFiYjNjYTgzNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUGsLrKr4DLHHR5otS+KQrdD8+WQTqSOLKK2 YMeyo72eKE2SCsXY6kk90rlnEn/Ss0ppxoUScQyL5kdLzgnphaFOjSdVx/FITOay u6akVDfIhW1WhlpUNVcaUHabi6q4kAYMJxcVYp40Nd5V5IB8x0kBBAGmg2QjYj37 CckiMg8LaBMbL55I7LSE7qL3+NcMu7gGA3UA5TG8Ys6RO9pQgp6N65+mMrVWWSZf WF4Ro4tnGvmb4+YZB/ux4+B/H/rxYt1xwt3FWyOPwiHbjRMmsdvSQdbRhMby1qd+ 3LrGJcTQVIaLJn0aOr70n5uUzd7Rsu+bar9CgJ5NybhHQ1gV2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk9TgS452Z5NHVlLweML1tRFQjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWI1NGEzZWItYzU3Zi0z OGM2LTg1YmItMDYzNTA5OTA2MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoHN/OdVJdUIgUo7kpcPdfyzKY/4eeyEqaa2lN4ry8zpvTGjDGjqg/H UyJpTS7suG/uFR/upcxMMjw933cMY+8QdeOayKXXrz6LgSWf0rIXRR8zgrcxy0MV 7f9KZddH0dcDUCIDj3tDYwN9q+szCgU6jvC9mlinRANc0dkG8OLLukikoHadpHAZ 6KDmTvOCGyo/RR6ukhAu7AImjT7dypF1k1TbPq+w247YWnSRaXMHJ7yT7P6jSe1U gWHP/akyyFeQA6qO0zPZjek9zjvCvDZxuSiuwpH3i43bnc7eSHlZhylpeYJhIYaH QOhVjJuiP0R7I2jaBGliDrmaMXv3+pA= -----END CERTIFICATE-----Generated at Wed May 13 07:07:20 2026 by rpki-client