$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa File: 2068d72c-6558-301e-83be-f2515979c63c.roa (raw, json) Hash identifier: 7iY5FrUo96EAWuZjC6RWUpO6z0qk6ZhQaB2vPSJGKM4= Subject key identifier: 84:26:66:17:17:CA:DF:48:7E:9A:BC:BE:0A:76:6F:B1:46:05:B8:82 Certificate issuer: /CN=c54d5f74-3f0f-446f-b8af-258f72dede61 Certificate serial: 010D0C9F4328584D6AAA8C05211D301A480E24B8 Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 199.167.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:8c:05:21:1d:30:1a:48:0e:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=c6cab8ee-ff02-4ecb-a6ff-33b484eb553b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:84:37:c6:7f:19:4d:e4:f5:81:9f:0d:e0: 4b:3e:a8:d1:80:98:38:88:70:f7:ae:61:d4:6d:77: ce:b1:3d:94:e0:3c:48:52:6f:21:49:17:2c:c6:c6: 01:39:9a:68:75:45:e5:52:ff:8a:ad:55:e9:3b:e9: 8d:ac:b2:8b:61:36:a3:96:13:a8:98:78:96:89:69: 77:33:8b:72:49:ce:c7:3b:cf:ca:1c:c7:b8:22:56: 9a:cf:ad:00:3a:05:8d:64:d3:8c:0a:86:d0:be:e1: df:29:f7:49:ee:b6:d3:ee:9b:16:2c:39:cc:e9:04: 3d:af:33:3d:8e:fa:06:47:59:0c:a4:6f:bd:5d:07: 90:e4:21:6e:a3:af:c5:29:d8:c9:67:70:09:4d:aa: 70:f9:af:33:50:0b:51:fd:cd:11:5f:93:b9:95:7c: e7:bb:81:97:c7:e4:60:ca:6a:f0:9e:f9:c4:71:47: d5:27:13:72:23:6f:19:4a:ea:49:34:70:62:13:8e: f2:5f:da:08:4b:04:f6:da:e3:d9:f1:1c:6f:e6:9b: 12:59:6f:95:cf:e6:02:f1:9a:e6:41:f4:87:28:23: 1d:9b:bb:2f:9a:81:c9:7b:26:13:59:80:4f:f8:ac: 94:3e:3d:13:16:d4:8f:2d:6d:ef:62:53:48:72:f4: 82:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:26:66:17:17:CA:DF:48:7E:9A:BC:BE:0A:76:6F:B1:46:05:B8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl X509v3 Authority Key Identifier: keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer sbgp-ipAddrBlock: critical IPv4: 199.167.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:cf:28:95:92:9c:d3:f5:8e:7d:cf:96:a5:6c:2c:28:8e:88: c9:de:ee:76:d5:79:29:94:dd:1d:6d:fa:2e:5c:db:d1:45:58: 10:46:ec:9a:96:bd:35:2d:42:57:61:e5:cd:f3:31:05:2f:b4: a8:36:7e:c3:e2:74:42:ff:47:22:10:20:9a:31:3b:98:f4:a9: d9:06:bf:0c:3d:87:7e:e3:de:4e:dc:f0:7c:ed:96:27:46:91: a0:24:05:7b:5c:b6:e8:7a:b6:04:98:50:59:22:b6:b3:2c:55: a6:43:f9:1d:9e:92:a0:83:b8:1c:74:8f:75:01:44:63:f8:35: ff:7e:2c:24:4c:a3:4a:82:ef:72:34:2f:ad:a8:5b:ee:55:b7: ad:13:e7:be:9b:a3:09:d5:68:0e:fa:f2:5a:c0:b5:f1:7b:5f: b7:bd:48:4e:22:fb:68:be:dd:4e:6e:f3:b4:5c:7c:42:17:46: 5e:63:d4:9f:86:40:44:b9:dc:56:66:36:ae:ac:77:de:c8:df: 86:8f:21:e0:a1:3e:9c:9b:39:5f:76:b0:00:dd:10:4b:5b:1a: 4b:f1:4c:a5:47:b3:98:11:99:76:31:65:e8:8f:85:8c:f7:ac: 88:53:75:c4:4f:13:38:10:92:08:62:60:ab:0d:48:c7:e7:94: 1c:26:d2:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqowFIR0wGkgOJLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU0ZDVmNzQtM2YwZi00NDZmLWI4YWYtMjU4ZjcyZGVk ZTYxMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YzZjYWI4ZWUtZmYwMi00ZWNiLWE2ZmYtMzNiNDg0ZWI1NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3+EN8Z/GU3k9YGfDeBLPqjRgJg4iHD3rmHU bXfOsT2U4DxIUm8hSRcsxsYBOZpodUXlUv+KrVXpO+mNrLKLYTajlhOomHiWiWl3 M4tySc7HO8/KHMe4Ilaaz60AOgWNZNOMCobQvuHfKfdJ7rbT7psWLDnM6QQ9rzM9 jvoGR1kMpG+9XQeQ5CFuo6/FKdjJZ3AJTapw+a8zUAtR/c0RX5O5lXznu4GXx+Rg ymrwnvnEcUfVJxNyI28ZSupJNHBiE47yX9oISwT22uPZ8Rxv5psSWW+Vz+YC8Zrm QfSHKCMdm7svmoHJeyYTWYBP+KyUPj0TFtSPLW3vYlNIcvSCRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQmZhcXyt9Ifpq8vgp2b7FGBbiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNTRk NWY3NC0zZjBmLTQ0NmYtYjhhZi0yNThmNzJkZWRlNjEvMjA2OGQ3MmMtNjU1OC0z MDFlLTgzYmUtZjI1MTU5NzljNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzU0ZDVmNzQtM2YwZi00NDZmLWI4 YWYtMjU4ZjcyZGVkZTYxL2M1NGQ1Zjc0LTNmMGYtNDQ2Zi1iOGFmLTI1OGY3MmRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAUtcqc1a5TAKdVqPvTZRhKB9LM4n8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNTRkNWY3NC0zZjBmLTQ0NmYtYjhhZi0yNThm NzJkZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6fhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/PKJWSnNP1jn3PlqVsLCiOiMne7nbVeSmU3R1t+i5c29FFWBBG7JqW vTUtQldh5c3zMQUvtKg2fsPidEL/RyIQIJoxO5j0qdkGvww9h37j3k7c8HztlidG kaAkBXtctuh6tgSYUFkitrMsVaZD+R2ekqCDuBx0j3UBRGP4Nf9+LCRMo0qC73I0 L62oW+5Vt60T576bownVaA768lrAtfF7X7e9SE4i+2i+3U5u87RcfEIXRl5j1J+G QES53FZmNq6sd97I34aPIeChPpybOV92sADdEEtbGkvxTKVHs5gRmXYxZeiPhYz3 rIhTdcRPEzgQkghiYKsNSMfnlBwm0pY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:47:18 2026 by rpki-client