$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa File: 680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa (raw, json) Hash identifier: WxddVJ7Faj19q0xcx4fJMI8KGbS2yPhPBxkbfItw/3c= Subject key identifier: 9A:B5:48:40:AE:8F:C7:C7:8A:09:A3:4F:4D:D1:D7:94:5B:3A:47:5B Certificate issuer: /CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Certificate serial: 010D0C9F4328584D86955E656AAC2AF4C2C1F320 Authority key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 11700 IP address blocks: 199.71.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:5e:65:6a:ac:2a:f4:c2:c1:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=aa76aec1-bb52-4def-8429-5f4d5c0be5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:13:16:54:24:09:45:2d:8b:7a:1b:78:a6: d6:59:f4:57:8b:48:d9:0b:c7:9a:a8:a0:04:cb:ea: 8a:4e:f2:ed:c7:19:60:24:11:7c:55:ac:50:37:fb: a3:24:0c:cf:82:7d:36:2b:c5:67:dd:f7:af:44:e5: 5d:36:13:51:b5:c9:89:b1:de:5b:0a:4d:09:a3:4a: b5:81:41:2a:f3:9a:c4:1f:d3:3c:6a:3c:16:68:db: 29:1e:8c:75:27:11:55:e7:43:cf:54:48:5e:14:79: 36:c1:47:72:18:9f:c8:ca:81:d5:18:0d:f1:57:a9: 6b:d1:17:93:6a:32:09:1b:e8:18:70:c5:ad:f3:dd: 0f:2d:b4:9f:69:d2:9d:5d:68:c6:62:ac:43:fe:7f: c8:13:48:04:e5:ad:80:42:69:cc:13:12:59:bb:9f: 32:f7:59:b4:91:33:d4:7d:f9:1b:75:13:2a:28:1b: c7:36:10:d7:0e:77:5c:60:bf:2b:90:87:32:7c:51: 0f:9a:b1:63:b1:a0:38:42:40:57:92:f4:24:5f:65: 72:2c:14:e4:35:33:cd:37:2c:f9:9e:8c:7c:16:55: ef:71:67:ae:5d:9a:f1:33:4e:b3:4e:2f:70:fd:85: ff:0c:61:19:35:16:f3:cb:cd:dc:81:82:db:a8:12: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B5:48:40:AE:8F:C7:C7:8A:09:A3:4F:4D:D1:D7:94:5B:3A:47:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl X509v3 Authority Key Identifier: keyid:18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer sbgp-ipAddrBlock: critical IPv4: 199.71.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:22:0a:24:c5:3a:26:12:01:c8:9e:6b:d7:b6:0c:73:16:bc: ac:9f:9e:08:13:75:3a:40:46:46:17:69:6d:cc:b2:d6:a3:6f: 9c:2e:b2:d7:e6:b8:d7:16:9a:a9:7f:d2:92:c9:e4:4a:ea:8b: 34:53:32:77:8d:ee:b7:72:29:a2:d5:38:3f:27:e3:c4:8b:1d: 2f:81:5f:e7:bd:26:56:df:b4:bb:c6:3e:16:19:a5:ac:26:16: 92:2f:ab:59:60:74:0b:f4:09:09:3c:46:aa:bd:b9:64:11:9b: 01:d9:fd:aa:66:c9:e2:54:67:00:5a:36:25:e9:7e:37:4d:f2: 54:36:8b:5a:b8:57:19:ec:ee:53:0e:42:86:28:ca:f5:89:ca: f3:5b:14:1a:78:0d:03:5b:ef:cb:33:79:50:9d:d0:56:02:f1: ab:8b:66:b6:3b:85:26:63:1f:d6:80:83:05:1d:11:19:71:59: 1a:4b:97:8a:0b:75:e3:af:06:6f:62:48:33:26:76:ec:50:b2: 4d:1b:5a:43:d3:42:99:20:e0:c4:fb:2e:19:8e:7d:c7:c4:3b: 16:00:f2:dc:fd:38:a0:4b:2d:4a:f6:63:9d:7d:60:dc:e5:20: bc:b4:1c:5c:74:fd:7c:42:fe:8a:a9:48:48:16:1b:bc:e2:00: dd:02:16:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlV5laqwq9MLB8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhMzdiN2QtMDc2NS00ZTE1LTk1NTgtYzViMzgwMGNh N2NlMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YWE3NmFlYzEtYmI1Mi00ZGVmLTg0MjktNWY0ZDVjMGJlNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD0TFlQkCUUti3obeKbWWfRXi0jZC8eaqKAE y+qKTvLtxxlgJBF8VaxQN/ujJAzPgn02K8Vn3fevROVdNhNRtcmJsd5bCk0Jo0q1 gUEq85rEH9M8ajwWaNspHox1JxFV50PPVEheFHk2wUdyGJ/IyoHVGA3xV6lr0ReT ajIJG+gYcMWt890PLbSfadKdXWjGYqxD/n/IE0gE5a2AQmnMExJZu58y91m0kTPU ffkbdRMqKBvHNhDXDndcYL8rkIcyfFEPmrFjsaA4QkBXkvQkX2VyLBTkNTPNNyz5 nox8FlXvcWeuXZrxM06zTi9w/YX/DGEZNRbzy83cgYLbqBI1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq1SECuj8fHigmjT03R15RbOkdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEz N2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIzODAwY2E3Y2UvNjgwYWQ2ZjMtN2YzNi0z YmI5LTkzYjctMDQ2YmRmMWVlMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjhhMzdiN2QtMDc2NS00ZTE1LTk1 NTgtYzViMzgwMGNhN2NlLzI4YTM3YjdkLTA3NjUtNGUxNS05NTU4LWM1YjM4MDBj YTdjZS5jcmwwHwYDVR0jBBgwFoAUGGLEvhIC8MouVlYY/vkUCpEAX08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEzN2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIz ODAwY2E3Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0cMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0iCiTFOiYSAciea9e2DHMWvKyfnggTdTpARkYXaW3Mstajb5wustfm uNcWmql/0pLJ5ErqizRTMneN7rdyKaLVOD8n48SLHS+BX+e9JlbftLvGPhYZpawm FpIvq1lgdAv0CQk8Rqq9uWQRmwHZ/apmyeJUZwBaNiXpfjdN8lQ2i1q4Vxns7lMO QoYoyvWJyvNbFBp4DQNb78szeVCd0FYC8auLZrY7hSZjH9aAgwUdERlxWRpLl4oL deOvBm9iSDMmduxQsk0bWkPTQpkg4MT7LhmOfcfEOxYA8tz9OKBLLUr2Y519YNzl ILy0HFx0/XxC/oqpSEgWG7ziAN0CFh8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:46 2026 by rpki-client