$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa File: 005de955-4c0d-38b7-93cf-e0a50e296e3a.roa (raw, json) Hash identifier: dO9/jxfAUEPj39MECH7TEz2VNuHNnj720yUJt9BE+k4= Subject key identifier: 56:E8:4D:14:3F:40:79:53:62:C6:BF:86:5F:9D:67:9F:A3:27:B1:57 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584DA54ABCA338025368967E9B00 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa Signing time: Mon 27 Apr 2026 13:00:30 +0000 ROA not before: Mon 27 Apr 2026 13:00:30 +0000 ROA not after: Sun 26 Jul 2026 13:00:30 +0000 asID: 4922 IP address blocks: 199.38.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:4a:bc:a3:38:02:53:68:96:7e:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Apr 27 13:00:30 2026 GMT Not After : Jul 26 13:00:30 2026 GMT Subject: CN=c15e3d22-0419-4a24-9eee-6414122365ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:6b:30:be:50:6e:99:b7:99:2d:34:17:23: b9:ab:f0:02:92:8d:ec:2e:24:b3:f8:70:31:72:e5: e6:35:7d:f7:b0:3e:59:56:65:95:d1:a3:b1:cf:43: 9d:67:40:65:b7:ca:97:6b:31:f1:5b:6c:27:eb:24: 5d:ad:46:ce:35:1f:6b:38:04:6d:5b:80:e4:82:70: 49:70:d2:b9:bc:9e:d4:34:75:c5:d9:ec:09:97:75: a2:7b:36:4d:a2:a9:99:d1:13:88:ea:3f:7b:8f:e3: bf:ae:5b:37:d2:88:42:84:77:3a:5f:f6:e3:81:bf: 7f:c3:67:45:eb:59:e7:26:31:43:5e:a0:7f:a6:23: 5a:b9:99:c6:12:56:fa:5b:64:b3:7a:1e:18:3e:35: 86:92:8b:cb:b4:ea:9e:de:d3:51:da:85:a3:c2:55: 24:56:e7:ff:ea:62:3a:4c:02:1b:18:3a:66:9a:88: 30:f4:d0:ec:fe:54:b5:51:bc:9c:44:28:d6:19:ff: 33:6b:03:27:72:43:69:a4:1b:97:05:bb:39:bc:8a: a8:82:f6:8d:46:f1:b2:a4:12:05:fc:85:b5:bb:90: da:bf:46:19:a6:1e:91:f5:ac:b9:f8:0d:dc:50:03: 46:30:a9:e7:6b:d1:60:0f:c4:78:37:a9:74:5c:00: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E8:4D:14:3F:40:79:53:62:C6:BF:86:5F:9D:67:9F:A3:27:B1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/005de955-4c0d-38b7-93cf-e0a50e296e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:80:00:9a:df:3d:ef:c9:6b:44:ef:d3:48:2f:f4:26:53:49: 0a:54:e6:6e:2d:84:ac:b4:67:b6:02:0a:ce:a8:6b:0c:b9:9f: d5:fe:db:89:9d:f9:86:9c:a3:e8:b7:64:cf:dc:03:63:94:1a: 55:04:40:89:d5:6b:c0:3a:f3:fd:05:3c:b3:95:81:8b:bc:33: b8:6f:ab:33:2d:89:1c:3c:5f:ce:ab:68:97:fc:be:4d:58:5e: 96:c0:f2:38:d2:bb:f2:39:06:49:f0:80:f9:ae:52:5c:2c:ac: 52:72:5c:08:85:ed:fa:47:24:a6:d9:5b:27:54:e4:04:5a:e1: 68:02:6c:41:ba:62:0e:14:90:48:cb:d6:1e:89:4e:26:dc:32: bd:cb:03:fc:05:26:d9:12:19:54:ba:7a:84:c5:95:ab:01:5b: 11:ec:00:c9:9b:ca:2b:ce:d3:f1:d6:e7:bd:c4:f9:4a:8b:b1: fa:70:62:43:7b:45:f7:f1:c0:ab:be:d9:d9:6c:07:2f:38:dc: 61:fd:cb:d4:06:2e:df:6c:34:90:64:e7:88:42:05:3a:5e:2b: b4:47:96:05:81:db:ff:10:c4:3b:5c:b3:9b:db:e6:38:8b:75: dc:ab:65:02:50:9c:d7:b6:7a:a0:93:63:79:4b:a6:6c:a0:e9: f7:bf:d9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lSryjOAJTaJZ+mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDQyNzEzMDAzMFoXDTI2MDcyNjEzMDAzMFowLzEtMCsGA1UEAxMk YzE1ZTNkMjItMDQxOS00YTI0LTllZWUtNjQxNDEyMjM2NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJtrML5Qbpm3mS00FyO5q/ACko3sLiSz+HAx cuXmNX33sD5ZVmWV0aOxz0OdZ0Blt8qXazHxW2wn6yRdrUbONR9rOARtW4DkgnBJ cNK5vJ7UNHXF2ewJl3WiezZNoqmZ0ROI6j97j+O/rls30ohChHc6X/bjgb9/w2dF 61nnJjFDXqB/piNauZnGElb6W2Szeh4YPjWGkovLtOqe3tNR2oWjwlUkVuf/6mI6 TAIbGDpmmogw9NDs/lS1UbycRCjWGf8zawMnckNppBuXBbs5vIqogvaNRvGypBIF /IW1u5Dav0YZph6R9ay5+A3cUANGMKnna9FgD8R4N6l0XAAnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFboTRQ/QHlTYsa/hl+dZ5+jJ7FXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMDA1ZGU5NTUtNGMwZC0z OGI3LTkzY2YtZTBhNTBlMjk2ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmAAJrfPe/Ja0Tv00gv9CZTSQpU5m4thKy0Z7YCCs6oawy5n9X+24md +Yaco+i3ZM/cA2OUGlUEQInVa8A68/0FPLOVgYu8M7hvqzMtiRw8X86raJf8vk1Y XpbA8jjSu/I5BknwgPmuUlwsrFJyXAiF7fpHJKbZWydU5ARa4WgCbEG6Yg4UkEjL 1h6JTibcMr3LA/wFJtkSGVS6eoTFlasBWxHsAMmbyivO0/HW573E+UqLsfpwYkN7 RffxwKu+2dlsBy843GH9y9QGLt9sNJBk54hCBTpeK7RHlgWB2/8QxDtcs5vb5jiL ddyrZQJQnNe2eqCTY3lLpmyg6fe/2VE= -----END CERTIFICATE-----Generated at Wed May 13 03:57:08 2026 by rpki-client