$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/449b177a-b3f4-37ea-949e-453399472d83.roa File: 449b177a-b3f4-37ea-949e-453399472d83.roa (raw, json) Hash identifier: pwxYhh7r07Nw4sVsy+DGASnINExGpUiOdbscHZRmk1c= Subject key identifier: 40:14:E2:89:4F:39:F4:23:4F:DA:00:E1:69:D8:83:7F:85:28:9A:96 Certificate issuer: /CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2 Certificate serial: 010D0C9F4328584DF640AF0CAA847C7C815D7D18 Authority key identifier: 88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/449b177a-b3f4-37ea-949e-453399472d83.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 399353 IP address blocks: 199.21.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:af:0c:aa:84:7c:7c:81:5d:7d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=6c57e0c4-4d1b-44ed-84d6-2f0fa2576f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:4c:f3:26:0c:b9:21:0f:54:85:62:14:94: fc:7d:c4:95:7d:43:c4:b1:1f:26:b9:02:b9:d6:5c: ef:fe:17:9e:0b:77:84:9f:38:6c:e5:23:fc:5d:77: e4:a6:c5:80:72:12:4d:75:1b:fb:9f:f6:be:80:a4: 72:5b:64:5a:60:c2:72:82:1c:9e:ac:bc:9a:04:ce: 2f:51:8f:d1:f0:b3:98:39:f9:1c:54:ec:85:d3:9b: 8d:80:92:86:56:e3:ad:f2:7a:c3:9f:33:4b:b8:cf: d0:77:04:20:2e:6f:6d:29:9e:8d:b3:8a:bc:07:0e: e2:ec:15:5c:a4:de:a9:eb:d7:b1:3e:16:74:63:f8: 65:e1:a2:7c:eb:9a:64:6d:6c:3b:27:6a:1f:b0:a1: 4d:c3:e9:61:90:4e:6e:14:20:2e:dc:33:b2:64:29: 81:d4:04:6e:ea:30:ed:80:ce:9b:73:d5:43:ec:e8: e0:b1:bb:83:8f:5a:44:79:0c:3f:ba:81:9f:cd:68: f4:bd:dc:26:2d:c2:23:94:d7:5a:65:f7:4b:bc:ac: 3a:84:ff:10:4e:da:28:61:9b:4c:9b:df:c9:01:84: 79:54:0e:af:da:f7:f4:17:47:8b:14:af:c5:ff:fb: 9b:2f:50:8f:87:9f:a8:88:04:ff:08:e9:72:ee:63: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:E2:89:4F:39:F4:23:4F:DA:00:E1:69:D8:83:7F:85:28:9A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/449b177a-b3f4-37ea-949e-453399472d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.crl X509v3 Authority Key Identifier: keyid:88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer sbgp-ipAddrBlock: critical IPv4: 199.21.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5c:62:12:9d:4c:07:d1:c9:01:2a:9d:64:70:8b:d1:d3:60: 18:01:8c:0e:a9:56:b8:e9:8b:16:af:99:94:96:6d:94:e1:85: 59:85:ff:69:ca:e9:bc:00:c3:6f:39:db:31:8b:ae:54:91:f7: 5c:e3:9d:cd:49:27:3a:f8:3e:9a:7b:64:7c:67:4d:f4:db:b1: ed:c3:c7:7e:ab:33:ee:ff:a1:03:5e:fe:98:57:4c:67:e5:16: a6:be:5a:13:d3:5f:ca:e6:a4:ce:01:f8:ef:ae:ea:9b:4f:5a: 3a:e4:c5:4c:ce:c8:ad:83:35:b4:ed:43:46:9c:00:b1:94:98: 58:91:d6:03:e2:09:e9:d0:e4:c4:2f:d8:ac:22:53:74:fc:a1: b6:00:a3:20:89:d3:cb:1f:fe:3a:4a:49:ef:d6:19:d3:d8:d0: f5:d3:29:82:9d:92:0b:9d:cb:f1:d7:cf:73:94:9f:40:46:57: ea:d4:91:b4:61:43:e7:a3:f3:75:99:85:e2:91:72:c9:3c:3e: a8:f4:31:3d:d5:45:2a:b0:06:04:49:cf:e1:54:d0:0d:67:4c: 84:2c:a3:c5:27:a4:bf:2e:ab:a2:bb:87:08:b6:84:55:13:b7: 20:66:2e:ab:69:aa:c4:f7:72:dc:f0:a8:93:1a:a9:43:f4:8e: b7:48:d5:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QK8MqoR8fIFdfRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMwY2ZiZjQtYjZhZC00ZjNhLThlZWMtZTM4MmRmMjkz OGMyMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk NmM1N2UwYzQtNGQxYi00NGVkLTg0ZDYtMmYwZmEyNTc2ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VRM8yYMuSEPVIViFJT8fcSVfUPEsR8muQK5 1lzv/heeC3eEnzhs5SP8XXfkpsWAchJNdRv7n/a+gKRyW2RaYMJyghyerLyaBM4v UY/R8LOYOfkcVOyF05uNgJKGVuOt8nrDnzNLuM/QdwQgLm9tKZ6Ns4q8Bw7i7BVc pN6p69exPhZ0Y/hl4aJ865pkbWw7J2ofsKFNw+lhkE5uFCAu3DOyZCmB1ARu6jDt gM6bc9VD7OjgsbuDj1pEeQw/uoGfzWj0vdwmLcIjlNdaZfdLvKw6hP8QTtooYZtM m9/JAYR5VA6v2vf0F0eLFK/F//ubL1CPh5+oiAT/COly7mNnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAU4olPOfQjT9oA4WnYg3+FKJqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYzBj ZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgyZGYyOTM4YzIvNDQ5YjE3N2EtYjNmNC0z N2VhLTk0OWUtNDUzMzk5NDcyZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWMwY2ZiZjQtYjZhZC00ZjNhLThl ZWMtZTM4MmRmMjkzOGMyL2FjMGNmYmY0LWI2YWQtNGYzYS04ZWVjLWUzODJkZjI5 MzhjMi5jcmwwHwYDVR0jBBgwFoAUiJO3mNz0q8Owq4URN01mRZBx2tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYzBjZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgy ZGYyOTM4YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1cYhKdTAfRyQEqnWRwi9HTYBgBjA6pVrjpixavmZSWbZThhVmF/2nK 6bwAw2852zGLrlSR91zjnc1JJzr4Ppp7ZHxnTfTbse3Dx36rM+7/oQNe/phXTGfl Fqa+WhPTX8rmpM4B+O+u6ptPWjrkxUzOyK2DNbTtQ0acALGUmFiR1gPiCenQ5MQv 2KwiU3T8obYAoyCJ08sf/jpKSe/WGdPY0PXTKYKdkgudy/HXz3OUn0BGV+rUkbRh Q+ej83WZheKRcsk8Pqj0MT3VRSqwBgRJz+FU0A1nTIQso8UnpL8uq6K7hwi2hFUT tyBmLqtpqsT3ctzwqJMaqUP0jrdI1RY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:00:58 2026 by rpki-client