$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa File: b86e1712-c465-324d-b026-de233c4ea59c.roa (raw, json) Hash identifier: GJ3eb7dN9+dRMblw4uLiyUu8I+ciWxNvWtViwgA2yG4= Subject key identifier: ED:F8:40:05:F5:1B:54:D0:07:C8:22:EC:81:D5:04:30:1E:6E:9D:E2 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584D80FFE25B2454B92B3D840B80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 13414 IP address blocks: 199.16.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e2:5b:24:54:b9:2b:3d:84:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=705e261c-2631-459b-a836-06301b74e0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:29:f0:cf:5d:f4:4a:4f:a8:1f:84:ef:56: 4f:da:a4:a3:a0:93:5d:c5:a0:fb:8a:e4:7f:55:97: 35:0d:59:39:62:0d:cc:71:50:a7:69:6a:11:8e:26: b3:7a:4d:40:93:6c:dc:be:0c:aa:ce:93:c3:e3:aa: ec:1e:18:ce:f2:7b:26:81:8b:fc:de:b5:c2:7b:69: 1b:15:83:3f:98:f4:3d:20:3e:5d:fd:3c:49:a4:d2: d1:c0:06:48:2d:7e:e6:d8:55:2b:d0:69:74:d5:c3: 63:24:86:f8:70:1d:fe:53:e4:01:f6:cb:cc:87:54: f5:bd:20:03:1e:61:ca:f7:c6:67:6e:e1:ef:74:78: 27:9c:f2:4c:b2:6f:41:31:91:c2:f2:c4:f1:93:e6: d4:38:3b:5f:b4:ef:db:de:7d:6d:69:aa:f4:95:3a: 33:cb:70:f1:0e:3e:01:df:46:70:e3:e3:57:db:54: f2:f0:cf:76:8f:55:b6:81:70:7e:0e:5a:d5:07:57: 8e:df:2d:7b:d4:7e:06:17:b8:8f:2a:8d:86:dc:73: db:09:bb:49:86:08:a6:b4:6e:52:3e:e5:cf:7e:6d: 1d:11:10:47:11:8c:fd:33:c3:93:95:47:ab:fe:51: 61:67:81:49:1a:de:21:ea:9b:0f:5c:34:38:3e:71: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F8:40:05:F5:1B:54:D0:07:C8:22:EC:81:D5:04:30:1E:6E:9D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b86e1712-c465-324d-b026-de233c4ea59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3d:4b:d9:f0:b6:7b:55:82:17:08:97:ad:b9:9a:f5:b3:79: 36:8d:06:55:72:2d:47:63:42:1b:65:ca:34:23:f8:cb:d7:d6: 77:cc:1d:4a:f9:f7:00:9e:68:03:40:ce:be:6e:31:93:c5:a5: 42:ca:cd:a6:4c:0f:5d:99:93:7f:1e:a7:72:00:52:0d:68:2f: 0a:7a:81:bc:12:03:28:e1:e0:a4:e0:d1:89:3d:bc:c4:51:ae: 86:60:55:58:31:df:c8:0e:4b:c3:43:5e:e0:75:a3:de:0d:d0: ce:d1:3c:1d:68:e4:d7:76:ed:ba:dc:88:a4:55:7d:2b:01:e5: 7c:c8:12:00:61:57:06:87:d5:47:f7:95:cd:1d:92:4e:42:5d: 5c:91:39:f2:69:e7:1e:21:e4:92:71:0c:47:a0:b1:50:e8:45: a7:35:4e:f3:3a:8f:a5:da:68:f9:86:92:0d:73:8e:ab:cf:5a: fb:cf:7b:61:fa:6f:18:3b:5d:3e:69:66:4e:06:01:4e:20:a8: 4b:3f:90:b4:d0:37:2c:50:a4:8f:16:25:6b:97:27:a4:46:8b: 2c:a1:94:e4:4e:dd:a1:84:a2:eb:7f:e2:63:8c:12:df:71:0c: 29:b3:98:df:60:39:2e:a5:76:92:d7:67:7e:ed:0d:11:78:89: 1e:56:4d:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+JbJFS5Kz2EC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NzA1ZTI2MWMtMjYzMS00NTliLWE4MzYtMDYzMDFiNzRlMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufcp8M9d9EpPqB+E71ZP2qSjoJNdxaD7iuR/ VZc1DVk5Yg3McVCnaWoRjiazek1Ak2zcvgyqzpPD46rsHhjO8nsmgYv83rXCe2kb FYM/mPQ9ID5d/TxJpNLRwAZILX7m2FUr0Gl01cNjJIb4cB3+U+QB9svMh1T1vSAD HmHK98ZnbuHvdHgnnPJMsm9BMZHC8sTxk+bUODtftO/b3n1taar0lTozy3DxDj4B 30Zw4+NX21Ty8M92j1W2gXB+DlrVB1eO3y171H4GF7iPKo2G3HPbCbtJhgimtG5S PuXPfm0dERBHEYz9M8OTlUer/lFhZ4FJGt4h6psPXDQ4PnEAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO34QAX1G1TQB8gi7IHVBDAebp3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYjg2ZTE3MTItYzQ2NS0z MjRkLWIwMjYtZGUyMzNjNGVhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw9S9nwtntVghcIl625mvWzeTaNBlVyLUdjQhtlyjQj+MvX1nfMHUr5 9wCeaANAzr5uMZPFpULKzaZMD12Zk38ep3IAUg1oLwp6gbwSAyjh4KTg0Yk9vMRR roZgVVgx38gOS8NDXuB1o94N0M7RPB1o5Nd27brciKRVfSsB5XzIEgBhVwaH1Uf3 lc0dkk5CXVyROfJp5x4h5JJxDEegsVDoRac1TvM6j6XaaPmGkg1zjqvPWvvPe2H6 bxg7XT5pZk4GAU4gqEs/kLTQNyxQpI8WJWuXJ6RGiyyhlORO3aGEout/4mOMEt9x DCmzmN9gOS6ldpLXZ37tDRF4iR5WTS4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:52:25 2026 by rpki-client