$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa File: b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa (raw, json) Hash identifier: wWDXCr+/ctUZiqNFQPkKgNz2D0jLP67x6eE44H0dmjw= Subject key identifier: 5D:B1:7D:EE:3F:99:E3:E1:EE:9B:F9:90:09:AD:74:B5:A8:00:A8:BC Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC4584202B16B6425D86E880 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 199.189.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:84:20:2b:16:b6:42:5d:86:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=bc437dc5-65d5-421b-85c0-09647d7e544d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:41:6a:99:89:bf:29:7f:30:16:e2:77:02: 1d:8f:e8:78:fc:72:a0:9f:cc:75:4a:08:d6:cf:56: 5b:ec:18:dc:f2:c4:3a:59:86:2f:30:45:92:09:ab: 6a:6a:0b:37:5b:d0:39:33:d1:63:b2:ca:fb:03:49: 10:49:50:66:b0:ca:cc:d5:a9:3a:f7:a4:8d:8f:50: 0f:77:53:de:a3:f0:c3:a6:0b:78:d0:79:e3:47:95: a1:b0:68:f1:eb:41:e3:76:92:fb:20:32:4b:ca:a4: 83:a3:0a:cb:58:44:c8:24:dc:ce:bb:d6:05:24:a8: c7:1e:c6:eb:da:6e:83:d2:89:26:64:02:40:94:cc: ed:b2:cd:36:9c:f3:b1:8e:ee:52:e7:bc:c4:83:08: 2e:0d:ba:10:62:11:e1:79:21:ee:94:62:71:ed:75: 01:0b:42:5d:be:b3:37:08:e1:ef:f3:78:26:fe:59: d1:1a:8c:9f:ba:e3:01:48:09:d2:b8:5b:36:a6:29: 78:cc:87:ef:43:fa:8d:ff:dd:ad:5e:71:63:4b:ea: d2:99:79:29:db:e8:02:37:2c:71:b0:13:07:ce:66: 97:d0:9a:c3:ee:a7:36:cd:03:29:bb:dd:37:40:0e: a2:91:2a:c7:b0:31:b3:14:12:63:01:e7:a2:e5:b4: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B1:7D:EE:3F:99:E3:E1:EE:9B:F9:90:09:AD:74:B5:A8:00:A8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.189.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:57:1f:44:5a:45:22:45:33:4a:b4:1e:13:f4:8f:a6:b7:ec: 88:5c:87:30:7a:37:c1:11:c1:d0:35:8c:b8:c4:14:ae:67:45: de:64:05:74:8f:7c:b7:5c:3f:1c:36:1f:44:9a:72:e0:a6:dc: 40:c7:a7:6c:3a:27:4b:88:55:da:c4:d0:bc:29:91:5e:92:51: a0:4c:64:78:c0:12:ed:59:40:65:40:00:56:45:2d:04:98:af: e6:f0:11:9b:cf:13:64:11:c0:b7:c0:4a:a9:0f:6e:d5:65:9e: 1c:22:eb:da:b1:c2:33:03:f0:b6:8e:17:2c:e5:37:d9:07:8b: e0:18:76:ad:72:ed:50:69:2a:c6:63:f8:26:3c:25:eb:2a:67: 4e:d7:33:7f:63:36:4b:2d:ce:0d:a1:ce:c9:17:0b:57:eb:c1: 59:00:de:4c:26:ce:a7:17:a4:12:44:25:40:d5:21:54:12:3a: f8:dd:70:42:b7:24:15:d2:a7:7e:9c:96:da:15:16:0c:10:bd: 80:8a:60:e9:df:b8:ea:52:da:e2:48:79:f5:f0:75:6f:65:fc: 25:41:bc:6e:d1:ac:c0:7d:7c:53:df:50:bd:c2:ae:6f:5a:35: 53:6e:2e:f4:63:34:ec:c6:0a:b0:4b:ef:6a:88:22:86:7f:67: bd:bd:48:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYQgKxa2Ql2G6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YmM0MzdkYzUtNjVkNS00MjFiLTg1YzAtMDk2NDdkN2U1NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsclBapmJvyl/MBbidwIdj+h4/HKgn8x1SgjW z1Zb7Bjc8sQ6WYYvMEWSCatqags3W9A5M9Fjssr7A0kQSVBmsMrM1ak696SNj1AP d1Peo/DDpgt40HnjR5WhsGjx60HjdpL7IDJLyqSDowrLWETIJNzOu9YFJKjHHsbr 2m6D0okmZAJAlMztss02nPOxju5S57zEgwguDboQYhHheSHulGJx7XUBC0JdvrM3 COHv83gm/lnRGoyfuuMBSAnSuFs2pil4zIfvQ/qN/92tXnFjS+rSmXkp2+gCNyxx sBMHzmaX0JrD7qc2zQMpu903QA6ikSrHsDGzFBJjAeei5bTpHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2xfe4/mePh7pv5kAmtdLWoAKi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjBkNWIzMTktZWU4Mi0z MmI3LWJiODQtNmE0N2JiOWM1OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZXH0RaRSJFM0q0HhP0j6a37IhchzB6N8ERwdA1jLjEFK5nRd5kBXSP fLdcPxw2H0SacuCm3EDHp2w6J0uIVdrE0LwpkV6SUaBMZHjAEu1ZQGVAAFZFLQSY r+bwEZvPE2QRwLfASqkPbtVlnhwi69qxwjMD8LaOFyzlN9kHi+AYdq1y7VBpKsZj +CY8JesqZ07XM39jNkstzg2hzskXC1frwVkA3kwmzqcXpBJEJUDVIVQSOvjdcEK3 JBXSp36cltoVFgwQvYCKYOnfuOpS2uJIefXwdW9l/CVBvG7RrMB9fFPfUL3Crm9a NVNuLvRjNOzGCrBL72qIIoZ/Z729SJI= -----END CERTIFICATE-----Generated at Wed May 13 03:29:05 2026 by rpki-client