$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa File: 13c7705c-5068-3193-a68c-a2e387dab614.roa (raw, json) Hash identifier: BAovP+3sE+zkUcOwyklnovMMMeRo6VWUgrcyQGT9xNw= Subject key identifier: E4:D6:6A:39:13:DE:1A:EF:05:90:73:77:4C:92:C3:E3:EC:53:18:0A Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584D869549C2A2B8127CCE4C6630 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 36329 IP address blocks: 199.36.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:49:c2:a2:b8:12:7c:ce:4c:66:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=2ba1286b-78a7-490a-990f-9d211a4ba22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:36:15:9e:2e:e7:90:5a:f9:c4:50:40:28: da:cd:81:3c:01:13:a5:1e:9c:d9:c2:1b:a9:e4:5c: 45:f3:f4:06:58:2d:46:20:22:f5:f0:1b:53:8c:2b: aa:ca:fa:59:fe:d6:a1:68:b3:4c:f5:d5:42:0f:57: 4a:a8:3a:49:14:08:fe:4f:fa:62:02:9e:f1:7a:57: 04:d6:2a:7e:6a:3f:d7:e6:0a:d9:d6:f9:db:e7:b2: a7:fd:bf:0d:37:c7:73:66:1f:92:2f:17:8c:b8:fe: 17:14:49:70:cf:20:a4:39:ac:60:17:de:80:18:f6: e6:f1:db:4b:94:6f:d2:f9:de:5b:cc:10:37:ec:b4: dd:41:42:16:6d:02:81:39:39:23:30:62:9a:ca:96: 1b:d5:48:73:48:4f:47:1d:e5:72:4d:2f:be:d9:9d: 88:ee:c7:4d:5c:3c:a0:43:a9:26:34:e8:56:dd:ce: 14:75:b9:f4:08:13:d1:63:a1:2a:72:6e:d3:34:52: 18:77:df:86:20:d7:da:33:db:a1:d0:58:aa:13:1f: 44:6b:0a:12:1a:5a:ae:ec:8e:98:71:21:75:38:b0: 18:36:fd:55:76:c8:74:66:e9:fc:37:fd:3e:bd:57: e6:b9:45:07:69:71:fc:e4:73:9d:c8:42:50:d0:f9: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:6A:39:13:DE:1A:EF:05:90:73:77:4C:92:C3:E3:EC:53:18:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 199.36.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f5:2c:e2:74:b6:01:41:04:69:93:6c:b4:ee:61:07:d2:ab: bf:7b:af:31:56:5a:30:a4:01:10:b4:1c:10:43:9a:50:b5:51: d2:fa:f8:fb:65:00:bc:45:0a:f2:af:73:6e:81:b7:bc:0b:06: a0:dd:5c:ce:c5:e5:a8:cc:ad:7a:97:34:5a:5c:22:de:32:d2: 4c:33:d5:d2:33:d8:cf:47:03:f9:74:b7:63:98:e7:2c:09:8a: bb:3c:25:1a:aa:95:30:63:04:6e:4c:c2:d1:47:2f:94:8c:7d: 06:ee:41:ee:ad:67:8c:46:c8:69:c5:4a:3b:19:42:6f:ee:8d: b9:ab:48:b9:55:8e:fb:6b:58:02:ba:ec:8f:7c:b1:e4:a9:25: 6c:ae:34:47:82:1d:66:fa:95:c9:b8:6b:4d:ea:98:24:7d:97: 65:3a:3f:32:85:f9:c4:bf:50:c1:c3:b3:fa:b0:d0:f8:dc:a1: 73:e6:e5:9a:c4:ce:68:ac:cb:d7:b4:d5:7b:7e:9b:5c:9c:a6: 33:d0:64:b6:e1:cf:7a:5e:5e:81:23:7f:3f:23:e8:ad:1e:b9: 86:b1:52:19:0a:69:11:10:4d:a6:0d:8f:7d:bf:ee:2c:25:49: 31:36:31:6c:95:c2:c4:90:fd:ba:e0:e3:df:a6:53:31:1a:47: 39:97:08:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUnCorgSfM5MZjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MmJhMTI4NmItNzhhNy00OTBhLTk5MGYtOWQyMTFhNGJhMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksI2FZ4u55Ba+cRQQCjazYE8AROlHpzZwhup 5FxF8/QGWC1GICL18BtTjCuqyvpZ/tahaLNM9dVCD1dKqDpJFAj+T/piAp7xelcE 1ip+aj/X5grZ1vnb57Kn/b8NN8dzZh+SLxeMuP4XFElwzyCkOaxgF96AGPbm8dtL lG/S+d5bzBA37LTdQUIWbQKBOTkjMGKaypYb1UhzSE9HHeVyTS++2Z2I7sdNXDyg Q6kmNOhW3c4Udbn0CBPRY6Eqcm7TNFIYd9+GINfaM9uh0FiqEx9EawoSGlqu7I6Y cSF1OLAYNv1Vdsh0Zun8N/0+vVfmuUUHaXH85HOdyEJQ0PmdiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTWajkT3hrvBZBzd0ySw+PsUxgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMTNjNzcwNWMtNTA2OC0z MTkzLWE2OGMtYTJlMzg3ZGFiNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxySkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKn1LOJ0tgFBBGmTbLTuYQfSq797rzFWWjCkARC0HBBDmlC1UdL6+Ptl ALxFCvKvc26Bt7wLBqDdXM7F5ajMrXqXNFpcIt4y0kwz1dIz2M9HA/l0t2OY5ywJ irs8JRqqlTBjBG5MwtFHL5SMfQbuQe6tZ4xGyGnFSjsZQm/ujbmrSLlVjvtrWAK6 7I98seSpJWyuNEeCHWb6lcm4a03qmCR9l2U6PzKF+cS/UMHDs/qw0PjcoXPm5ZrE zmisy9e01Xt+m1ycpjPQZLbhz3peXoEjfz8j6K0euYaxUhkKaREQTaYNj32/7iwl STE2MWyVwsSQ/brg49+mUzEaRzmXCAk= -----END CERTIFICATE-----Generated at Fri Apr 17 18:41:24 2026 by rpki-client