$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa File: c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa (raw, json) Hash identifier: 0D9WEGk8TmHr6IHsTMP9GXxW32BwGNCkZru1zPHFdv8= Subject key identifier: 86:1F:11:62:97:85:A4:BD:62:E6:E2:A4:4A:FD:5A:E7:A8:A1:90:4D Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584D80FFE2023C10B8D69AC7C480 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 13414 IP address blocks: 199.59.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e2:02:3c:10:b8:d6:9a:c7:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=f5a515a8-447d-418f-8f7e-31de3906582e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:78:f4:37:16:7d:57:f7:83:d3:f8:2b:5f:2d: 89:aa:b6:07:ed:b2:d4:90:af:dd:0e:bf:30:27:f2: bc:76:a7:ca:7a:84:68:79:cf:64:66:ee:5e:12:2c: 29:93:10:56:c9:6a:36:1f:53:fa:ad:5a:05:e2:97: 34:12:63:d5:23:fb:22:9d:f4:70:04:26:22:86:f8: b0:27:e0:65:aa:f9:fd:27:66:7b:45:04:0d:aa:97: da:6d:f0:2b:85:c5:fc:52:3e:b9:73:3a:f8:e9:6d: ba:8c:2a:c3:75:32:43:f9:eb:de:83:3f:36:3f:4b: 33:1d:c8:e6:eb:98:55:ba:e8:44:b6:4d:5c:99:46: 7d:2b:9a:4c:ed:7e:53:a1:a1:98:54:eb:09:97:26: 7e:eb:0d:64:23:83:c3:a5:3b:f3:99:47:e7:ef:a7: bb:14:03:7c:d9:cf:2b:7a:18:7f:a9:96:aa:c6:de: 24:23:48:1e:43:a5:95:a4:ab:63:c4:12:be:29:d1: e9:e6:70:6e:ea:c9:26:be:e9:51:54:bc:62:2c:78: 55:38:23:11:88:9b:e7:ef:a4:9e:d5:ef:6e:5f:47: e7:17:2e:a0:cb:7a:6c:8e:9e:3d:1b:17:e8:ee:fe: 38:f6:aa:fd:64:6e:31:66:4d:03:a4:de:14:d9:66: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:11:62:97:85:A4:BD:62:E6:E2:A4:4A:FD:5A:E7:A8:A1:90:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/c9b0e5a9-82aa-3d96-8d85-80d2f2aa5931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.59.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e1:63:45:88:60:1f:a4:c9:7d:aa:4e:61:92:1e:50:1e:b6: 65:c3:ff:54:25:43:f8:f7:3d:11:d0:40:d6:53:42:86:b2:18: 62:d7:6c:da:34:3e:c6:54:83:93:81:3e:1e:1d:bc:0a:a0:b6: a6:f8:f8:c2:c1:75:13:95:e3:0b:fc:79:1c:4a:b4:93:e8:5c: 1d:53:f6:74:99:f8:36:66:b2:d5:d2:dd:fc:6d:ef:96:67:cb: 92:b5:cf:8a:ab:76:53:80:48:b1:a5:3d:2e:88:ed:17:7f:7b: 60:30:f6:19:1d:b2:7c:18:d1:81:fa:2e:3b:fb:2f:11:e6:94: 17:a6:c0:3d:b7:16:a1:31:b0:01:08:da:3d:f6:d3:95:84:e0: 28:2a:3a:bd:79:8c:60:1a:e5:35:99:e7:3a:c4:34:a7:9b:73: 0b:33:b3:49:7c:ef:58:50:30:fc:94:c5:9a:1b:8a:ea:54:fe: 65:5b:dc:25:ef:1e:cd:b0:dc:6c:3b:1e:4a:8d:38:a4:48:9b: 9d:e8:8b:32:02:1c:62:bc:98:d2:88:b4:9c:5d:76:e5:b8:31: 41:24:c0:0b:51:2e:3e:1e:2e:a6:9f:30:04:94:a3:1e:65:9d: 11:0c:13:b0:85:04:91:02:5c:7f:01:12:b0:ce:9a:63:fa:98: a8:1e:a3:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+ICPBC41prHxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZjVhNTE1YTgtNDQ3ZC00MThmLThmN2UtMzFkZTM5MDY1ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXj0NxZ9V/eD0/grXy2JqrYH7bLUkK/dDr8w J/K8dqfKeoRoec9kZu5eEiwpkxBWyWo2H1P6rVoF4pc0EmPVI/sinfRwBCYihviw J+Blqvn9J2Z7RQQNqpfabfArhcX8Uj65czr46W26jCrDdTJD+evegz82P0szHcjm 65hVuuhEtk1cmUZ9K5pM7X5ToaGYVOsJlyZ+6w1kI4PDpTvzmUfn76e7FAN82c8r ehh/qZaqxt4kI0geQ6WVpKtjxBK+KdHp5nBu6skmvulRVLxiLHhVOCMRiJvn76Se 1e9uX0fnFy6gy3psjp49Gxfo7v449qr9ZG4xZk0DpN4U2WZd/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYfEWKXhaS9YubipEr9WueooZBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYzliMGU1YTktODJhYS0z ZDk2LThkODUtODBkMmYyYWE1OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzuXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPhY0WIYB+kyX2qTmGSHlAetmXD/1QlQ/j3PRHQQNZTQoayGGLXbNo0 PsZUg5OBPh4dvAqgtqb4+MLBdROV4wv8eRxKtJPoXB1T9nSZ+DZmstXS3fxt75Zn y5K1z4qrdlOASLGlPS6I7Rd/e2Aw9hkdsnwY0YH6Ljv7LxHmlBemwD23FqExsAEI 2j3205WE4CgqOr15jGAa5TWZ5zrENKebcwszs0l871hQMPyUxZobiupU/mVb3CXv Hs2w3Gw7HkqNOKRIm53oizICHGK8mNKItJxdduW4MUEkwAtRLj4eLqafMASUox5l nREME7CFBJECXH8BErDOmmP6mKgeo/k= -----END CERTIFICATE-----Generated at Fri Apr 17 17:05:16 2026 by rpki-client