$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa File: 5bb8ae99-9972-35bb-a6b2-11a633b775da.roa (raw, json) Hash identifier: 5cSBf36asXxPiWSW2zUzuCZxqx7hwp3PG6GnpCIM1RY= Subject key identifier: 5E:F4:62:E5:3D:0F:CF:A6:D1:77:52:72:5A:98:63:55:F4:72:12:85 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584D9CEAB16CA2CA9733ACDB0C40 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa Signing time: Fri 24 Apr 2026 13:00:31 +0000 ROA not before: Fri 24 Apr 2026 13:00:31 +0000 ROA not after: Thu 23 Jul 2026 13:00:31 +0000 asID: 394708 IP address blocks: 199.187.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:ea:b1:6c:a2:ca:97:33:ac:db:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Apr 24 13:00:31 2026 GMT Not After : Jul 23 13:00:31 2026 GMT Subject: CN=2d8b5fb2-a107-4f0c-aecc-7663974462a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6f:a9:f7:59:56:b0:ac:f8:bf:6c:5b:2c:e5: 0d:b8:46:43:84:7d:c5:eb:25:13:40:82:9b:7c:0f: 48:58:2c:68:db:12:74:e6:05:b2:eb:08:66:0d:d6: e3:32:5d:e9:06:87:f2:f8:7e:c0:3e:9f:68:fa:ee: 9d:dd:5d:39:3e:48:e9:8c:32:04:2b:2f:b6:60:51: c0:b2:21:b8:22:b1:8e:d3:15:d8:c1:1c:95:9f:15: 71:43:cb:b9:80:22:6f:71:45:46:08:ac:48:d5:cc: 62:cf:63:48:7d:d1:5a:bd:99:57:b1:e4:af:10:3d: 12:47:a3:da:67:1e:dd:46:90:d1:53:12:22:1a:10: 5f:81:e0:e3:df:53:13:d5:c1:8b:7b:1a:e6:2d:b5: de:98:1c:5d:49:c2:10:64:7f:78:8f:a8:70:f6:a2: 33:05:4e:cb:2e:8b:78:b4:70:2f:83:2c:13:71:09: 39:4a:25:2b:29:21:42:70:67:82:ca:79:23:5f:ab: 48:0c:06:a4:d5:fa:22:9d:7b:74:e3:07:9f:06:dd: 73:d7:20:c1:36:21:a6:03:ce:17:29:81:cc:bc:9a: 1a:09:ff:64:a3:69:44:d1:d3:a1:be:ee:c6:25:15: 45:60:87:aa:2f:ea:fc:80:b6:94:58:e9:de:84:15: 15:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F4:62:E5:3D:0F:CF:A6:D1:77:52:72:5A:98:63:55:F4:72:12:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/5bb8ae99-9972-35bb-a6b2-11a633b775da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.187.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:38:15:68:3a:9c:1c:7a:ba:ba:9a:8e:e8:44:1b:8a:fc:dd: 80:f2:21:9e:a1:8e:4f:29:fe:d7:85:48:da:6c:8b:18:89:f9: 3d:b4:3e:61:56:bf:2a:bc:62:21:f1:e7:9b:b1:40:50:2b:f1: ab:7b:29:6c:31:4e:2c:7d:60:f8:fb:f5:12:31:1e:81:06:91: 07:ed:cd:5b:7c:b3:b1:14:8d:9a:62:9d:01:a3:0a:72:6d:fd: 26:85:d2:c6:7d:bd:31:85:db:5c:4b:2e:b1:7b:81:f8:3f:77: fd:da:de:86:82:e8:8d:c6:fb:ab:45:7a:2d:00:6b:33:64:07: 79:25:8a:8a:4a:33:2c:f9:a9:0f:78:0d:ae:a3:f9:c7:c4:f2: 51:7a:14:36:93:3b:41:60:bc:74:78:44:ae:45:d1:a4:20:08: 7e:04:09:19:99:4a:c1:90:9f:c7:6f:f8:b6:a6:e7:40:b2:76: 5a:13:dc:9d:5c:15:89:d5:5f:3d:15:b1:9a:a0:39:4a:ae:63: 92:ac:d0:30:ac:bc:e8:45:4a:6e:69:2a:d3:c4:34:de:a3:8c: a9:e8:49:d1:d4:1a:91:bd:c0:0d:3f:e5:ef:cf:cc:15:0c:36: 0c:63:c8:21:65:c8:7d:e4:ce:52:5b:40:d9:82:c8:b5:3c:6c: 38:88:0c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2c6rFsosqXM6zbDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDQyNDEzMDAzMVoXDTI2MDcyMzEzMDAzMVowLzEtMCsGA1UEAxMk MmQ4YjVmYjItYTEwNy00ZjBjLWFlY2MtNzY2Mzk3NDQ2MmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm+p91lWsKz4v2xbLOUNuEZDhH3F6yUTQIKb fA9IWCxo2xJ05gWy6whmDdbjMl3pBofy+H7APp9o+u6d3V05PkjpjDIEKy+2YFHA siG4IrGO0xXYwRyVnxVxQ8u5gCJvcUVGCKxI1cxiz2NIfdFavZlXseSvED0SR6Pa Zx7dRpDRUxIiGhBfgeDj31MT1cGLexrmLbXemBxdScIQZH94j6hw9qIzBU7LLot4 tHAvgywTcQk5SiUrKSFCcGeCynkjX6tIDAak1foinXt04wefBt1z1yDBNiGmA84X KYHMvJoaCf9ko2lE0dOhvu7GJRVFYIeqL+r8gLaUWOnehBUVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF70YuU9D8+m0XdSclqYY1X0chKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvNWJiOGFlOTktOTk3Mi0z NWJiLWE2YjItMTFhNjMzYjc3NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7vEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU4FWg6nBx6urqajuhEG4r83YDyIZ6hjk8p/teFSNpsixiJ+T20PmFW vyq8YiHx55uxQFAr8at7KWwxTix9YPj79RIxHoEGkQftzVt8s7EUjZpinQGjCnJt /SaF0sZ9vTGF21xLLrF7gfg/d/3a3oaC6I3G+6tFei0AazNkB3kliopKMyz5qQ94 Da6j+cfE8lF6FDaTO0FgvHR4RK5F0aQgCH4ECRmZSsGQn8dv+Lam50CydloT3J1c FYnVXz0VsZqgOUquY5Ks0DCsvOhFSm5pKtPENN6jjKnoSdHUGpG9wA0/5e/PzBUM NgxjyCFlyH3kzlJbQNmCyLU8bDiIDGk= -----END CERTIFICATE-----Generated at Wed May 13 01:29:17 2026 by rpki-client