$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0559ee48-7615-344c-ba57-83ddfa576e1e.roa File: 0559ee48-7615-344c-ba57-83ddfa576e1e.roa (raw, json) Hash identifier: nKdZaS8c2sQx4Kp/pq/NdjS1VMgdZ89GiyJ3Ej5CF28= Subject key identifier: C1:A8:FE:36:54:35:24:C4:1A:1A:4B:A0:30:3F:0F:D9:E2:53:2B:5D Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584D4D5A404FF9F812C859E8F8C0 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0559ee48-7615-344c-ba57-83ddfa576e1e.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 36273 IP address blocks: 199.119.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:40:4f:f9:f8:12:c8:59:e8:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=af3118c6-e358-43d8-b386-c2cc159a02fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:b7:89:4e:72:27:f3:cc:8a:55:ce:a4:a8: de:b4:68:37:e6:7a:7b:00:60:eb:e5:18:e3:0b:0c: a4:b4:75:d9:b9:09:72:34:8f:53:c5:5f:c9:bf:75: a6:4d:37:e5:76:7f:b1:e3:91:4f:10:93:6f:70:17: 96:4a:f9:ba:8b:0c:7d:10:af:b7:85:cc:7f:e2:5b: 4f:d1:1b:60:1e:90:fb:1b:e9:01:ef:be:46:3b:ef: e0:84:d2:5b:e6:14:ab:8e:44:a1:c2:56:ec:de:34: 52:ba:47:65:45:cd:1e:af:3f:5f:fc:28:34:70:8d: c5:ef:3e:81:50:75:88:38:fd:13:cb:84:89:ae:94: b8:da:52:bd:57:c4:21:ef:21:04:ba:f6:e6:4b:60: 11:ba:41:2c:bc:ab:cd:c5:0f:de:22:e3:05:fd:6d: 0c:d1:66:44:e4:12:f5:87:c1:3d:c7:71:54:cf:e4: d5:e8:ed:7b:07:ec:23:60:93:82:3a:bc:6b:01:73: c0:c8:95:b2:13:10:e9:56:ac:f8:88:4f:58:06:56: e9:99:dc:3c:72:d8:f2:c8:8b:20:fa:45:5c:ef:1a: 2b:c8:4e:6a:62:e7:0d:4d:56:6d:ab:49:3c:d5:c5: 51:7e:de:87:9b:ca:b7:86:36:89:85:88:a7:95:9b: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:FE:36:54:35:24:C4:1A:1A:4B:A0:30:3F:0F:D9:E2:53:2B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0559ee48-7615-344c-ba57-83ddfa576e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ac:74:1e:b1:0e:07:55:d5:0f:3f:ec:c6:4a:56:fd:de:61: bb:3e:e1:b9:1c:ac:67:38:29:6d:8a:30:67:27:dc:5d:96:e2: 87:f1:41:60:3b:30:e8:96:5f:d9:ef:64:f5:3a:19:06:b9:4c: 57:1e:5a:19:5c:ec:cf:68:6c:a9:dd:e9:1a:98:29:5f:2d:a4: 2c:2d:4b:ff:36:da:d4:16:16:9c:7a:a3:a5:d4:c8:16:ca:6d: 85:3c:be:11:d3:f5:c7:15:74:9e:21:d2:19:5d:8b:4d:89:05: 47:b1:c0:5a:2d:42:82:b3:55:00:0b:a9:12:ee:71:d3:45:69: f8:ad:56:98:14:e5:d7:3f:15:d9:f6:af:7d:ed:ca:c3:3d:94: f7:97:da:47:9b:29:10:8c:0e:62:7d:35:7e:3f:e6:39:2d:45: 5a:e7:a8:12:70:08:52:ea:ad:74:88:15:92:08:8c:30:98:38: 2e:30:e0:75:ac:e5:cc:94:ca:32:91:93:45:1e:1d:56:8c:71: 91:78:fa:74:d8:f8:8e:ad:30:ae:71:e4:09:bd:6c:32:b1:08: fc:29:b7:5c:bd:8e:6d:11:e3:e1:7f:5f:bb:29:96:55:1c:ca: e5:95:c3:06:db:84:63:fd:85:27:9d:0f:17:5c:9d:70:b5:83: 53:43:ca:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkBP+fgSyFno+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWYzMTE4YzYtZTM1OC00M2Q4LWIzODYtYzJjYzE1OWEwMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCG3iU5yJ/PMilXOpKjetGg35np7AGDr5Rjj CwyktHXZuQlyNI9TxV/Jv3WmTTfldn+x45FPEJNvcBeWSvm6iwx9EK+3hcx/4ltP 0RtgHpD7G+kB775GO+/ghNJb5hSrjkShwlbs3jRSukdlRc0erz9f/Cg0cI3F7z6B UHWIOP0Ty4SJrpS42lK9V8Qh7yEEuvbmS2ARukEsvKvNxQ/eIuMF/W0M0WZE5BL1 h8E9x3FUz+TV6O17B+wjYJOCOrxrAXPAyJWyExDpVqz4iE9YBlbpmdw8ctjyyIsg +kVc7xoryE5qYucNTVZtq0k81cVRft6Hm8q3hjaJhYinlZvRrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGo/jZUNSTEGhpLoDA/D9niUytdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMDU1OWVlNDgtNzYxNS0z NDRjLWJhNTctODNkZGZhNTc2ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACasdB6xDgdV1Q8/7MZKVv3eYbs+4bkcrGc4KW2KMGcn3F2W4ofxQWA7 MOiWX9nvZPU6GQa5TFceWhlc7M9obKnd6RqYKV8tpCwtS/822tQWFpx6o6XUyBbK bYU8vhHT9ccVdJ4h0hldi02JBUexwFotQoKzVQALqRLucdNFafitVpgU5dc/Fdn2 r33tysM9lPeX2kebKRCMDmJ9NX4/5jktRVrnqBJwCFLqrXSIFZIIjDCYOC4w4HWs 5cyUyjKRk0UeHVaMcZF4+nTY+I6tMK5x5Am9bDKxCPwpt1y9jm0R4+F/X7spllUc yuWVwwbbhGP9hSedDxdcnXC1g1NDymk= -----END CERTIFICATE-----Generated at Fri Apr 17 19:52:39 2026 by rpki-client