$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa File: b72371d5-0193-3c24-ba87-0c8deffa2219.roa (raw, json) Hash identifier: caSzgNwLCwVz29Ue5PSUQL+uV289UBeBp5RmZ8ZG5II= Subject key identifier: F3:58:A3:12:E4:07:C8:C3:89:3D:A7:BC:AD:4B:99:69:85:86:53:E6 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584D80FFE718E6AB68376EDBB480 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 13414 IP address blocks: 199.16.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e7:18:e6:ab:68:37:6e:db:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=a4f20cce-b475-4dd8-a61a-779fa6b44cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:9d:d5:bb:3a:53:4d:f7:a6:ec:c3:35:9e: 47:3f:93:f1:e7:2c:58:f1:3f:09:e7:31:9f:ec:48: 03:04:3d:18:b7:fb:3c:60:b8:8d:61:cf:1c:4b:19: 12:5e:d8:57:ba:1e:bd:40:36:c9:06:8f:6a:a5:66: cd:f6:62:8b:35:b2:b1:72:e5:ae:c0:a7:30:c1:0e: 5c:42:af:68:3f:aa:e0:8b:64:44:fe:b7:7c:5a:3e: 7a:55:96:83:d1:cb:1b:43:78:eb:b5:6f:91:f7:be: 8d:8b:08:d4:b5:2e:fd:b1:3c:2d:cf:1f:41:53:e5: 40:f3:dd:cf:6d:c9:07:51:ba:62:00:16:b3:27:9a: 56:c9:de:59:b2:36:42:e9:94:6a:62:b7:a2:03:96: 0e:0a:a0:03:18:23:01:b6:f3:6e:77:ed:eb:d0:c2: 14:d0:02:e0:20:1e:e3:ed:b7:55:55:0d:8f:64:f0: 51:a4:76:a1:06:05:34:3d:c1:d2:84:ab:f5:b4:24: 00:1c:3e:ce:ca:f5:52:2f:71:72:00:9a:02:1c:a9: 48:80:8a:b7:29:55:3b:ce:d3:ad:3d:88:24:f8:25: 33:45:d3:54:82:97:7c:ce:43:74:12:a2:96:79:69: 16:61:9c:77:7c:25:44:fa:d5:5f:17:f1:8d:4b:55: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:58:A3:12:E4:07:C8:C3:89:3D:A7:BC:AD:4B:99:69:85:86:53:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:be:49:8a:e7:cd:ba:45:9a:fd:46:d8:99:36:34:a5:d9:83: 2d:67:bf:62:47:ba:f8:9d:ea:c6:43:52:40:29:e9:ad:a0:5f: c9:31:ed:c4:b5:f5:ba:3b:7c:5b:a6:91:35:0d:7a:22:a8:98: 17:0f:7f:3e:65:76:2b:5c:6f:31:03:6b:4f:39:2f:40:0b:18: d2:cc:55:1b:9f:dd:e1:d6:76:54:14:2c:86:da:1f:75:99:27: dd:d0:dd:1c:96:99:95:23:53:70:db:ff:7a:f0:b0:30:f1:48: de:9b:33:5a:1a:3b:7d:52:8d:43:34:d0:51:0c:4d:3b:8b:a0: d5:ec:b3:19:64:43:57:6e:db:07:1d:76:bc:4b:d4:de:0a:fd: 84:6e:3f:81:c6:01:c5:92:d7:91:60:9a:f5:fe:0a:d9:09:12: 28:ba:62:03:91:71:9e:ed:d9:ab:3c:c2:75:e5:c6:fe:ab:2c: 8f:84:f5:5d:2a:a3:11:f2:d7:85:53:a9:25:59:8e:a2:26:e6: b4:b9:cc:f0:ed:e6:96:8f:74:e8:62:88:ae:ae:81:38:32:61: 51:9b:75:ca:a4:d1:1a:4c:a2:17:c1:a6:b2:e3:34:68:b3:8e: 97:c4:b2:2c:ae:7c:89:b1:2a:bb:ae:a6:5b:63:ea:5d:89:be: bb:e1:40:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+cY5qtoN27btIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YTRmMjBjY2UtYjQ3NS00ZGQ4LWE2MWEtNzc5ZmE2YjQ0Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfWd1bs6U033puzDNZ5HP5Px5yxY8T8J5zGf 7EgDBD0Yt/s8YLiNYc8cSxkSXthXuh69QDbJBo9qpWbN9mKLNbKxcuWuwKcwwQ5c Qq9oP6rgi2RE/rd8Wj56VZaD0csbQ3jrtW+R976NiwjUtS79sTwtzx9BU+VA893P bckHUbpiABazJ5pWyd5ZsjZC6ZRqYreiA5YOCqADGCMBtvNud+3r0MIU0ALgIB7j 7bdVVQ2PZPBRpHahBgU0PcHShKv1tCQAHD7OyvVSL3FyAJoCHKlIgIq3KVU7ztOt PYgk+CUzRdNUgpd8zkN0EqKWeWkWYZx3fCVE+tVfF/GNS1XAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNYoxLkB8jDiT2nvK1LmWmFhlPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYjcyMzcxZDUtMDE5My0z YzI0LWJhODctMGM4ZGVmZmEyMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2+SYrnzbpFmv1G2Jk2NKXZgy1nv2JHuvid6sZDUkAp6a2gX8kx7cS1 9bo7fFumkTUNeiKomBcPfz5lditcbzEDa085L0ALGNLMVRuf3eHWdlQULIbaH3WZ J93Q3RyWmZUjU3Db/3rwsDDxSN6bM1oaO31SjUM00FEMTTuLoNXssxlkQ1du2wcd drxL1N4K/YRuP4HGAcWS15FgmvX+CtkJEii6YgORcZ7t2as8wnXlxv6rLI+E9V0q oxHy14VTqSVZjqIm5rS5zPDt5paPdOhiiK6ugTgyYVGbdcqk0RpMohfBprLjNGiz jpfEsiyufImxKruupltj6l2JvrvhQEU= -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:10 2026 by rpki-client