$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json) Hash identifier: 7PnTbzf1EwdBK48gknBFCZXDShQsoRfRK3jc8alqR84= Subject key identifier: D6:B3:32:D3:88:2B:BD:1A:68:82:E4:44:F4:D3:75:C0:94:01:8E:13 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584D80FFE6E198F4DD4E50548480 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 13414 IP address blocks: 199.16.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e6:e1:98:f4:dd:4e:50:54:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=cce81c8b-1cff-4521-b9c4-51542a32d97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:98:63:a3:55:76:3a:3e:2d:8a:34:7b:fd: 57:d0:b6:fa:35:c2:3c:15:26:62:7f:33:51:b2:a4: c7:68:f7:d2:4b:60:a8:e5:9f:95:87:7b:7a:93:f8: 4b:e9:65:60:c0:fc:6e:a5:9a:7b:bf:44:94:0b:7d: 41:4a:40:52:e6:28:4b:b8:25:eb:bf:6f:e5:f0:7b: ad:80:e7:c2:ce:c9:d6:fe:ef:9b:fb:22:d7:46:c1: dd:39:6e:a5:9d:93:64:d9:79:95:58:70:fc:46:7b: c2:22:1e:5d:e2:05:5d:07:28:c7:03:3a:e2:a6:4c: 47:fa:e5:ca:91:52:7c:a0:d5:08:af:d1:fc:7e:53: 80:05:5e:ec:0f:56:e2:f5:9d:3a:ab:dd:a5:55:02: 2f:d7:35:16:2b:0c:0e:e8:fd:a3:e3:70:78:b7:24: 28:7f:ce:33:3f:9b:9b:db:51:1b:2e:8b:48:9a:c9: 09:3e:e3:73:ea:cb:d9:0b:3f:37:0a:16:e7:9a:5f: 7d:b1:19:f4:61:d8:50:ae:28:99:cb:95:f1:30:d5: 2c:13:c7:e3:77:e0:a2:cf:af:9b:69:9b:88:f8:12: 6d:b3:8b:03:f6:51:66:7a:4b:e0:44:7a:08:5a:df: 59:f8:ae:4c:7e:8f:3b:f5:e1:4f:9f:6b:b2:8f:cc: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B3:32:D3:88:2B:BD:1A:68:82:E4:44:F4:D3:75:C0:94:01:8E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bf:da:58:bd:2c:c6:de:7a:c9:ba:db:30:11:d4:45:1e:13: 28:bc:16:c4:d2:55:85:57:52:b9:77:c3:ff:fe:fe:35:42:a2: cb:d3:f9:b9:81:b3:bb:f7:5b:ea:d4:c9:5b:ad:2a:9e:b4:7b: 4e:da:b3:47:70:18:20:35:e2:f9:7d:b8:07:86:96:c5:95:d0: 4e:9b:30:98:f7:71:12:b4:03:8b:1e:e5:f7:f5:e3:51:89:ba: 42:6b:4f:80:fb:a9:9d:82:ad:4a:70:cb:8a:ba:24:97:8c:39: 06:b0:d6:f0:7e:c0:3e:bb:cd:b4:39:8d:ea:58:6b:1b:76:96: 4a:4c:8e:56:97:18:3b:f7:8a:59:d2:ce:08:1a:ff:d1:64:8f: e3:a0:41:c6:d7:2d:ed:6a:55:a5:65:82:0d:cd:ce:63:16:b8: 48:a6:d9:dd:2e:c2:96:0d:ba:9d:fa:03:08:45:3d:f8:32:86: ae:b8:0c:e2:e8:a9:c3:06:75:45:14:81:9e:9b:8d:69:18:e3: 72:c9:67:99:ff:55:27:c4:e4:b1:90:ff:d7:e0:29:90:58:9b: 68:7f:8f:b2:52:fc:01:a6:67:9b:3c:8e:d1:67:e9:cd:6e:91: 5e:e6:28:74:18:d0:23:0b:e9:e4:14:29:1e:2e:58:ba:56:52: 17:dc:26:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+bhmPTdTlBUhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk Y2NlODFjOGItMWNmZi00NTIxLWI5YzQtNTE1NDJhMzJkOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhICYY6NVdjo+LYo0e/1X0Lb6NcI8FSZifzNR sqTHaPfSS2Co5Z+Vh3t6k/hL6WVgwPxupZp7v0SUC31BSkBS5ihLuCXrv2/l8Hut gOfCzsnW/u+b+yLXRsHdOW6lnZNk2XmVWHD8RnvCIh5d4gVdByjHAzripkxH+uXK kVJ8oNUIr9H8flOABV7sD1bi9Z06q92lVQIv1zUWKwwO6P2j43B4tyQof84zP5ub 21EbLotImskJPuNz6svZCz83Chbnml99sRn0YdhQriiZy5XxMNUsE8fjd+Ciz6+b aZuI+BJts4sD9lFmekvgRHoIWt9Z+K5Mfo879eFPn2uyj8w+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNazMtOIK70aaILkRPTTdcCUAY4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNTIwYmM3ZWQtMjViMS0z ZDljLWIzYWYtNmEwM2U3MmE1MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC/2li9LMbeesm62zAR1EUeEyi8FsTSVYVXUrl3w//+/jVCosvT+bmB s7v3W+rUyVutKp60e07as0dwGCA14vl9uAeGlsWV0E6bMJj3cRK0A4se5ff141GJ ukJrT4D7qZ2CrUpwy4q6JJeMOQaw1vB+wD67zbQ5jepYaxt2lkpMjlaXGDv3ilnS zgga/9Fkj+OgQcbXLe1qVaVlgg3NzmMWuEim2d0uwpYNup36AwhFPfgyhq64DOLo qcMGdUUUgZ6bjWkY43LJZ5n/VSfE5LGQ/9fgKZBYm2h/j7JS/AGmZ5s8jtFn6c1u kV7mKHQY0CML6eQUKR4uWLpWUhfcJrk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:49 2026 by rpki-client