$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa File: bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa (raw, json) Hash identifier: rEcZh/hpf0UYkJfluwUrLMIU77juX87JddFRIhtkMHk= Subject key identifier: 7E:BA:7E:DA:07:AC:C5:52:3E:21:21:7E:06:98:6D:1E:50:52:09:F4 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584D80FFE6BA8E2D282CA7BA36C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 13414 IP address blocks: 199.59.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e6:ba:8e:2d:28:2c:a7:ba:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=f44b14e9-9d76-4c05-bc21-f020ccf26f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:02:d2:01:eb:03:16:81:7f:ee:89:4f:d2: db:0a:54:89:68:33:47:25:d1:47:c6:25:bf:d0:14: e4:ec:0b:d7:3b:16:18:92:8b:90:50:b0:b0:f8:e0: 7a:bf:c2:c0:34:ec:0c:3f:f2:0c:6d:e0:57:dc:ed: fb:e0:93:1f:67:e2:4f:7d:b6:02:25:82:e0:dd:9a: 89:ba:c9:78:5c:3c:48:cd:fc:4d:5b:f8:32:c2:43: 1c:d6:cb:41:ea:a9:01:1e:43:d5:fd:23:17:04:b2: 92:29:ed:c6:d4:d3:ec:37:9b:b8:4d:5b:09:1e:d2: 50:c6:61:4e:0a:ad:1e:91:08:e4:11:a0:49:cd:65: 7b:b8:43:fb:49:4f:ec:10:35:06:56:e7:96:4a:e8: 26:9e:75:da:26:48:fe:00:6f:27:ab:38:0a:d9:27: 1c:cc:ce:1a:27:24:b1:0d:8d:c3:02:fb:75:8d:2f: fd:ff:54:69:03:81:16:22:20:1d:64:7a:e3:8e:97: 92:84:a6:75:45:5a:46:57:e8:e6:b9:38:4c:80:a3: 20:b6:90:a2:bf:8e:e5:ff:94:cf:4b:37:d0:24:f7: da:0a:7c:52:f9:08:b9:3a:ab:d1:22:79:35:1f:eb: 86:5f:40:9d:83:de:f0:0f:66:a7:fa:08:df:c4:b3: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BA:7E:DA:07:AC:C5:52:3E:21:21:7E:06:98:6D:1E:50:52:09:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bf849ed2-fab8-38cb-b44f-85cdfd0ab483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:28:d1:5e:2f:cf:61:c7:81:2b:f7:08:d8:65:25:b6:38:41: b1:49:5e:e2:bb:1d:a2:ed:28:78:05:44:2e:0c:ef:2a:8f:e3: 19:9e:c4:e7:21:05:ba:8d:c0:7f:6f:15:ff:9e:78:2a:dd:b2: 5c:f7:b8:51:5b:d1:b7:72:24:4f:ff:8f:12:09:e0:a2:e8:c1: bc:d7:01:a2:9c:06:67:ef:7d:72:79:be:51:a5:92:21:bc:2d: 9d:ac:80:70:b1:58:b9:70:68:bc:0c:4f:11:59:9d:98:ad:c5: 0a:71:01:45:64:ae:22:f8:67:79:f0:91:ed:a1:f6:e2:a0:63: 7a:ff:a3:74:a7:40:49:04:43:7f:93:95:5b:01:32:e3:35:61: 76:83:de:d7:f0:48:9e:f6:e1:7e:da:d5:7c:90:95:8e:f4:ab: 92:51:a7:3f:26:d5:b5:c7:9f:22:22:b9:88:2a:55:10:3d:7d: 16:bb:3b:37:03:34:ce:14:51:f7:a5:cc:69:9c:85:a0:f7:26: 3f:19:47:99:3e:a4:8e:c6:74:4c:5f:70:8c:38:90:0d:13:64: f8:4f:18:99:37:be:72:ea:7d:a6:be:91:86:e7:9b:4e:1b:49: 62:e3:85:3e:61:6d:c5:7f:c8:c4:95:6b:25:44:4a:03:dd:ac: bd:a3:ff:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+a6ji0oLKe6NsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZjQ0YjE0ZTktOWQ3Ni00YzA1LWJjMjEtZjAyMGNjZjI2ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7EC0gHrAxaBf+6JT9LbClSJaDNHJdFHxiW/ 0BTk7AvXOxYYkouQULCw+OB6v8LANOwMP/IMbeBX3O374JMfZ+JPfbYCJYLg3ZqJ usl4XDxIzfxNW/gywkMc1stB6qkBHkPV/SMXBLKSKe3G1NPsN5u4TVsJHtJQxmFO Cq0ekQjkEaBJzWV7uEP7SU/sEDUGVueWSugmnnXaJkj+AG8nqzgK2ScczM4aJySx DY3DAvt1jS/9/1RpA4EWIiAdZHrjjpeShKZ1RVpGV+jmuThMgKMgtpCiv47l/5TP SzfQJPfaCnxS+Qi5OqvRInk1H+uGX0Cdg97wD2an+gjfxLP6ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH66ftoHrMVSPiEhfgaYbR5QUgn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYmY4NDllZDItZmFiOC0z OGNiLWI0NGYtODVjZGZkMGFiNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0o0V4vz2HHgSv3CNhlJbY4QbFJXuK7HaLtKHgFRC4M7yqP4xmexOch BbqNwH9vFf+eeCrdslz3uFFb0bdyJE//jxIJ4KLowbzXAaKcBmfvfXJ5vlGlkiG8 LZ2sgHCxWLlwaLwMTxFZnZitxQpxAUVkriL4Z3nwke2h9uKgY3r/o3SnQEkEQ3+T lVsBMuM1YXaD3tfwSJ724X7a1XyQlY70q5JRpz8m1bXHnyIiuYgqVRA9fRa7OzcD NM4UUfelzGmchaD3Jj8ZR5k+pI7GdExfcIw4kA0TZPhPGJk3vnLqfaa+kYbnm04b SWLjhT5hbcV/yMSVayVESgPdrL2j/0c= -----END CERTIFICATE-----Generated at Fri Apr 17 17:05:19 2026 by rpki-client