$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa File: a99aabb6-8e99-34c2-9db7-d6869db9145e.roa (raw, json) Hash identifier: cmB7nJwX8PKJsMZ3bCXD5w/d/6wGlzNcZcWhBzCe5C0= Subject key identifier: 7D:E5:B6:AC:B5:8F:BC:D4:A4:81:1D:97:18:0B:A6:0F:AA:99:C3:20 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DBEA259D8AF4A7E3363357D40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa Signing time: Wed 06 May 2026 14:52:17 +0000 ROA not before: Wed 06 May 2026 14:52:17 +0000 ROA not after: Tue 04 Aug 2026 14:52:17 +0000 asID: 0 IP address blocks: 199.1.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:a2:59:d8:af:4a:7e:33:63:35:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 6 14:52:17 2026 GMT Not After : Aug 4 14:52:17 2026 GMT Subject: CN=7f60c965-b8ae-483f-afaf-7cf2f81014aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:0b:3a:39:d0:0d:21:b7:9b:8f:1c:d2:bb: 5a:76:9f:60:af:7a:a7:9d:2c:86:33:e9:92:ee:46: 69:d1:83:df:32:23:1a:f6:23:5d:24:1d:6a:d5:90: 3d:e8:06:85:42:31:68:c2:8d:db:9f:80:e6:0c:4e: a1:3a:13:36:48:0f:77:d8:08:87:b9:4d:38:56:76: 56:86:54:15:9a:ae:21:0c:52:32:b8:48:2d:80:e4: 43:c5:5f:17:69:66:16:0d:8a:95:55:c7:af:7c:8d: 59:17:cf:3d:de:e6:4d:6d:a7:33:64:7c:22:8a:78: 2b:23:1f:0f:d9:4d:e8:38:62:83:a4:3b:65:f1:9c: d1:dc:7c:5e:ab:7a:50:ec:15:6c:cd:2b:36:a5:51: 6b:e5:55:91:1a:9b:46:0c:59:ca:2f:4a:79:ae:9f: 92:00:5e:f2:26:3e:46:f2:34:30:9f:6e:2d:37:00: 9a:53:c5:99:dd:f8:89:a6:2c:3e:96:79:dd:bd:ef: 62:88:c0:5e:7c:47:32:c6:79:a6:05:4f:15:27:91: e8:b3:4f:59:9f:9a:0d:19:d9:56:0e:2e:b7:6e:03: 6b:20:4c:77:b9:a5:aa:e6:42:c9:74:4d:4b:d2:5b: f5:09:4f:8d:18:f2:ac:17:00:8e:30:9f:50:53:4b: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E5:B6:AC:B5:8F:BC:D4:A4:81:1D:97:18:0B:A6:0F:AA:99:C3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a99aabb6-8e99-34c2-9db7-d6869db9145e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 199.1.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e4:39:44:22:c7:c5:3f:57:db:48:99:21:6f:53:96:4a:74: 96:b3:4c:e5:5f:0f:f2:ac:c8:bd:8d:0a:78:48:43:33:88:13: 33:cf:eb:c2:7d:9e:34:57:e8:52:12:a3:49:87:73:a4:a8:57: 9c:8d:7c:eb:07:af:10:b0:cc:53:4e:49:38:ef:56:b5:6e:ff: 5e:e0:58:b3:57:9d:8a:c5:c8:df:8b:59:0e:23:df:d1:c9:26: cc:2c:7a:7a:7d:cd:f2:4b:3c:23:cd:19:48:dd:b5:ab:67:d2: ff:8f:77:48:bf:62:93:21:50:c4:47:8c:06:b6:24:b8:3c:3c: 8f:de:ea:68:1d:cf:82:58:02:48:b5:b6:6e:bd:9f:22:69:05: 57:54:58:dd:eb:16:a6:fe:dd:ae:cf:0f:a0:2f:03:c2:67:e8: f7:6a:0f:82:75:47:f6:7f:ca:e6:4f:3b:6b:df:33:d6:e6:85: e3:e0:c6:7a:c7:cd:b9:fd:3e:3e:1c:88:14:b5:8d:dd:77:e0: 27:2d:e4:4a:c5:f1:e9:8e:54:fa:32:9a:8a:ab:14:ad:a3:e1: 32:41:2f:f4:2a:d4:24:e7:dd:9e:c2:c5:f2:5f:61:f0:03:67: d1:af:84:6a:66:c4:a4:cd:9e:03:1f:c3:30:36:29:94:84:54: 2e:97:93:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+olnYr0p+M2M1fUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUwNjE0NTIxN1oXDTI2MDgwNDE0NTIxN1owLzEtMCsGA1UEAxMk N2Y2MGM5NjUtYjhhZS00ODNmLWFmYWYtN2NmMmY4MTAxNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqELOjnQDSG3m48c0rtadp9gr3qnnSyGM+mS 7kZp0YPfMiMa9iNdJB1q1ZA96AaFQjFowo3bn4DmDE6hOhM2SA932AiHuU04VnZW hlQVmq4hDFIyuEgtgORDxV8XaWYWDYqVVcevfI1ZF8893uZNbaczZHwiingrIx8P 2U3oOGKDpDtl8ZzR3Hxeq3pQ7BVszSs2pVFr5VWRGptGDFnKL0p5rp+SAF7yJj5G 8jQwn24tNwCaU8WZ3fiJpiw+lnndve9iiMBefEcyxnmmBU8VJ5Hos09Zn5oNGdlW Di63bgNrIEx3uaWq5kLJdE1L0lv1CU+NGPKsFwCOMJ9QU0sdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3ltqy1j7zUpIEdlxgLpg+qmcMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTk5YWFiYjYtOGU5OS0z NGMyLTlkYjctZDY4NjlkYjkxNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxwGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHkOUQix8U/V9tImSFvU5ZKdJazTOVfD/KsyL2NCnhIQzOIEzPP68J9 njRX6FISo0mHc6SoV5yNfOsHrxCwzFNOSTjvVrVu/17gWLNXnYrFyN+LWQ4j39HJ Jswsenp9zfJLPCPNGUjdtatn0v+Pd0i/YpMhUMRHjAa2JLg8PI/e6mgdz4JYAki1 tm69nyJpBVdUWN3rFqb+3a7PD6AvA8Jn6PdqD4J1R/Z/yuZPO2vfM9bmhePgxnrH zbn9Pj4ciBS1jd134Cct5ErF8emOVPoymoqrFK2j4TJBL/Qq1CTn3Z7CxfJfYfAD Z9GvhGpmxKTNngMfwzA2KZSEVC6Xk/I= -----END CERTIFICATE-----Generated at Wed May 13 04:08:39 2026 by rpki-client