$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa File: ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa (raw, json) Hash identifier: VzHDnj1auBp7jU5uUQXZqW95VUvJ/iV5rbzKACJLryk= Subject key identifier: BE:D9:31:D6:11:25:84:10:6C:EB:5B:2A:1B:52:78:61:E8:CD:F7:AC Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584D55BCBC0C1A2E41BE696EA580 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 36352 IP address blocks: 199.127.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:bc:0c:1a:2e:41:be:69:6e:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=311af4fd-6b9d-4da6-92f5-d1b47cc5664a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:7b:95:d8:0c:c7:73:7d:61:39:31:0c:80: 91:c3:34:65:1e:19:22:03:ae:09:98:7c:d9:14:72: b5:df:2f:2f:b3:20:f6:be:ba:cc:48:a4:3f:6d:ab: e2:30:cd:31:60:1c:b1:21:c5:d4:17:6a:bf:89:a2: 81:e1:39:1b:20:39:af:a1:e0:88:3f:d0:2a:e6:c0: aa:30:23:b0:14:29:61:31:40:19:03:46:e1:74:f0: b7:c2:11:a0:3d:7d:37:85:d3:18:6f:b9:89:61:dd: f0:1f:10:49:18:d6:39:c3:a2:d7:ce:05:4f:9d:33: 11:b2:f8:f7:a8:bc:db:5d:8b:11:19:d3:cc:02:e9: 7b:8c:b9:2f:64:1b:af:c0:f3:f5:17:7b:4b:2f:3a: 40:67:cd:29:67:53:90:29:82:c2:53:51:fe:45:64: b7:01:5b:5e:19:71:e2:2e:d7:eb:dd:1a:71:db:24: 15:43:a8:39:92:ae:9c:85:f1:41:0b:76:af:af:ca: b0:87:a4:d8:00:ec:8b:ba:3e:b1:7e:fd:6d:5e:b2: 8b:d1:36:95:64:17:a7:f0:f7:38:71:fb:3f:05:95: bf:38:4e:13:27:ec:85:88:62:41:68:de:e4:6f:11: 2d:85:0e:50:60:da:11:8f:dd:0f:65:42:26:6a:92: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:31:D6:11:25:84:10:6C:EB:5B:2A:1B:52:78:61:E8:CD:F7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ce89f97b-1f4c-3598-ac60-09cff8ffc87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 199.127.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:cb:63:63:20:ba:26:a1:87:65:63:e7:18:da:db:23:f9:5d: 80:26:c9:82:c7:a8:87:62:9a:d0:2e:54:a8:1b:13:e4:88:b8: 29:86:57:66:dc:8b:ff:db:be:70:6b:11:b7:bb:3b:69:41:20: 38:a2:c7:21:31:b2:42:fb:4c:f2:51:4d:a8:2d:ea:b8:e4:2b: 5d:2f:db:4c:21:49:84:d0:de:af:21:42:27:8b:37:5e:31:53: af:4c:f2:77:bf:56:4a:b6:b3:17:20:d9:2f:4f:05:18:8c:0d: 6d:29:53:48:c7:82:a0:88:fa:95:13:d1:e4:43:7c:10:dc:b1: 85:26:a6:67:16:ff:f0:40:64:4a:56:32:26:69:82:8a:2d:37: 11:1e:46:84:50:b3:ae:c6:ee:06:56:ea:87:62:9a:fd:07:07: 4d:65:e2:ba:8d:24:d8:dc:6b:0e:fa:8d:3b:3a:ac:33:75:55: 55:2f:20:5a:d7:59:dc:01:3e:f3:86:a7:dd:46:5b:cb:99:37: 0c:53:61:9d:7c:a2:51:a3:a9:8e:7d:3b:d0:d2:77:5c:2f:32: 15:d2:82:b1:14:84:04:90:79:66:d1:47:55:7f:f5:91:17:03: 00:11:eb:c9:d2:db:5b:4e:2a:d2:d1:f9:5b:06:b3:2d:23:54: 9a:8f:ec:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLwMGi5BvmlupYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MzExYWY0ZmQtNmI5ZC00ZGE2LTkyZjUtZDFiNDdjYzU2NjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlJ7ldgMx3N9YTkxDICRwzRlHhkiA64JmHzZ FHK13y8vsyD2vrrMSKQ/baviMM0xYByxIcXUF2q/iaKB4TkbIDmvoeCIP9Aq5sCq MCOwFClhMUAZA0bhdPC3whGgPX03hdMYb7mJYd3wHxBJGNY5w6LXzgVPnTMRsvj3 qLzbXYsRGdPMAul7jLkvZBuvwPP1F3tLLzpAZ80pZ1OQKYLCU1H+RWS3AVteGXHi Ltfr3Rpx2yQVQ6g5kq6chfFBC3avr8qwh6TYAOyLuj6xfv1tXrKL0TaVZBen8Pc4 cfs/BZW/OE4TJ+yFiGJBaN7kbxEthQ5QYNoRj90PZUImapLvnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7ZMdYRJYQQbOtbKhtSeGHozfesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvY2U4OWY5N2ItMWY0Yy0z NTk4LWFjNjAtMDljZmY4ZmZjODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzLY2Mguiahh2Vj5xja2yP5XYAmyYLHqIdimtAuVKgbE+SIuCmGV2bc i//bvnBrEbe7O2lBIDiixyExskL7TPJRTagt6rjkK10v20whSYTQ3q8hQieLN14x U69M8ne/Vkq2sxcg2S9PBRiMDW0pU0jHgqCI+pUT0eRDfBDcsYUmpmcW//BAZEpW MiZpgootNxEeRoRQs67G7gZW6odimv0HB01l4rqNJNjcaw76jTs6rDN1VVUvIFrX WdwBPvOGp91GW8uZNwxTYZ18olGjqY59O9DSd1wvMhXSgrEUhASQeWbRR1V/9ZEX AwAR68nS21tOKtLR+VsGsy0jVJqP7KU= -----END CERTIFICATE-----Generated at Sat Apr 18 03:32:20 2026 by rpki-client