$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa File: 4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa (raw, json) Hash identifier: 2FTHzo5aK7DKWbNxvqhhqe+1D/ndmIXFC06SbB/tFAE= Subject key identifier: 22:1E:45:40:E7:AB:5A:32:CF:6B:D5:E8:B3:59:3D:3A:7C:F5:00:E3 Certificate issuer: /CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Certificate serial: 010D0C9F4328584D59EA6605613CABFDD6186A20 Authority key identifier: DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 199.188.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:66:05:61:3c:ab:fd:d6:18:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=678bff17-2cc1-4987-b13a-493e214128e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:5c:c4:7d:52:ed:3d:2a:85:57:a3:a3:e2: 03:84:8d:fe:10:08:fd:1f:46:9f:9b:6b:cd:30:35: bd:af:91:d3:08:86:bf:ad:6f:78:0c:9c:3d:1d:0a: 94:69:57:9a:cc:75:c8:52:7f:5b:ec:27:48:52:4c: 34:cd:08:e3:94:68:43:4a:74:7a:1a:7a:c8:c3:e9: 6a:fb:33:d7:64:fc:12:8f:98:6a:5b:49:9b:40:7d: 4b:7c:c0:c3:48:e9:8f:72:7c:fe:f9:6c:42:72:4f: dc:f4:83:8c:38:1e:37:10:b1:98:df:dd:8e:24:ca: e4:74:26:c8:5a:2f:a2:ad:ca:b8:1e:8d:d9:ef:d5: ad:63:cf:5e:1a:0c:15:67:51:1f:d1:40:93:32:a9: c0:b8:1f:2b:4b:db:57:a2:40:46:80:fb:de:81:76: b4:ee:56:0f:b9:7f:43:f0:b8:bf:cf:5d:73:2c:f4: 5b:0a:3b:35:c0:82:2b:94:1b:24:33:7e:7b:36:f1: b8:bc:dd:49:d9:68:b8:44:62:a9:db:8d:c8:cc:1d: 19:8a:0f:a0:fa:52:07:fa:e7:3c:7b:9c:3a:04:5c: 62:82:59:14:d4:4c:4c:77:6e:f2:e8:d6:5a:dd:a3: 8e:4a:e6:02:1b:af:5c:42:9a:c3:97:0b:33:06:a3: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1E:45:40:E7:AB:5A:32:CF:6B:D5:E8:B3:59:3D:3A:7C:F5:00:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/4191a840-c3d6-3ea9-add3-cd2ff7c9a764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.crl X509v3 Authority Key Identifier: keyid:DC:6A:15:2A:0F:A2:30:54:82:98:F4:66:63:43:97:EE:63:C4:FB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5d0ed8f-fdf4-4b27-8d4e-eb44f21f7871.cer sbgp-ipAddrBlock: critical IPv4: 199.188.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:47:e4:a5:1d:34:d7:8d:e2:ef:46:09:99:2a:63:fb:35:33: e5:23:e6:36:d8:b5:58:3b:c6:8b:3c:62:9e:dc:70:d0:2f:cc: a7:6f:4f:51:88:b9:3b:7e:0d:ad:5c:06:be:f1:b0:4f:37:2e: 01:71:e7:8d:a0:73:cc:17:38:57:df:e1:2d:4d:59:b4:fe:87: 19:e8:df:33:02:80:de:36:f1:bb:d1:b7:bf:17:74:08:87:ab: 06:b8:87:85:7a:86:71:ac:f3:6a:be:07:df:43:ef:18:b1:ca: 5c:e8:d8:a6:dd:52:1e:d7:13:2d:58:ee:54:72:e2:50:a5:ff: 13:ef:a9:4d:b4:ec:be:6f:98:a5:a0:fe:cb:aa:ca:51:97:67: ab:b7:49:cd:3f:41:9c:1d:4d:67:f4:8f:b0:b7:65:10:f4:72: d5:94:37:74:44:2f:31:3a:25:28:de:fc:9a:15:ec:1e:45:3a: 3d:3c:09:16:c7:b0:64:68:f1:93:b9:a9:58:90:fe:42:6d:4a: a5:e8:71:1c:34:e1:1c:f1:d9:f2:16:05:af:9a:ac:d6:ac:ca: a7:8f:cd:b6:a3:eb:8e:be:c5:83:1d:e8:48:fc:ff:92:fa:b4: 32:9c:8e:54:51:31:2c:05:74:92:51:6c:96:42:d0:17:2e:e7: 7e:f4:92:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mYFYTyr/dYYaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkMGVkOGYtZmRmNC00YjI3LThkNGUtZWI0NGYyMWY3 ODcxMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Njc4YmZmMTctMmNjMS00OTg3LWIxM2EtNDkzZTIxNDEyOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KxcxH1S7T0qhVejo+IDhI3+EAj9H0afm2vN MDW9r5HTCIa/rW94DJw9HQqUaVeazHXIUn9b7CdIUkw0zQjjlGhDSnR6GnrIw+lq +zPXZPwSj5hqW0mbQH1LfMDDSOmPcnz++WxCck/c9IOMOB43ELGY392OJMrkdCbI Wi+ircq4Ho3Z79WtY89eGgwVZ1Ef0UCTMqnAuB8rS9tXokBGgPvegXa07lYPuX9D 8Li/z11zLPRbCjs1wIIrlBskM357NvG4vN1J2Wi4RGKp243IzB0Zig+g+lIH+uc8 e5w6BFxiglkU1ExMd27y6NZa3aOOSuYCG69cQprDlwszBqNiTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIeRUDnq1oyz2vV6LNZPTp89QDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWQw ZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0ZjIxZjc4NzEvNDE5MWE4NDAtYzNkNi0z ZWE5LWFkZDMtY2QyZmY3YzlhNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkMGVkOGYtZmRmNC00YjI3LThk NGUtZWI0NGYyMWY3ODcxL2I1ZDBlZDhmLWZkZjQtNGIyNy04ZDRlLWViNDRmMjFm Nzg3MS5jcmwwHwYDVR0jBBgwFoAU3GoVKg+iMFSCmPRmY0OX7mPE+28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNWQwZWQ4Zi1mZGY0LTRiMjctOGQ0ZS1lYjQ0 ZjIxZjc4NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7ydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5H5KUdNNeN4u9GCZkqY/s1M+Uj5jbYtVg7xos8Yp7ccNAvzKdvT1GI uTt+Da1cBr7xsE83LgFx542gc8wXOFff4S1NWbT+hxno3zMCgN428bvRt78XdAiH qwa4h4V6hnGs82q+B99D7xixylzo2KbdUh7XEy1Y7lRy4lCl/xPvqU207L5vmKWg /suqylGXZ6u3Sc0/QZwdTWf0j7C3ZRD0ctWUN3RELzE6JSje/JoV7B5FOj08CRbH sGRo8ZO5qViQ/kJtSqXocRw04Rzx2fIWBa+arNasyqePzbaj646+xYMd6Ej8/5L6 tDKcjlRRMSwFdJJRbJZC0Bcu5370knw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:05:19 2026 by rpki-client