$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa File: 6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa (raw, json) Hash identifier: LVdPosTgq4ynu0jWUSCq9zviEp3/hlPvBnJTZScRSk4= Subject key identifier: FD:67:DC:14:3B:13:DE:7C:A7:DA:13:7F:18:52:8E:21:1A:E3:20:F8 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584D80FFE1DCCA6773BBD99CEF00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 13414 IP address blocks: 199.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e1:dc:ca:67:73:bb:d9:9c:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=d24c096f-9a2e-4c40-b3ee-2a29eaf470ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:f1:6e:aa:8f:6f:25:03:d4:60:c5:4f:d8: 63:28:10:9b:01:d1:92:3f:f2:bf:4c:3a:00:5b:41: 83:7d:43:6d:e0:e2:4b:ba:68:f5:1f:07:e9:dd:d2: 29:cf:49:16:87:53:c3:c2:e1:d2:df:cd:05:0e:d7: e4:35:82:b3:14:bc:f0:2d:d4:08:99:7b:2c:68:18: 9a:f6:36:bc:64:23:90:9a:de:82:29:f1:98:12:09: 05:91:19:26:c9:62:8d:c7:df:79:2c:c0:20:29:a9: 47:8b:34:87:ab:e4:e0:38:91:39:4b:5a:f9:e7:5b: f8:24:04:34:fb:15:1e:6f:70:99:51:ca:b8:f5:1f: 0e:b4:dc:77:a9:0e:7d:a5:b1:68:78:b6:d1:00:2c: 1a:5a:e8:36:d1:3a:fd:db:08:e6:a4:07:e0:99:56: e6:4b:bc:5d:37:b5:dd:65:66:51:38:3d:08:cb:4d: 1a:98:0d:7f:e4:79:3c:be:2a:2d:92:09:41:fb:6a: d5:3d:51:1b:6a:be:37:66:db:ca:55:bf:18:82:c1: d0:4c:66:23:09:e6:5d:09:de:d4:b1:12:67:9e:db: e8:9e:b9:af:d5:14:c4:a7:13:f8:bd:72:f1:0b:dd: f0:f3:3b:b5:ee:51:02:9c:41:47:31:51:70:1b:a5: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:67:DC:14:3B:13:DE:7C:A7:DA:13:7F:18:52:8E:21:1A:E3:20:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:87:5e:18:31:05:29:4e:4b:a9:1a:fd:b1:1a:2e:a0:a0:c0: 01:ff:4b:cb:ad:bb:09:0d:47:d2:fe:84:27:10:cf:51:c9:b0: e2:73:6f:32:f3:4f:fc:ba:19:53:59:c9:62:d4:bd:14:f0:05: 45:77:ed:97:10:bf:f7:f7:fb:ee:98:6b:9d:5f:49:43:1d:07: e2:9f:cb:67:7d:ea:de:58:60:c6:0d:a2:5e:ad:d4:7b:f3:2a: 54:bb:5d:30:c4:28:06:a8:0e:ae:b3:3b:ae:16:3d:9c:98:b6: 20:2c:c9:44:24:4b:76:5d:bb:f7:f9:d0:9b:dc:0a:6b:45:05: ec:2d:2f:6e:00:de:61:c6:f7:ea:e3:8a:a6:c0:50:61:47:57: fe:33:57:80:1b:77:b5:90:40:9c:bb:26:c4:ab:27:14:a2:b2: 2c:a5:6d:bb:0f:57:e7:f7:3b:d5:eb:be:fe:aa:3c:25:f8:c0: 84:b2:ff:f8:63:eb:0e:b0:dd:08:77:7a:e0:43:5d:d6:56:e1: 01:03:fc:e2:49:ae:9c:23:af:7a:39:43:8c:e8:a8:3b:ca:0c: 79:34:35:1d:96:b0:60:26:53:c0:20:3f:b3:ec:48:db:ff:db: 8e:bc:27:de:ee:15:be:80:ef:c4:88:29:4a:6e:8e:c8:f6:a0: ea:fe:69:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+Hcymdzu9mc7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZDI0YzA5NmYtOWEyZS00YzQwLWIzZWUtMmEyOWVhZjQ3MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEDxbqqPbyUD1GDFT9hjKBCbAdGSP/K/TDoA W0GDfUNt4OJLumj1Hwfp3dIpz0kWh1PDwuHS380FDtfkNYKzFLzwLdQImXssaBia 9ja8ZCOQmt6CKfGYEgkFkRkmyWKNx995LMAgKalHizSHq+TgOJE5S1r551v4JAQ0 +xUeb3CZUcq49R8OtNx3qQ59pbFoeLbRACwaWug20Tr92wjmpAfgmVbmS7xdN7Xd ZWZROD0Iy00amA1/5Hk8viotkglB+2rVPVEbar43ZtvKVb8YgsHQTGYjCeZdCd7U sRJnntvonrmv1RTEpxP4vXLxC93w8zu17lECnEFHMVFwG6UW+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1n3BQ7E958p9oTfxhSjiEa4yD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNmVmZDNhMDgtYWNkZS0z YmRkLTg1YjUtNGViYTUzM2U1MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWHXhgxBSlOS6ka/bEaLqCgwAH/S8utuwkNR9L+hCcQz1HJsOJzbzLz T/y6GVNZyWLUvRTwBUV37ZcQv/f3++6Ya51fSUMdB+Kfy2d96t5YYMYNol6t1Hvz KlS7XTDEKAaoDq6zO64WPZyYtiAsyUQkS3Zdu/f50JvcCmtFBewtL24A3mHG9+rj iqbAUGFHV/4zV4Abd7WQQJy7JsSrJxSisiylbbsPV+f3O9Xrvv6qPCX4wISy//hj 6w6w3Qh3euBDXdZW4QED/OJJrpwjr3o5Q4zoqDvKDHk0NR2WsGAmU8AgP7PsSNv/ 2468J97uFb6A78SIKUpujsj2oOr+abc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:15 2026 by rpki-client