$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa File: af27fbd1-fccc-393f-ad38-224694a6aa8a.roa (raw, json) Hash identifier: oPY04uHKC2NqjWHVk1OQgAlqBy2rEtGBqxk4C3M/Jx0= Subject key identifier: A5:89:B4:17:63:AD:EA:69:5E:36:04:B4:F5:96:6F:B2:96:74:E6:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6EDA8680852295330E31A480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 397211 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:86:80:85:22:95:33:0e:31:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=4ae8e675-03db-43ba-ad82-eecb7f1e2b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:df:d0:2a:84:f5:74:39:a0:05:88:37:53: 95:f2:6a:08:f0:af:01:ca:a8:17:51:53:b0:27:ad: 29:2e:72:2c:d2:b6:fc:6f:3e:99:77:21:5a:d6:be: 01:51:f0:1e:b2:63:e5:5c:31:fa:13:84:69:9d:bb: 02:9d:02:59:f3:04:94:b9:13:08:88:77:d3:ac:85: 87:b1:42:fe:1d:8b:11:65:b9:38:b7:68:ec:7f:94: da:aa:49:bc:80:07:9c:b5:78:71:6c:da:28:33:58: fc:6f:6b:b4:77:c3:70:64:f2:ea:b4:0b:dd:dd:0b: 2e:b1:74:65:77:aa:a3:73:b8:b9:6e:b6:ef:a5:58: 65:b8:94:22:68:f4:74:07:d8:64:5f:01:f8:f6:09: 7d:d2:d2:4c:37:e1:29:0f:7a:99:c1:36:a9:38:4b: 58:ab:e9:c8:ca:80:ce:75:35:ef:3e:48:73:44:50: b5:59:1d:f1:00:c9:14:34:2e:56:f9:2c:94:71:c4: 13:54:ea:13:a8:69:fd:0c:6d:85:cf:e4:56:e5:d1: e5:bd:c8:fa:0a:17:c2:c9:a6:00:ef:2f:79:3b:8c: 89:8e:40:9c:1d:37:b5:fb:15:b4:c4:1f:7d:08:b5: 3b:0c:90:55:5c:0c:2c:5a:b5:37:38:d2:9e:8a:f3: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:89:B4:17:63:AD:EA:69:5E:36:04:B4:F5:96:6F:B2:96:74:E6:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a0:07:70:9a:dc:a3:cc:c2:01:86:fc:db:7d:6a:ef:d2:ec: e7:b0:61:9b:08:2b:6a:e7:df:a1:59:0a:40:cd:61:d2:d8:5a: f5:81:a0:b6:3c:37:b3:50:e1:d8:3c:94:ff:f5:1d:54:0f:fb: 26:30:e9:48:3c:a8:e6:40:90:f8:6a:c6:d9:1b:ac:e8:b3:74: b5:5c:32:22:1e:f6:e3:9d:88:2c:94:20:fb:01:11:a1:1c:22: a3:e1:d7:ae:ba:e9:2e:55:49:d4:fe:f1:eb:01:57:23:59:aa: a7:2b:f3:d1:6f:95:9a:ae:d5:d5:30:70:b9:0e:c1:76:c1:c1: 66:52:bf:a5:2d:f6:91:68:65:b6:d0:cd:b4:89:7b:90:97:c0: 46:8f:77:7c:63:4b:34:eb:9e:93:fb:b0:ea:92:e9:35:f7:fe: 32:44:2f:08:fb:b8:1e:f0:47:a2:e5:63:59:a8:d0:7e:2f:61: 8e:c7:af:c2:c9:4e:a5:ad:79:c0:bc:a4:7f:d4:b0:6f:a4:32: 25:63:62:fa:ab:a5:11:d7:0b:c9:49:3f:53:5c:be:16:b7:54: f6:06:db:20:8a:52:1b:22:6e:00:d5:75:75:61:e4:63:cb:f4: 58:90:b1:8f:7a:37:0f:0c:46:d8:60:cf:53:89:8d:e9:ee:71: 63:5b:f4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2oaAhSKVMw4xpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk NGFlOGU2NzUtMDNkYi00M2JhLWFkODItZWVjYjdmMWUyYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9rf0CqE9XQ5oAWIN1OV8moI8K8ByqgXUVOw J60pLnIs0rb8bz6ZdyFa1r4BUfAesmPlXDH6E4RpnbsCnQJZ8wSUuRMIiHfTrIWH sUL+HYsRZbk4t2jsf5Taqkm8gAectXhxbNooM1j8b2u0d8NwZPLqtAvd3QsusXRl d6qjc7i5brbvpVhluJQiaPR0B9hkXwH49gl90tJMN+EpD3qZwTapOEtYq+nIyoDO dTXvPkhzRFC1WR3xAMkUNC5W+SyUccQTVOoTqGn9DG2Fz+RW5dHlvcj6ChfCyaYA 7y95O4yJjkCcHTe1+xW0xB99CLU7DJBVXAwsWrU3ONKeivPYhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWJtBdjreppXjYEtPWWb7KWdOZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYyN2ZiZDEtZmNjYy0z OTNmLWFkMzgtMjI0Njk0YTZhYThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6gB3Ca3KPMwgGG/Nt9au/S7OewYZsIK2rn36FZCkDNYdLYWvWBoLY8 N7NQ4dg8lP/1HVQP+yYw6Ug8qOZAkPhqxtkbrOizdLVcMiIe9uOdiCyUIPsBEaEc IqPh16666S5VSdT+8esBVyNZqqcr89FvlZqu1dUwcLkOwXbBwWZSv6Ut9pFoZbbQ zbSJe5CXwEaPd3xjSzTrnpP7sOqS6TX3/jJELwj7uB7wR6LlY1mo0H4vYY7Hr8LJ TqWtecC8pH/UsG+kMiVjYvqrpRHXC8lJP1Ncvha3VPYG2yCKUhsibgDVdXVh5GPL 9FiQsY96Nw8MRthgz1OJjenucWNb9M0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:27:42 2026 by rpki-client