$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json) Hash identifier: HoWxiUP9NMugmf0grDEcBSVKnxDU14nz9XDVOnZZZ9k= Subject key identifier: B1:37:2D:36:78:9F:B5:E4:C7:82:EF:B4:A9:73:A0:85:E5:35:58:AE Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584DCDC59E4D234971D923CC8080 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 6643 IP address blocks: 199.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:9e:4d:23:49:71:d9:23:cc:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=88b1a870-7616-4253-adb5-ccc704d6ab04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1f:56:b8:75:9f:bd:72:da:6d:5a:63:18:2a: f0:e9:d9:b9:05:fd:30:d5:f7:de:a8:9f:7a:1a:f3: d0:04:fb:ba:c0:e4:86:6f:23:77:e5:3f:78:83:66: e6:92:58:ca:9a:66:0b:77:2b:fa:3d:3c:c1:62:96: cf:2b:e0:17:60:68:c7:16:8c:aa:3b:6c:2d:5b:5b: 12:75:cb:17:dc:e8:ff:0a:72:cc:e6:84:03:93:8e: 36:32:61:61:1f:61:9f:26:6f:1e:c4:5e:13:8e:be: cd:c2:87:1d:15:90:f7:69:b0:94:39:3e:a7:e7:23: 19:6e:41:2a:1b:78:41:6a:94:51:66:7e:fb:3c:6e: 8a:6a:8f:24:07:f7:b0:ca:70:ca:65:ac:4b:f8:d5: 61:c4:4d:fb:09:76:cc:58:70:50:c3:54:73:18:f8: 4e:78:a0:ac:c2:d7:61:a0:ed:5e:69:ad:65:f1:58: 21:95:bc:95:90:1d:94:c0:e3:34:cf:d9:e2:40:22: 28:64:1d:03:b8:a6:2b:3c:37:f4:2c:25:55:f6:3f: e4:7b:79:fa:dd:25:e2:28:e1:57:e3:61:01:34:a7: 43:b5:78:b1:8e:1f:91:6b:78:bc:1d:69:4f:41:0f: 6e:60:fb:57:d4:80:77:28:9a:8e:e4:de:dd:fc:e1: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:2D:36:78:9F:B5:E4:C7:82:EF:B4:A9:73:A0:85:E5:35:58:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9b:c9:df:5c:bb:37:d2:9a:e1:59:df:24:4f:15:fb:d7:3f: 0c:f7:f0:e3:70:ac:2f:2a:2c:75:14:3d:b5:d4:c7:1c:8b:b0: cb:b0:d5:b1:1b:33:48:de:85:40:37:43:e0:dc:46:6e:ef:ce: b6:cd:ed:9f:1a:d4:d5:56:a4:e4:3d:cb:8c:cc:73:f1:9c:c3: 6b:50:99:87:90:a3:3b:7e:5d:e1:8a:79:e7:d4:4a:1b:46:8a: 5c:29:ab:05:21:27:14:5d:b1:b8:9c:5f:8d:eb:52:14:24:4c: 1f:b3:d6:10:47:df:19:9c:40:e6:00:87:83:38:23:5a:c9:23: c0:06:55:5e:1c:3f:be:f4:43:fa:fe:cf:3a:b2:de:32:ba:e6: 84:1a:f8:43:d6:48:ad:bd:46:a8:bb:af:e4:73:0a:e0:80:b2: 8f:3e:55:97:e8:f2:c4:0e:eb:44:89:52:3a:35:25:b9:06:1a: b4:95:c1:f6:29:fe:0c:b1:45:82:f6:16:f3:7b:b9:7c:c1:b3: 88:9b:94:66:44:5f:fb:d7:1a:4e:2c:29:4a:d6:bd:9b:7a:99: 0c:e7:9f:e9:66:1e:cc:7e:d6:bc:3e:4c:35:3d:da:1e:b8:0e: fc:83:f5:74:b7:6e:5e:1b:a1:68:68:a4:f4:78:e2:20:f0:bf: a4:e8:06:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxZ5NI0lx2SPMgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk ODhiMWE4NzAtNzYxNi00MjUzLWFkYjUtY2NjNzA0ZDZhYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h9WuHWfvXLabVpjGCrw6dm5Bf0w1ffeqJ96 GvPQBPu6wOSGbyN35T94g2bmkljKmmYLdyv6PTzBYpbPK+AXYGjHFoyqO2wtW1sS dcsX3Oj/CnLM5oQDk442MmFhH2GfJm8exF4Tjr7NwocdFZD3abCUOT6n5yMZbkEq G3hBapRRZn77PG6Kao8kB/ewynDKZaxL+NVhxE37CXbMWHBQw1RzGPhOeKCswtdh oO1eaa1l8VghlbyVkB2UwOM0z9niQCIoZB0DuKYrPDf0LCVV9j/ke3n63SXiKOFX 42EBNKdDtXixjh+Ra3i8HWlPQQ9uYPtX1IB3KJqO5N7d/OGjYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE3LTZ4n7Xkx4LvtKlzoIXlNViuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDg2YjM4OTYtMjg0MS0z OTFhLWJlYmUtMDM5ODAzZGI1ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqbyd9cuzfSmuFZ3yRPFfvXPwz38ONwrC8qLHUUPbXUxxyLsMuw1bEb M0jehUA3Q+DcRm7vzrbN7Z8a1NVWpOQ9y4zMc/Gcw2tQmYeQozt+XeGKeefUShtG ilwpqwUhJxRdsbicX43rUhQkTB+z1hBH3xmcQOYAh4M4I1rJI8AGVV4cP770Q/r+ zzqy3jK65oQa+EPWSK29Rqi7r+RzCuCAso8+VZfo8sQO60SJUjo1JbkGGrSVwfYp /gyxRYL2FvN7uXzBs4iblGZEX/vXGk4sKUrWvZt6mQznn+lmHsx+1rw+TDU92h64 DvyD9XS3bl4boWhopPR44iDwv6ToBlE= -----END CERTIFICATE-----Generated at Wed May 13 14:45:31 2026 by rpki-client