$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa File: 906f0c7e-1aed-3407-9006-6459ec7f1b20.roa (raw, json) Hash identifier: eEtHzLEYSBz7U8vYvNaRX3RFw2acbGdvkSEypvMHKuw= Subject key identifier: 99:92:EE:80:5C:0E:1B:8A:CC:EE:5F:9E:E8:62:E4:28:70:F4:7D:D1 Certificate issuer: /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Certificate serial: 010D0C9F4328584D9A2021F509796E68DB012C00 Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 394772 IP address blocks: 199.241.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:21:f5:09:79:6e:68:db:01:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=ba97e250-ebb1-4d10-8121-b73efcb2d6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d7:d5:54:1d:7a:2d:7d:02:be:43:7b:d0:fc: 94:8b:00:76:70:48:2f:dd:80:cb:ff:c1:90:0d:d2: e3:89:f7:6f:a7:b1:3d:45:12:eb:a4:4d:98:c0:ee: c2:ad:f9:47:a3:05:95:14:77:59:ca:06:ca:94:bc: 27:5b:38:d8:89:53:a8:fa:c0:56:35:7d:43:d2:7a: 14:be:b0:3c:d8:a3:5c:52:29:82:e9:4a:26:1d:ea: e5:31:da:5c:90:a7:fc:18:45:c9:e2:33:98:be:c9: d0:83:f4:a8:26:ec:f9:e1:c1:54:67:4c:98:ae:36: a6:1c:9e:a5:fb:3f:fe:8c:15:8d:34:a4:b2:a4:1e: 98:8a:f6:f1:31:7c:77:97:7a:55:15:4b:c9:aa:39: c1:59:39:cf:7d:ba:46:0d:d2:60:02:41:47:6b:bc: cb:29:62:de:1c:38:8a:4f:a9:18:c4:72:f0:1b:19: 56:76:03:ff:01:2d:de:4b:0a:64:6a:29:97:20:f3: c9:55:7c:04:d5:2c:a3:92:bc:c7:e1:47:3d:45:39: be:0c:7f:e6:78:63:e7:dc:0b:56:bd:cd:0a:75:ba: fd:d4:f7:50:03:48:83:ac:72:a4:f9:c0:88:69:80: 6e:33:7d:84:42:c2:cb:92:40:fd:1e:4a:88:52:1a: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:92:EE:80:5C:0E:1B:8A:CC:EE:5F:9E:E8:62:E4:28:70:F4:7D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/906f0c7e-1aed-3407-9006-6459ec7f1b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl X509v3 Authority Key Identifier: keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer sbgp-ipAddrBlock: critical IPv4: 199.241.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d0:47:66:17:6a:84:97:06:e7:b1:7a:1c:f4:08:da:cd:83: a3:24:de:c6:33:6d:f2:6f:c6:0c:53:f1:6b:2b:d8:3e:9a:04: 31:60:f8:b8:31:20:ca:c8:33:19:cb:f0:1d:00:a3:f7:f0:58: ad:ee:9a:c5:7d:d9:c5:9e:f0:ab:9e:fe:f8:3a:15:f7:fe:2e: ec:a1:94:d8:6d:0e:06:e3:b2:6a:ae:a6:13:24:94:a9:bf:db: 3c:4c:10:11:a5:b2:be:c2:f9:32:a1:23:59:d5:b2:19:6b:d9: 31:4e:58:42:86:d3:89:8c:0b:e8:5a:25:d1:58:52:83:ff:a5: 7b:6f:ad:78:1a:88:7e:e6:28:3f:2d:19:44:67:52:26:9e:53: 70:19:04:e5:cd:04:b9:df:60:40:a0:63:7d:7d:7c:bc:57:45: 23:48:35:97:32:86:5c:47:48:22:e2:0c:bb:59:a4:f5:7b:81: 13:3b:b8:7c:57:47:0e:6b:5c:15:a3:e7:d9:b9:25:d3:75:38: 44:d3:c6:9a:fb:d8:8e:91:8b:6e:26:b4:4f:c7:ac:f2:c3:5c: cc:f2:e2:dd:09:c4:89:db:b1:62:38:3d:f6:50:9d:f1:82:ef: e5:0c:c5:3a:92:f1:02:64:5d:b9:fa:de:49:44:44:09:2e:37: a7:4a:35:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aICH1CXluaNsBLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl ZjZhMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YmE5N2UyNTAtZWJiMS00ZDEwLTgxMjEtYjczZWZjYjJkNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tfVVB16LX0CvkN70PyUiwB2cEgv3YDL/8GQ DdLjifdvp7E9RRLrpE2YwO7CrflHowWVFHdZygbKlLwnWzjYiVOo+sBWNX1D0noU vrA82KNcUimC6UomHerlMdpckKf8GEXJ4jOYvsnQg/SoJuz54cFUZ0yYrjamHJ6l +z/+jBWNNKSypB6YivbxMXx3l3pVFUvJqjnBWTnPfbpGDdJgAkFHa7zLKWLeHDiK T6kYxHLwGxlWdgP/AS3eSwpkaimXIPPJVXwE1SyjkrzH4Uc9RTm+DH/meGPn3AtW vc0Kdbr91PdQA0iDrHKk+cCIaYBuM32EQsLLkkD9HkqIUhpaCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmS7oBcDhuKzO5fnuhi5Chw9H3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvOTA2ZjBjN2UtMWFlZC0z NDA3LTkwMDYtNjQ1OWVjN2YxYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1 NGZkZGVmNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/GNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArQR2YXaoSXBuexehz0CNrNg6Mk3sYzbfJvxgxT8Wsr2D6aBDFg+Lgx IMrIMxnL8B0Ao/fwWK3umsV92cWe8Kue/vg6Fff+LuyhlNhtDgbjsmquphMklKm/ 2zxMEBGlsr7C+TKhI1nVshlr2TFOWEKG04mMC+haJdFYUoP/pXtvrXgaiH7mKD8t GURnUiaeU3AZBOXNBLnfYECgY319fLxXRSNINZcyhlxHSCLiDLtZpPV7gRM7uHxX Rw5rXBWj59m5JdN1OETTxpr72I6Ri24mtE/HrPLDXMzy4t0JxInbsWI4PfZQnfGC 7+UMxTqS8QJkXbn63klERAkuN6dKNfs= -----END CERTIFICATE-----Generated at Wed May 13 05:34:16 2026 by rpki-client