$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa File: fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa (raw, json) Hash identifier: 85FzIP5QwwJIVl7vzTOl6uCKkyIij5n5wvOgY5DUn1c= Subject key identifier: DB:46:65:E9:14:6E:1F:EB:01:05:F9:CF:4A:D0:2F:20:60:43:5D:2B Certificate issuer: /CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d Certificate serial: 010D0C9F4328584D83CAB1A8EB9A45EA1440F180 Authority key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 199.124.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:b1:a8:eb:9a:45:ea:14:40:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=9cbce50e-56c7-47d6-a75b-8ae2868bef4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:7f:f9:ef:62:d9:e0:e2:08:1d:14:90:ab: 35:2b:4d:f4:de:7b:96:9d:34:b2:36:c6:bb:4d:26: aa:20:1d:99:f3:67:a0:bb:84:23:c8:0b:8e:1c:b2: af:c5:c4:55:79:b0:f9:d8:16:e5:82:75:3e:f9:09: 55:36:1d:ad:62:2f:62:37:8b:13:34:66:87:03:00: f2:2b:fe:e2:bb:b7:71:85:56:0a:f5:d5:14:37:1b: 31:66:6f:a3:82:ee:ac:0c:05:a1:dc:67:69:81:60: e2:7f:1f:db:b4:ca:ba:cf:56:eb:3f:f4:53:7a:99: 52:9d:f7:c3:48:92:c5:0e:4e:af:60:97:39:e4:69: 26:b8:48:4a:7d:b6:8b:ac:a3:80:aa:41:2b:73:1d: 2e:83:d7:ea:9e:cc:a2:e4:b5:0b:73:de:11:29:2f: cb:1d:69:1a:18:3c:70:25:8c:e1:05:33:c8:82:ce: db:ef:65:20:1b:c9:29:89:42:06:f3:e1:a3:5c:7c: ce:cb:0a:c7:9b:9c:97:49:85:28:67:3c:8e:e4:27: 6c:2f:5d:f5:bf:53:76:72:2d:aa:d1:7e:3f:f6:a9: cb:49:2a:da:47:93:f4:33:d6:30:58:23:cc:b0:82: 08:4c:03:be:7c:71:81:a9:e1:25:9c:4f:68:c3:70: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:46:65:E9:14:6E:1F:EB:01:05:F9:CF:4A:D0:2F:20:60:43:5D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl X509v3 Authority Key Identifier: keyid:D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer sbgp-ipAddrBlock: critical IPv4: 199.124.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a1:29:7b:88:5e:54:48:50:09:d5:45:3e:94:ba:f6:a6:29: 35:1a:62:83:8d:01:e3:4b:e6:fb:34:e9:2d:e1:bb:10:7e:38: 9b:56:5f:31:cc:61:93:21:c3:dd:b5:4b:1b:ec:d8:30:9a:37: 93:f5:b1:0c:9e:23:21:78:d6:cc:6e:12:6d:db:39:4c:2b:0a: 6c:45:bf:cd:a5:de:04:04:14:ce:eb:cb:f4:86:9a:36:2e:ec: 5f:4a:31:69:1c:39:a8:55:0f:98:62:7e:0d:45:d0:3c:48:18: 10:6f:75:48:16:93:a6:d6:5e:05:6e:ff:9b:9a:53:64:10:c1: 60:79:93:0c:af:91:35:01:c6:37:6a:91:5c:29:ff:3a:a5:c7: b9:76:1b:5c:31:9f:60:55:25:28:1f:ac:cc:cb:1d:06:e5:3c: 63:c8:ca:ce:c0:f8:69:39:bb:ef:15:8c:8d:5f:90:9f:0c:1d: cc:db:29:71:f7:eb:12:ea:ee:71:6d:bc:c7:72:e1:7e:86:1e: 4f:89:ba:1c:2d:03:e5:7f:0c:47:7b:a8:ad:29:a8:fe:66:98: b0:78:37:0b:05:ca:2b:b6:4e:79:c1:a1:38:7a:28:a7:9e:75: 3a:00:9b:d3:22:b9:16:3f:0c:0e:7e:d2:1c:bc:9e:82:cc:93: be:e7:d2:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyrGo65pF6hRA8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRmMTk0OTQtZTZlYy00MmU3LWJjZTQtODkwM2RmMWY2 ZjlkMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk OWNiY2U1MGUtNTZjNy00N2Q2LWE3NWItOGFlMjg2OGJlZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomN/+e9i2eDiCB0UkKs1K0303nuWnTSyNsa7 TSaqIB2Z82egu4QjyAuOHLKvxcRVebD52BblgnU++QlVNh2tYi9iN4sTNGaHAwDy K/7iu7dxhVYK9dUUNxsxZm+jgu6sDAWh3GdpgWDifx/btMq6z1brP/RTeplSnffD SJLFDk6vYJc55GkmuEhKfbaLrKOAqkErcx0ug9fqnsyi5LULc94RKS/LHWkaGDxw JYzhBTPIgs7b72UgG8kpiUIG8+GjXHzOywrHm5yXSYUoZzyO5CdsL131v1N2ci2q 0X4/9qnLSSraR5P0M9YwWCPMsIIITAO+fHGBqeElnE9ow3A8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtGZekUbh/rAQX5z0rQLyBgQ10rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNGYx OTQ5NC1lNmVjLTQyZTctYmNlNC04OTAzZGYxZjZmOWQvZmEwYTA5YjYtODYyYS0z MmNkLTk4ZDgtYzEzMWJhMTgyZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTRmMTk0OTQtZTZlYy00MmU3LWJj ZTQtODkwM2RmMWY2ZjlkLzE0ZjE5NDk0LWU2ZWMtNDJlNy1iY2U0LTg5MDNkZjFm NmY5ZC5jcmwwHwYDVR0jBBgwFoAU1IwkcT+dYG9BASyO6kWDXS1dcvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xNGYxOTQ5NC1lNmVjLTQyZTctYmNlNC04OTAz ZGYxZjZmOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3wcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAehKXuIXlRIUAnVRT6UuvamKTUaYoONAeNL5vs06S3huxB+OJtWXzHM YZMhw921Sxvs2DCaN5P1sQyeIyF41sxuEm3bOUwrCmxFv82l3gQEFM7ry/SGmjYu 7F9KMWkcOahVD5hifg1F0DxIGBBvdUgWk6bWXgVu/5uaU2QQwWB5kwyvkTUBxjdq kVwp/zqlx7l2G1wxn2BVJSgfrMzLHQblPGPIys7A+Gk5u+8VjI1fkJ8MHczbKXH3 6xLq7nFtvMdy4X6GHk+JuhwtA+V/DEd7qK0pqP5mmLB4NwsFyiu2TnnBoTh6KKee dToAm9MiuRY/DA5+0hy8noLMk77n0rA= -----END CERTIFICATE-----Generated at Fri Apr 17 07:57:44 2026 by rpki-client