$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa File: 1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa (raw, json) Hash identifier: OF2ckZ7JczgjhHvCsdiuSbWOqC2HVorbH9Lpe/VXubQ= Subject key identifier: 44:8D:5B:F2:C6:F6:FE:02:5A:05:F0:3F:3C:DA:BD:47:F8:5A:CB:F1 Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584DE9B0C21A496EFD6F18374900 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 21769 IP address blocks: 199.30.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:c2:1a:49:6e:fd:6f:18:37:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=4ab33242-43fa-4a42-bbe4-34f7dbda6bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:86:4a:ac:fc:fd:aa:1f:1f:53:1c:f0:64:f9: a7:47:65:73:a1:f4:8f:e3:f3:83:03:70:4f:63:aa: eb:e8:be:69:c2:b3:19:65:84:90:f3:75:62:eb:c4: ed:91:53:d0:ec:0a:c2:34:d9:94:a9:35:74:69:88: 8b:5d:47:77:f7:b6:2b:b4:4f:0c:a3:4d:32:b6:80: 76:f1:97:64:a2:e4:0f:44:91:37:f1:72:96:72:4c: 16:75:05:cd:1c:ba:11:57:00:a4:05:a6:56:c6:aa: 09:36:e1:47:ab:b2:79:28:a5:62:56:63:71:bd:1f: eb:9b:b2:46:d8:8b:20:4b:1d:e8:0e:95:35:d7:90: f0:5a:03:04:d7:9d:b7:04:7b:5a:3e:29:5b:6b:a9: 51:d3:90:54:dd:69:cd:6f:02:7c:7a:7e:92:df:db: 02:9c:b0:47:56:6d:44:96:55:6c:c1:4a:9c:55:86: 36:ea:9f:5d:d5:71:31:8c:6c:3f:19:0f:4f:7e:fa: dd:7a:80:43:e8:79:5f:03:d8:cd:db:76:60:8b:a3: ea:d3:7a:e1:8c:ff:f5:fa:10:da:e5:5e:b3:60:0a: d0:b1:05:2a:df:3a:7c:5e:1f:1c:4e:a9:d2:e7:41: ce:3d:20:86:ad:d9:be:7a:04:30:dc:68:f8:75:12: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:5B:F2:C6:F6:FE:02:5A:05:F0:3F:3C:DA:BD:47:F8:5A:CB:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.30.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0e:c5:0c:c1:62:4f:b5:49:9c:8b:ea:83:fb:a8:ad:0b:bc: 88:1b:bc:ee:67:e7:23:c9:12:dc:7a:22:66:11:be:c0:ed:c0: d2:58:ff:fb:84:47:24:8a:ad:03:55:99:83:f8:02:a1:18:e9: 20:d5:ec:2d:00:c9:dd:25:2a:77:fb:92:f1:a5:1a:45:ce:a5: 76:5c:e8:b8:55:6f:cf:41:28:90:7a:bc:ec:af:be:c3:6d:8b: 00:ff:ee:9c:d9:58:03:fa:ab:b7:28:ee:ab:f4:41:e1:46:f5: e5:cc:90:2a:d2:de:ae:fc:03:c1:b4:99:7c:b8:4f:f0:fd:8d: 1b:a3:96:7c:c5:fa:57:b8:53:25:31:3e:d7:fa:75:d6:1d:c1: bb:cb:f0:50:f8:0e:9e:32:4b:0c:ab:10:43:f2:bf:4b:32:94: db:f4:18:6b:4b:d7:35:fa:2d:a7:5f:bd:a6:1d:dc:a1:b8:da: c3:cc:ed:1f:d4:74:c9:13:80:71:77:1b:fd:87:51:b0:bb:f4: 3b:71:8f:01:71:24:7a:c9:8d:d3:64:81:1b:63:f8:0c:89:18: 03:2b:4d:ea:e6:ab:a9:3c:95:79:37:63:26:49:74:58:7a:65: 5e:5e:85:e1:84:7f:bb:7b:1f:16:07:fa:9c:31:92:62:c5:8e: bc:f4:99:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psMIaSW79bxg3SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk NGFiMzMyNDItNDNmYS00YTQyLWJiZTQtMzRmN2RiZGE2YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4ZKrPz9qh8fUxzwZPmnR2VzofSP4/ODA3BP Y6rr6L5pwrMZZYSQ83Vi68TtkVPQ7ArCNNmUqTV0aYiLXUd397YrtE8Mo00ytoB2 8ZdkouQPRJE38XKWckwWdQXNHLoRVwCkBaZWxqoJNuFHq7J5KKViVmNxvR/rm7JG 2IsgSx3oDpU115DwWgME1523BHtaPilba6lR05BU3WnNbwJ8en6S39sCnLBHVm1E llVswUqcVYY26p9d1XExjGw/GQ9PfvrdeoBD6HlfA9jN23Zgi6Pq03rhjP/1+hDa 5V6zYArQsQUq3zp8Xh8cTqnS50HOPSCGrdm+egQw3Gj4dRI/UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESNW/LG9v4CWgXwPzzavUf4WsvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvMWY3ZmQyZGYtZGQxNi0z ZmY2LWI3ZTEtYThmMzZlMTBiYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcOxQzBYk+1SZyL6oP7qK0LvIgbvO5n5yPJEtx6ImYRvsDtwNJY//uE RySKrQNVmYP4AqEY6SDV7C0Ayd0lKnf7kvGlGkXOpXZc6LhVb89BKJB6vOyvvsNt iwD/7pzZWAP6q7co7qv0QeFG9eXMkCrS3q78A8G0mXy4T/D9jRujlnzF+le4UyUx Ptf6ddYdwbvL8FD4Dp4ySwyrEEPyv0sylNv0GGtL1zX6LadfvaYd3KG42sPM7R/U dMkTgHF3G/2HUbC79DtxjwFxJHrJjdNkgRtj+AyJGAMrTermq6k8lXk3YyZJdFh6 ZV5eheGEf7t7HxYH+pwxkmLFjrz0mcE= -----END CERTIFICATE-----Generated at Sat Jun 13 19:25:59 2026 by rpki-client