$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa File: a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa (raw, json) Hash identifier: 51OsBJAZX6UmtT2IsjjebiRPI54Z1Ok74sX+AypXggY= Subject key identifier: 94:DB:4E:61:D1:88:C6:7C:CB:10:7C:98:D9:31:D0:4C:E2:7B:60:6F Certificate issuer: /CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Certificate serial: 010D0C9F4328584DCC6051DC3E4E2C0F8B854900 Authority key identifier: E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 11370 IP address blocks: 199.201.225.0/24 maxlen: 24 2602:fa50::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:51:dc:3e:4e:2c:0f:8b:85:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=21fdc4b6-f2e2-4ff5-aad1-5faaeab5c930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:a6:58:c9:10:81:5b:1d:e2:9d:b2:57:ea: 01:7d:1f:4e:fc:d5:c9:42:f8:db:64:08:6e:bc:e9: 6e:ae:b0:71:6f:e4:84:49:f8:e1:45:c2:53:91:a8: a1:9e:ca:60:0e:5c:be:72:af:dc:a9:88:32:b5:98: 85:b6:d4:c9:70:69:10:9d:7d:79:93:54:32:10:d3: 43:8e:a7:d8:51:7c:10:9a:4d:27:a9:ca:6d:fb:46: 60:13:c4:d4:be:d0:ab:6e:4e:55:c9:88:ff:d3:f4: 14:4a:30:19:87:6c:f9:cd:ff:81:b8:73:f9:7a:bd: 80:7a:72:8a:93:41:29:1a:ec:b0:4c:b0:05:2a:b2: ff:66:3d:c0:5c:55:25:8c:86:3c:e0:82:52:c6:df: af:9b:d3:be:27:93:f6:45:0a:cc:73:1d:83:dd:c4: ae:3b:61:b9:2d:9a:b9:78:55:d2:34:a9:20:ee:2a: dc:7c:b1:30:18:52:17:35:03:e2:f0:5d:48:fc:61: 09:24:3e:00:35:55:bd:ae:60:f5:56:6d:86:1f:91: dd:b8:a9:35:37:88:9c:80:bc:16:af:42:fe:8b:af: 67:25:62:91:92:d4:ef:51:e1:78:f8:dc:1a:81:53: 78:d8:2b:af:6a:90:62:cb:3d:33:c0:fa:87:81:57: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:4E:61:D1:88:C6:7C:CB:10:7C:98:D9:31:D0:4C:E2:7B:60:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl X509v3 Authority Key Identifier: keyid:E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer sbgp-ipAddrBlock: critical IPv4: 199.201.225.0/24 IPv6: 2602:fa50::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2c:65:ce:3f:44:61:8a:08:5e:75:77:6b:38:9f:1d:10:f8: b1:94:b2:25:35:0c:8d:22:f6:68:b5:7b:0a:ba:9b:8d:31:90: 68:bb:0b:c2:51:71:ef:b0:f3:e2:e0:a9:fa:ed:34:d0:71:66: 6a:a6:e3:64:d9:05:4c:1f:6f:a9:9f:3d:92:5f:10:cb:fb:37: 96:ef:c4:7d:f3:90:8d:77:57:4d:79:a0:3e:15:e2:06:38:ec: 52:7d:66:09:27:77:b0:b0:f0:51:7d:15:35:73:ce:11:41:94: ff:8b:b2:5f:23:44:db:c1:8f:7c:88:b1:35:e3:f8:21:04:fc: b8:aa:76:fc:ca:df:52:ed:9e:54:ad:63:bc:26:4a:75:d7:d8: 4b:72:bd:d6:7e:bc:e6:b8:f1:b5:95:17:08:f2:98:93:34:e3: f3:c7:a9:32:85:04:2e:b0:f4:f2:93:85:3c:02:0c:70:13:8d: 5e:3e:1b:6b:bf:b3:e7:e5:41:22:90:d2:e5:56:7a:ee:e1:3a: f3:5c:bc:9a:fb:88:4c:dd:ba:03:e6:c6:de:98:ad:db:a7:db: 4c:5c:2c:78:1c:6b:d4:ee:65:b2:2e:04:e1:25:94:fe:d5:64: 0b:52:20:ce:85:31:85:dd:de:f7:95:46:a1:62:ec:5c:61:8f: 22:11:1b:45 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3MYFHcPk4sD4uFSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZWY3NDAtODU5MS00MWU1LTg5ZDAtOWIwMjY2ZDNm Y2Y3MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk MjFmZGM0YjYtZjJlMi00ZmY1LWFhZDEtNWZhYWVhYjVjOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4emWMkQgVsd4p2yV+oBfR9O/NXJQvjbZAhu vOlurrBxb+SESfjhRcJTkaihnspgDly+cq/cqYgytZiFttTJcGkQnX15k1QyENND jqfYUXwQmk0nqcpt+0ZgE8TUvtCrbk5VyYj/0/QUSjAZh2z5zf+BuHP5er2AenKK k0EpGuywTLAFKrL/Zj3AXFUljIY84IJSxt+vm9O+J5P2RQrMcx2D3cSuO2G5LZq5 eFXSNKkg7ircfLEwGFIXNQPi8F1I/GEJJD4ANVW9rmD1Vm2GH5HduKk1N4icgLwW r0L+i69nJWKRktTvUeF4+NwagVN42CuvapBiyz0zwPqHgVcPrwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJTbTmHRiMZ8yxB8mNkx0Ezie2BvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBl Zjc0MC04NTkxLTQxZTUtODlkMC05YjAyNjZkM2ZjZjcvYTE5ZWNiNGMtMWRiZi0z NmUzLWExOGEtYmRjMzVkMTI1NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwZWY3NDAtODU5MS00MWU1LTg5 ZDAtOWIwMjY2ZDNmY2Y3LzA0MGVmNzQwLTg1OTEtNDFlNS04OWQwLTliMDI2NmQz ZmNmNy5jcmwwHwYDVR0jBBgwFoAU5tlFAqSd+xLR9T9J8Vll47R/gUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBlZjc0MC04NTkxLTQxZTUtODlkMC05YjAy NjZkM2ZjZjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx8nhMA4E AgACMAgDBgAmAvpQADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMLGXOP0RhighedXdrOJ8dEPixlLIlNQyN IvZotXsKupuNMZBouwvCUXHvsPPi4Kn67TTQcWZqpuNk2QVMH2+pnz2SXxDL+zeW 78R985CNd1dNeaA+FeIGOOxSfWYJJ3ewsPBRfRU1c84RQZT/i7JfI0TbwY98iLE1 4/ghBPy4qnb8yt9S7Z5UrWO8Jkp119hLcr3WfrzmuPG1lRcI8piTNOPzx6kyhQQu sPTyk4U8AgxwE41ePhtrv7Pn5UEikNLlVnru4TrzXLya+4hM3boD5sbemK3bp9tM XCx4HGvU7mWyLgThJZT+1WQLUiDOhTGF3d73lUahYuxcYY8iERtF -----END CERTIFICATE-----Generated at Wed May 13 17:02:26 2026 by rpki-client