$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa File: df51f702-a91e-30cf-988e-dca1dd4d9a92.roa (raw, json) Hash identifier: 6nudNusaQH5V0D+F5+pukfIZGZ08a4aoeR6Fq+xZ+so= Subject key identifier: A7:36:E9:25:2D:7E:DE:1F:D0:B1:02:6D:82:7B:78:E7:BB:5A:98:A3 Certificate issuer: /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Certificate serial: 010D0C9F4328584D9E502860C1FCB699B5AB1800 Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 199.7.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:28:60:c1:fc:b6:99:b5:ab:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=99482611-f556-4970-95b6-70c33476eac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:49:9a:61:a0:f5:1f:a0:0e:76:78:1c:9e: f6:7c:f9:cb:dc:0d:22:8b:01:2d:90:f6:30:87:2c: d8:81:b7:6f:fb:a9:72:dd:5a:b9:7d:20:96:92:f7: 30:fb:42:cd:35:d9:a5:0e:29:b7:a1:f4:f7:8b:ec: 72:8d:2a:6f:67:2b:f4:98:17:98:50:19:06:ca:ca: e4:00:86:10:30:b6:9d:40:93:7a:f7:c1:5f:a8:d2: 4b:35:77:7d:02:61:e6:8b:bd:85:3b:fc:28:47:fc: 8b:f6:c7:5d:58:1e:48:71:a8:4c:23:e9:4d:ec:ac: 15:62:a8:3a:c6:70:97:0e:b2:14:b7:af:7a:92:91: d3:84:59:77:f1:bc:11:c2:fa:5d:e7:6e:7d:96:9c: b4:f6:b4:e2:fc:8a:ad:02:f5:55:e5:ef:30:d4:52: 1c:f8:c0:02:50:42:75:ed:b6:5e:31:7c:d2:86:11: 38:7c:12:49:82:de:5e:df:84:f8:65:b5:b4:e5:96: 02:9d:ce:08:0b:b7:33:89:55:0b:78:48:72:d0:b6: 3b:e5:eb:09:d9:f6:cd:af:e2:1f:48:bd:0f:6b:f9: 38:47:99:10:45:62:65:fb:e0:45:75:fa:70:a7:99: 95:0e:05:7b:b8:e5:49:5b:6e:59:97:a4:76:c1:83: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:36:E9:25:2D:7E:DE:1F:D0:B1:02:6D:82:7B:78:E7:BB:5A:98:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/df51f702-a91e-30cf-988e-dca1dd4d9a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl X509v3 Authority Key Identifier: keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer sbgp-ipAddrBlock: critical IPv4: 199.7.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e8:d2:09:5e:0c:cb:2a:f6:2b:d2:00:99:c6:00:0a:2a:21: 90:36:8e:42:52:19:44:a4:2a:1f:3b:e3:3f:68:27:e0:41:95: 5c:9f:7e:b0:65:69:7e:a4:0c:34:0f:2d:66:95:16:93:ba:3b: 60:98:33:53:b1:f4:f0:81:5a:b8:7a:75:95:88:41:a4:eb:3f: 19:40:7a:8d:a4:44:14:65:8c:48:3e:da:43:55:c0:0a:3f:73: 30:f4:81:3b:76:ad:54:93:04:65:15:ec:bf:79:5d:e2:55:8f: 55:da:8c:39:8f:00:bd:c1:b0:d1:ba:68:49:8d:5b:5d:b3:5f: f3:01:41:0f:5e:61:6e:64:a0:6b:25:08:27:86:b5:91:a4:86: 33:64:6a:4e:a7:77:b1:c7:25:f0:e7:cc:da:de:56:c2:bf:8b: 43:d8:91:79:91:8a:f5:62:c2:f7:9c:41:88:fa:20:a8:08:e6: f1:44:9d:ab:56:27:b5:5d:98:c1:a2:12:4c:63:e1:8b:9e:bf: 9f:c9:1b:fb:51:f3:e1:a8:a0:a9:18:39:43:18:1b:83:01:87: 6d:06:68:b7:0b:84:f9:f2:52:97:aa:0e:b4:25:29:46:27:c7: 61:86:36:23:c3:8b:60:bb:76:f1:c2:d0:fc:4f:e1:34:3f:42: 92:53:29:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUChgwfy2mbWrGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk NWYzMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk OTk0ODI2MTEtZjU1Ni00OTcwLTk1YjYtNzBjMzM0NzZlYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2idJmmGg9R+gDnZ4HJ72fPnL3A0iiwEtkPYw hyzYgbdv+6ly3Vq5fSCWkvcw+0LNNdmlDim3ofT3i+xyjSpvZyv0mBeYUBkGysrk AIYQMLadQJN698FfqNJLNXd9AmHmi72FO/woR/yL9sddWB5IcahMI+lN7KwVYqg6 xnCXDrIUt696kpHThFl38bwRwvpd5259lpy09rTi/IqtAvVV5e8w1FIc+MACUEJ1 7bZeMXzShhE4fBJJgt5e34T4ZbW05ZYCnc4IC7cziVULeEhy0LY75esJ2fbNr+If SL0Pa/k4R5kQRWJl++BFdfpwp5mVDgV7uOVJW25Zl6R2wYN/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc26SUtft4f0LECbYJ7eOe7WpijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvZGY1MWY3MDItYTkxZS0z MGNmLTk4OGUtZGNhMWRkNGQ5YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1 NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbo0gleDMsq9ivSAJnGAAoqIZA2jkJSGUSkKh874z9oJ+BBlVyffrBl aX6kDDQPLWaVFpO6O2CYM1Ox9PCBWrh6dZWIQaTrPxlAeo2kRBRljEg+2kNVwAo/ czD0gTt2rVSTBGUV7L95XeJVj1XajDmPAL3BsNG6aEmNW12zX/MBQQ9eYW5koGsl CCeGtZGkhjNkak6nd7HHJfDnzNreVsK/i0PYkXmRivViwvecQYj6IKgI5vFEnatW J7VdmMGiEkxj4Yuev5/JG/tR8+GooKkYOUMYG4MBh20GaLcLhPnyUpeqDrQlKUYn x2GGNiPDi2C7dvHC0PxP4TQ/QpJTKT0= -----END CERTIFICATE-----Generated at Wed May 13 01:39:57 2026 by rpki-client