$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa File: 67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa (raw, json) Hash identifier: 6N8Cs4OixNuO7fGzZRwirz40wAue+AiZ5PwF1/A1lEE= Subject key identifier: 10:D1:CA:34:1F:18:76:CD:3D:3E:10:25:89:B3:5A:C4:79:AC:31:32 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC4590D6F299FC6610F86040 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:90:d6:f2:99:fc:66:10:f8:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=10e066e7-e7dc-459c-aea9-48c9c45b5533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:bd:05:0b:8d:ab:f9:f0:f9:fb:3e:cf:38: 9c:a4:df:34:e2:9e:92:1e:1b:3d:99:40:94:41:14: 12:ec:7e:f7:aa:1b:32:36:e0:48:87:f4:9c:1e:f9: bd:61:39:5b:45:9f:aa:65:9b:de:1f:b4:ed:d2:22: e8:6d:03:2e:dd:2a:07:69:c5:1a:8c:c9:47:db:cf: 20:2c:03:95:14:13:00:01:83:11:18:21:2c:a4:fc: 4e:f7:48:01:4f:42:bc:41:26:b6:01:1d:83:60:29: 1a:b3:46:0e:e4:d6:0c:ec:9a:ba:2f:37:3e:32:ca: fe:24:d8:38:d6:f8:f3:f6:f4:44:b4:db:dc:c3:66: 44:ba:42:d7:56:8a:df:65:92:7e:6e:c6:98:a5:d5: 9b:30:5b:1a:8b:24:ee:e5:3b:18:9f:a6:51:af:37: e1:f4:f7:07:85:50:39:91:63:9e:10:d3:c5:dc:6c: ca:ae:09:9d:56:a5:1d:25:b9:73:d7:c9:48:dc:0d: 4c:14:9e:a5:04:34:9d:37:0f:4a:a3:90:f5:09:d0: b3:08:f1:20:be:73:8f:7b:d0:cf:ce:ca:7e:02:3e: 46:72:4c:10:e4:0d:ea:0d:04:32:dc:0b:5c:7c:bd: ad:0e:c6:66:dd:2c:be:ac:05:06:8b:30:09:5a:28: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:CA:34:1F:18:76:CD:3D:3E:10:25:89:B3:5A:C4:79:AC:31:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/67efe0c1-1e58-3a26-99d2-98576c1a96d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cb:66:7f:5d:1a:6a:10:b0:f4:dc:b6:62:75:a5:34:3b:f4: 04:2e:65:76:b3:cb:c2:36:44:0a:13:2e:4e:fc:c9:aa:d3:e9: bd:01:ea:8d:0d:be:ac:66:f9:6f:d4:5c:96:2a:a0:43:38:16: 18:d8:75:59:68:be:18:4e:dc:14:69:9c:d3:a7:02:0e:b6:f7: 3e:82:5b:a4:6d:e7:14:8d:55:0a:f7:ad:29:32:89:c3:ff:41: 14:af:be:b7:15:15:af:df:12:f3:9e:83:f5:06:73:13:65:06: 72:94:b9:b5:44:a1:76:00:1f:f7:3d:d2:a4:dc:05:8e:c2:42: 49:3f:18:0a:cc:ee:fc:fc:dd:51:18:e6:40:f0:7f:21:e2:1d: 68:94:89:e4:85:99:01:52:89:91:ca:83:e9:2b:7f:d2:7e:6f: b1:45:0a:37:c9:b7:4c:45:e0:7b:a3:94:2e:87:b0:87:a1:cc: f6:37:f6:14:95:c5:ca:eb:79:b1:4f:cc:31:53:64:82:47:bf: 8e:dc:26:dc:c6:88:53:08:37:60:cc:16:9f:db:25:0f:c0:dc: 22:8f:29:31:17:68:f7:0c:f9:88:9a:2b:a7:4b:55:a3:c9:a4: 06:b0:65:90:d0:2f:d1:03:97:f2:d1:e7:00:91:6a:35:a9:3d: a1:d1:a0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZDW8pn8ZhD4YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MTBlMDY2ZTctZTdkYy00NTljLWFlYTktNDhjOWM0NWI1NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNy9BQuNq/nw+fs+zzicpN804p6SHhs9mUCU QRQS7H73qhsyNuBIh/ScHvm9YTlbRZ+qZZveH7Tt0iLobQMu3SoHacUajMlH288g LAOVFBMAAYMRGCEspPxO90gBT0K8QSa2AR2DYCkas0YO5NYM7Jq6Lzc+Msr+JNg4 1vjz9vREtNvcw2ZEukLXVorfZZJ+bsaYpdWbMFsaiyTu5TsYn6ZRrzfh9PcHhVA5 kWOeENPF3GzKrgmdVqUdJblz18lI3A1MFJ6lBDSdNw9Ko5D1CdCzCPEgvnOPe9DP zsp+Aj5GckwQ5A3qDQQy3AtcfL2tDsZm3Sy+rAUGizAJWiiUlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDRyjQfGHbNPT4QJYmzWsR5rDEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNjdlZmUwYzEtMWU1OC0z YTI2LTk5ZDItOTg1NzZjMWE5NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPLZn9dGmoQsPTctmJ1pTQ79AQuZXazy8I2RAoTLk78yarT6b0B6o0N vqxm+W/UXJYqoEM4FhjYdVlovhhO3BRpnNOnAg629z6CW6Rt5xSNVQr3rSkyicP/ QRSvvrcVFa/fEvOeg/UGcxNlBnKUubVEoXYAH/c90qTcBY7CQkk/GArM7vz83VEY 5kDwfyHiHWiUieSFmQFSiZHKg+krf9J+b7FFCjfJt0xF4HujlC6HsIehzPY39hSV xcrrebFPzDFTZIJHv47cJtzGiFMIN2DMFp/bJQ/A3CKPKTEXaPcM+YiaK6dLVaPJ pAawZZDQL9EDl/LR5wCRajWpPaHRoMQ= -----END CERTIFICATE-----Generated at Wed May 13 05:08:38 2026 by rpki-client