$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa File: 04baf0fa-6a1d-3766-a496-ca289440ff8c.roa (raw, json) Hash identifier: Ax5xAH5R7MCZ4ixuTFjN702nEj0YNdpqrWkgfV14v4M= Subject key identifier: 86:F3:E1:AC:F3:12:AF:66:B1:26:AE:68:3E:F8:30:47:76:42:4C:08 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584DBE6B1A838BB7A69D73952F80 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 29900 IP address blocks: 162.218.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:1a:83:8b:b7:a6:9d:73:95:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=2e7dc6b3-8762-4647-9978-c8535efffd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:4f:71:53:51:54:b9:c7:49:f2:f0:59:6a: 88:8e:b1:af:46:a7:c4:68:3c:6e:39:b6:3c:d0:11: 3d:e2:88:65:19:31:81:4d:10:37:60:22:2c:88:f5: 72:d8:89:6f:42:29:4f:26:ed:b7:d0:3f:f1:83:15: a7:d6:fc:67:32:d8:ad:8b:a5:67:b8:f9:7b:ff:d9: 3a:76:55:e1:65:8c:3e:7f:6e:39:cd:5d:5d:5c:55: 49:09:80:f9:52:3a:3b:53:22:08:c3:54:98:f7:c6: ef:6e:4a:ea:d1:74:09:48:7b:64:91:5c:55:22:64: 73:ce:f8:d1:b2:33:51:15:10:13:db:f5:d3:ad:a3: c4:0c:36:8b:ef:b4:c3:7b:c5:4c:c5:0a:d0:fb:15: 8e:89:b0:b6:18:eb:9a:89:a7:fb:ee:41:96:88:eb: 6b:fd:65:93:a0:62:2a:97:70:8c:a7:43:b5:80:3c: 86:06:98:05:eb:0a:73:9d:7a:e0:32:a7:a6:9f:2a: c2:e3:72:51:13:8c:ce:38:ab:35:d1:28:6f:8d:54: 4a:c1:11:ea:39:0c:db:bd:87:96:69:d6:07:bc:4a: fb:42:f1:e9:42:a7:53:1b:fe:b5:03:1b:2f:36:39: bb:95:55:6c:04:86:2d:b1:22:6c:fd:21:e7:e2:27: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F3:E1:AC:F3:12:AF:66:B1:26:AE:68:3E:F8:30:47:76:42:4C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:26:c4:bb:8d:0d:37:08:05:6a:6a:da:e3:39:2f:96:e0:e9: 1f:91:06:78:eb:e8:fc:24:4b:78:40:8b:19:22:a0:67:f8:da: 2c:cf:52:93:c0:59:26:fd:ac:43:8d:26:a2:2e:cc:16:c2:eb: a8:60:d0:5c:29:4c:e7:69:e4:f5:f3:a5:5c:b7:38:eb:ae:cc: f7:ff:3c:c9:6f:e6:00:e1:f7:14:e3:99:0a:10:c3:94:f5:72: 75:fc:64:1a:3c:62:21:a6:ff:e3:79:7b:35:7a:12:59:be:2c: e0:b7:87:8c:47:70:1e:b3:8a:3a:e4:35:f1:76:88:cd:09:bb: 14:8e:91:19:64:6c:16:0e:95:6c:6a:08:37:92:fb:ba:7b:60: 8f:f6:ee:f5:fc:08:fd:0b:35:9c:22:17:31:6b:b2:1e:01:26: e8:95:0e:34:7c:b7:6e:92:d1:ab:e7:d7:74:a2:67:bc:ff:38: bc:03:96:eb:51:4d:d4:57:37:e0:ce:b3:df:82:e8:a4:27:5c: e8:e8:dd:ca:ae:3c:0c:b1:95:05:87:c8:26:94:4f:0e:cd:0d: e9:74:46:ae:21:aa:86:79:64:a1:49:79:6d:06:ad:11:65:8b: 4f:77:dc:8f:d6:0d:9c:fd:13:09:52:5c:ce:58:25:4e:2e:92: ed:85:11:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+axqDi7emnXOVL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk MmU3ZGM2YjMtODc2Mi00NjQ3LTk5NzgtYzg1MzVlZmZmZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWVPcVNRVLnHSfLwWWqIjrGvRqfEaDxuObY8 0BE94ohlGTGBTRA3YCIsiPVy2IlvQilPJu230D/xgxWn1vxnMtiti6VnuPl7/9k6 dlXhZYw+f245zV1dXFVJCYD5Ujo7UyIIw1SY98bvbkrq0XQJSHtkkVxVImRzzvjR sjNRFRAT2/XTraPEDDaL77TDe8VMxQrQ+xWOibC2GOuaiaf77kGWiOtr/WWToGIq l3CMp0O1gDyGBpgF6wpznXrgMqemnyrC43JRE4zOOKs10ShvjVRKwRHqOQzbvYeW adYHvEr7QvHpQqdTG/61AxsvNjm7lVVsBIYtsSJs/SHn4idlIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbz4azzEq9msSauaD74MEd2QkwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvMDRiYWYwZmEtNmExZC0z NzY2LWE0OTYtY2EyODk0NDBmZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAomxLuNDTcIBWpq2uM5L5bg6R+RBnjr6PwkS3hAixkioGf42izPUpPA WSb9rEONJqIuzBbC66hg0FwpTOdp5PXzpVy3OOuuzPf/PMlv5gDh9xTjmQoQw5T1 cnX8ZBo8YiGm/+N5ezV6Elm+LOC3h4xHcB6zijrkNfF2iM0JuxSOkRlkbBYOlWxq CDeS+7p7YI/27vX8CP0LNZwiFzFrsh4BJuiVDjR8t26S0avn13SiZ7z/OLwDlutR TdRXN+DOs9+C6KQnXOjo3cquPAyxlQWHyCaUTw7NDel0Rq4hqoZ5ZKFJeW0GrRFl i0933I/WDZz9EwlSXM5YJU4uku2FEXE= -----END CERTIFICATE-----Generated at Wed May 13 04:32:45 2026 by rpki-client