$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa File: 2b0ee5da-394f-3856-9213-54a1585985fc.roa (raw, json) Hash identifier: y5iMHly1yTIpnszJNXnstOCASM96fos7qSZ5Y6odA08= Subject key identifier: 42:A8:38:34:90:C6:54:88:49:E0:D7:B5:9A:F5:D1:2B:73:D7:04:96 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584D9E500341BDCA792C4BAA8A80 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14500 IP address blocks: 199.182.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:03:41:bd:ca:79:2c:4b:aa:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=aa1285d5-3fe7-48f8-a1b9-86da8f4a6037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:fe:d5:d0:79:50:77:db:e4:34:02:60:14: e6:e6:c6:52:f5:0c:77:91:62:56:84:64:55:e1:6c: ab:90:1a:f5:45:a8:c1:67:54:4f:85:66:7f:9e:72: ce:fa:47:05:40:10:a0:09:7d:9e:2d:7c:f0:f3:fa: cd:6d:0e:fc:04:46:fe:99:2c:65:51:c7:d1:4a:7a: e4:4d:35:7a:59:41:9b:15:03:2d:ae:81:15:e4:2d: ff:50:83:0d:2a:d8:9d:56:14:93:4c:70:3c:5e:98: 49:c5:fe:33:af:76:39:88:5b:9f:8b:dc:03:80:f6: c0:32:ff:25:30:25:c5:ed:4c:43:47:62:3d:ac:34: 0d:8b:34:d7:40:41:2d:39:be:92:5d:68:8e:1f:07: 41:68:1a:ab:c6:b0:52:b0:f6:f8:2e:89:35:23:22: 99:a2:0d:f1:12:80:79:18:c4:6f:c8:fd:6e:36:7b: 7c:9e:2c:c2:fe:e2:c5:98:1d:7b:62:24:91:92:64: 12:53:79:81:b3:23:71:33:f8:29:d3:9d:78:41:1b: 76:83:80:03:fc:71:61:69:db:eb:63:92:8e:00:fd: 29:f2:7a:68:42:c2:ac:1f:d1:8e:a1:ea:92:37:f7: 43:c4:b4:7f:a1:eb:ce:74:7a:a1:38:f7:a0:bf:a8: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:38:34:90:C6:54:88:49:E0:D7:B5:9A:F5:D1:2B:73:D7:04:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2b0ee5da-394f-3856-9213-54a1585985fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 199.182.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:57:53:69:38:f4:4a:ab:08:e8:df:89:be:04:96:61:ca:74: 50:5d:27:4b:82:4c:81:d1:cd:40:1e:47:e2:a3:47:0c:2a:68: c9:70:13:25:86:19:d0:32:8b:9a:81:52:98:69:cd:5b:b9:8b: b5:c3:41:8a:d8:15:cd:fd:2b:5a:5e:62:b8:2e:01:d0:db:e0: 81:7e:25:ff:9e:b6:d0:b1:3b:79:03:ff:4d:67:25:5c:0c:72: 08:3c:fa:c9:66:ef:71:c4:11:7d:7d:24:63:c0:50:04:71:5a: 34:f5:d4:64:c1:a8:91:dd:01:eb:79:c0:70:43:cb:8a:07:c2: 70:a5:0f:8d:15:15:e1:54:ac:c7:e5:95:1e:5c:54:c7:56:fd: 98:40:5d:0c:5f:d4:2d:bb:c2:b9:3a:35:a1:b5:dc:71:98:37: a9:26:c4:5a:47:a1:de:e7:6e:ff:43:72:c2:d4:9a:c4:98:8b: a2:7d:a7:a6:d9:b1:b9:42:58:92:d0:c8:f5:34:dc:61:4e:ca: ec:4b:e8:b0:87:9c:70:d3:2a:fa:eb:4b:4e:d7:5b:f4:1c:2d: c1:57:56:09:17:1e:6d:bc:75:54:c3:bf:a5:1f:0a:42:3f:1b: bc:53:4f:34:20:ae:ad:43:28:b2:02:38:a6:c8:dc:e8:c5:2c: 26:e6:18:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUANBvcp5LEuqioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YWExMjg1ZDUtM2ZlNy00OGY4LWExYjktODZkYThmNGE2MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6L+1dB5UHfb5DQCYBTm5sZS9Qx3kWJWhGRV 4WyrkBr1RajBZ1RPhWZ/nnLO+kcFQBCgCX2eLXzw8/rNbQ78BEb+mSxlUcfRSnrk TTV6WUGbFQMtroEV5C3/UIMNKtidVhSTTHA8XphJxf4zr3Y5iFufi9wDgPbAMv8l MCXF7UxDR2I9rDQNizTXQEEtOb6SXWiOHwdBaBqrxrBSsPb4Lok1IyKZog3xEoB5 GMRvyP1uNnt8nizC/uLFmB17YiSRkmQSU3mBsyNxM/gp0514QRt2g4AD/HFhadvr Y5KOAP0p8npoQsKsH9GOoeqSN/dDxLR/oevOdHqhOPegv6juXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKoODSQxlSISeDXtZr10Stz1wSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMmIwZWU1ZGEtMzk0Zi0z ODU2LTkyMTMtNTRhMTU4NTk4NWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7Z0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBXU2k49EqrCOjfib4ElmHKdFBdJ0uCTIHRzUAeR+KjRwwqaMlwEyWG GdAyi5qBUphpzVu5i7XDQYrYFc39K1peYrguAdDb4IF+Jf+ettCxO3kD/01nJVwM cgg8+slm73HEEX19JGPAUARxWjT11GTBqJHdAet5wHBDy4oHwnClD40VFeFUrMfl lR5cVMdW/ZhAXQxf1C27wrk6NaG13HGYN6kmxFpHod7nbv9DcsLUmsSYi6J9p6bZ sblCWJLQyPU03GFOyuxL6LCHnHDTKvrrS07XW/QcLcFXVgkXHm28dVTDv6UfCkI/ G7xTTzQgrq1DKLICOKbI3OjFLCbmGFc= -----END CERTIFICATE-----Generated at Wed May 13 14:50:51 2026 by rpki-client