$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa File: bd8c4790-3fa7-3392-86ba-87e9adece526.roa (raw, json) Hash identifier: DkKsOyYxEb+ImhyTDb7mPy2wjqo1jJDZUYLwnhO1kyo= Subject key identifier: DC:B1:92:25:7D:64:75:79:2F:58:E6:5A:92:E7:16:2C:8B:5F:7B:A9 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D98BAA99D4E6B0717EEED8180 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 199.36.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a9:9d:4e:6b:07:17:ee:ed:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=12ad88a7-823c-4a4a-b87b-31c61eef316c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:ca:a4:a1:e0:5a:56:0e:14:1a:cf:f3:dc: 25:e1:07:13:71:48:25:c5:b0:a5:f7:50:c2:dc:43: b3:c9:26:0b:b0:69:26:2a:19:2d:bc:7f:ca:6d:06: e3:81:89:e1:dc:f8:6e:a3:d3:a1:bc:d3:ad:d2:68: f7:b0:ae:e5:a0:59:a7:f2:07:83:d7:41:be:08:26: 4c:40:3b:c9:0a:f7:3e:37:7d:63:70:bc:6c:e2:74: 8e:0d:ef:91:e5:d3:35:00:56:56:2f:65:43:32:b1: 44:1e:f4:f1:88:34:48:5c:92:aa:f5:a0:e6:ae:77: 8d:d8:e1:02:76:7f:43:4a:44:9b:5a:a8:1d:1c:8d: cf:7b:06:3b:65:82:1c:43:09:3f:3a:93:cd:13:6e: e2:a6:2c:ea:60:5d:f6:46:b4:b2:0d:00:98:a0:26: c9:51:31:df:2b:09:4e:a7:c2:1a:32:8d:e9:50:55: 70:cb:25:70:6d:fc:4d:b9:aa:28:e1:ed:b7:4b:ae: 2b:03:d7:fe:54:13:92:64:ae:e6:f4:a2:58:21:3b: 42:7a:31:47:43:f4:3b:c6:0c:24:5b:21:47:e1:8e: 38:25:47:99:1b:e3:95:e1:84:cb:d2:9d:ab:81:fa: 2d:a0:92:85:cd:ee:35:6a:5f:a1:50:d2:54:82:25: b0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B1:92:25:7D:64:75:79:2F:58:E6:5A:92:E7:16:2C:8B:5F:7B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bd8c4790-3fa7-3392-86ba-87e9adece526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:90:f5:d3:b3:fc:06:05:74:1d:df:23:c0:65:be:ef:30:c2: 9c:d6:32:c8:61:c4:13:6c:9c:23:9e:f6:23:35:5e:d8:00:4a: 14:1c:dd:ab:11:9a:cc:77:57:b4:87:6b:1e:3d:2e:05:9b:f2: fa:d4:3c:f9:ab:83:e5:e6:9b:47:71:a4:fe:e7:76:20:e3:1d: a4:3b:39:04:69:96:2f:5a:44:e0:52:f2:40:07:f3:ad:dc:0b: fd:f5:d0:de:34:ff:8e:0f:9c:e6:96:fa:fc:2c:bb:b6:36:3b: 76:dc:ee:8a:b2:36:bb:17:4f:4a:45:55:84:56:17:1d:62:2d: d7:50:45:c2:93:b8:6d:87:b9:c4:de:27:91:92:16:a5:ad:c5: e5:c1:a5:4b:cc:15:c1:5b:b4:1b:6f:9c:e8:04:16:80:16:7a: 1a:e6:67:ac:03:3c:7e:60:dd:92:00:af:38:6c:2d:33:20:15: 84:89:cc:fe:73:7e:03:13:91:97:7d:9c:21:41:5f:f7:7f:b0: 66:f9:ba:61:ef:dc:9c:29:43:a1:e4:5a:55:b4:19:da:2e:49: 9e:b2:6a:ad:3f:e3:d8:b7:db:32:1e:e2:9c:38:b2:74:93:49: 52:a6:c0:8c:d7:f2:0b:4d:3d:7c:4b:db:a3:e5:78:aa:61:11: 90:64:46:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqmdTmsHF+7tgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MTJhZDg4YTctODIzYy00YTRhLWI4N2ItMzFjNjFlZWYzMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzbKpKHgWlYOFBrP89wl4QcTcUglxbCl91DC 3EOzySYLsGkmKhktvH/KbQbjgYnh3Phuo9OhvNOt0mj3sK7loFmn8geD10G+CCZM QDvJCvc+N31jcLxs4nSODe+R5dM1AFZWL2VDMrFEHvTxiDRIXJKq9aDmrneN2OEC dn9DSkSbWqgdHI3PewY7ZYIcQwk/OpPNE27ipizqYF32RrSyDQCYoCbJUTHfKwlO p8IaMo3pUFVwyyVwbfxNuaoo4e23S64rA9f+VBOSZK7m9KJYITtCejFHQ/Q7xgwk WyFH4Y44JUeZG+OV4YTL0p2rgfotoJKFze41al+hUNJUgiWw5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyxkiV9ZHV5L1jmWpLnFiyLX3upMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmQ4YzQ3OTAtM2ZhNy0z MzkyLTg2YmEtODdlOWFkZWNlNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaQ9dOz/AYFdB3fI8Blvu8wwpzWMshhxBNsnCOe9iM1XtgAShQc3asR msx3V7SHax49LgWb8vrUPPmrg+Xmm0dxpP7ndiDjHaQ7OQRpli9aROBS8kAH863c C/310N40/44PnOaW+vwsu7Y2O3bc7oqyNrsXT0pFVYRWFx1iLddQRcKTuG2HucTe J5GSFqWtxeXBpUvMFcFbtBtvnOgEFoAWehrmZ6wDPH5g3ZIArzhsLTMgFYSJzP5z fgMTkZd9nCFBX/d/sGb5umHv3JwpQ6HkWlW0GdouSZ6yaq0/49i32zIe4pw4snST SVKmwIzX8gtNPXxL26PleKphEZBkRu4= -----END CERTIFICATE-----Generated at Wed May 13 15:18:45 2026 by rpki-client