$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa File: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (raw, json) Hash identifier: 1qK7RUxhDRYDGiU9xMWv5jxYnYdHGLVMa2YIORG0nt0= Subject key identifier: F3:41:5E:13:49:20:20:D8:40:85:5C:70:B9:2D:12:A3:3B:FF:5A:7A Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009 Certificate serial: 010D0C9F4328584D8AC54A7B95CD88AB43A32000 Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 40460 IP address blocks: 199.182.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4a:7b:95:cd:88:ab:43:a3:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=3720e3da-3689-4fc7-955e-ee3bb49fbe72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:94:4c:ed:37:81:c8:7a:82:7f:94:36:1c: cd:89:9b:67:b2:f9:39:52:12:b2:ef:3f:54:30:4a: 88:8e:a7:11:b0:48:3e:15:cd:d0:11:97:da:c7:28: 13:38:49:c1:6c:28:e6:9b:09:9e:1e:56:7c:5d:60: 5b:69:02:33:e8:1c:7e:c7:09:1f:13:41:ce:26:19: cc:43:48:2b:65:15:35:8b:0e:91:d2:d9:b9:5c:b2: 30:eb:38:81:d3:e3:c6:d7:58:e1:46:c4:04:10:0a: 6d:9d:d7:85:61:cb:fa:49:53:37:a8:73:f9:3a:a2: b3:79:9f:1b:70:fd:5b:87:bb:58:7e:cc:34:12:95: 28:fb:0a:bd:5b:b6:47:f7:45:82:0d:ad:6a:c2:0a: af:bb:fb:15:d3:e4:60:8d:46:9b:7f:62:f8:e4:2d: bf:e6:b3:0b:ea:19:19:17:5b:1f:c7:d2:3c:24:28: 3d:d9:04:a9:30:9c:4d:96:85:63:78:b0:99:aa:55: 72:e3:73:36:9e:9b:d6:1a:d7:a7:3b:a7:52:35:2f: 33:a3:18:fe:89:e7:6c:46:27:51:48:3e:fa:d5:b5: 8a:1f:df:cb:a5:7b:48:59:33:78:8f:a4:48:56:24: 6d:8a:8c:41:51:52:be:f8:cb:81:d9:d9:fc:e6:d3: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:41:5E:13:49:20:20:D8:40:85:5C:70:B9:2D:12:A3:3B:FF:5A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl X509v3 Authority Key Identifier: keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer sbgp-ipAddrBlock: critical IPv4: 199.182.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0d:d2:bc:b4:e0:5b:aa:ab:e9:f7:f1:83:d1:7f:fe:9b:c8: 04:f4:5e:0a:24:8e:2d:c8:98:44:02:85:ba:78:a5:dd:cc:71: e8:31:f9:d8:d5:7c:6f:1d:8b:c2:d3:92:33:34:9b:1f:4b:ba: a6:36:61:c3:12:cf:01:79:ba:c0:a5:95:94:17:11:91:c6:6a: e8:40:14:65:7b:e0:c7:8f:eb:f8:0e:14:6c:8a:0e:69:42:c9: 65:03:8d:a0:88:d8:19:4c:fa:42:7e:46:2f:f5:af:0b:77:76: e5:6b:76:ab:a6:43:85:cc:d9:cb:d4:c4:53:d3:b5:5d:e2:33: 8d:d9:d9:78:f4:6c:07:97:d1:6f:24:b6:30:6c:a2:d3:80:ca: 1f:d4:f4:cc:aa:a5:35:da:77:d9:b0:4f:69:ac:15:04:cf:7c: 75:c6:89:78:80:0e:ab:95:9b:29:cb:8c:bb:a9:1f:75:bf:25: 38:f9:2b:ee:05:25:b1:b0:ca:3a:fd:18:e0:2a:fe:f5:79:07: da:0f:f5:d2:bc:2a:af:35:ab:2c:24:3b:ed:ae:2c:0b:18:73: 32:3f:43:e8:77:8a:f2:17:c2:4c:72:f0:c6:e5:e5:6f:8e:39: ba:c3:b3:d4:57:87:8a:8c:e6:1a:85:1d:1c:54:11:b3:a3:45: c6:45:78:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUp7lc2Iq0OjIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNTQ4YTktZTE3Mi00MWEzLTkyNWEtNjA5ZTkzMWQw MDA5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzcyMGUzZGEtMzY4OS00ZmM3LTk1NWUtZWUzYmI0OWZiZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif6UTO03gch6gn+UNhzNiZtnsvk5UhKy7z9U MEqIjqcRsEg+Fc3QEZfaxygTOEnBbCjmmwmeHlZ8XWBbaQIz6Bx+xwkfE0HOJhnM Q0grZRU1iw6R0tm5XLIw6ziB0+PG11jhRsQEEAptndeFYcv6SVM3qHP5OqKzeZ8b cP1bh7tYfsw0EpUo+wq9W7ZH90WCDa1qwgqvu/sV0+RgjUabf2L45C2/5rML6hkZ F1sfx9I8JCg92QSpMJxNloVjeLCZqlVy43M2npvWGtenO6dSNS8zoxj+iedsRidR SD761bWKH9/LpXtIWTN4j6RIViRtioxBUVK++MuB2dn85tPn4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNBXhNJICDYQIVccLktEqM7/1p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1 NDhhOS1lMTcyLTQxYTMtOTI1YS02MDllOTMxZDAwMDkvZDNjNWRmM2UtZjJlNC0z NjEzLTk2MjYtMjY1YTcyYTZkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNTQ4YTktZTE3Mi00MWEzLTky NWEtNjA5ZTkzMWQwMDA5LzNiYjU0OGE5LWUxNzItNDFhMy05MjVhLTYwOWU5MzFk MDAwOS5jcmwwHwYDVR0jBBgwFoAUFkV4gX9FTzzMRxgL5Nkx0UiTiwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1NDhhOS1lMTcyLTQxYTMtOTI1YS02MDll OTMxZDAwMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7a8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoN0ry04Fuqq+n38YPRf/6byAT0Xgokji3ImEQChbp4pd3Mcegx+djV fG8di8LTkjM0mx9LuqY2YcMSzwF5usCllZQXEZHGauhAFGV74MeP6/gOFGyKDmlC yWUDjaCI2BlM+kJ+Ri/1rwt3duVrdqumQ4XM2cvUxFPTtV3iM43Z2Xj0bAeX0W8k tjBsotOAyh/U9MyqpTXad9mwT2msFQTPfHXGiXiADquVmynLjLupH3W/JTj5K+4F JbGwyjr9GOAq/vV5B9oP9dK8Kq81qywkO+2uLAsYczI/Q+h3ivIXwkxy8Mbl5W+O ObrDs9RXh4qM5hqFHRxUEbOjRcZFeFk= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:37 2026 by rpki-client