$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa File: c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa (raw, json) Hash identifier: JbEKbJsCDxnJn9s62/dCZwe8I/3cTXbMoMW2GTlty3w= Subject key identifier: C3:23:AC:7E:88:16:BD:34:F3:E6:D8:B7:D0:4C:CC:1A:15:89:DF:45 Certificate issuer: /CN=bd417297-965f-4fd0-82f0-a774a3ef359e Certificate serial: 010D0C9F4328584D7E3534ED4F77D8B612F33FC0 Authority key identifier: 0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 19318 IP address blocks: 199.88.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:34:ed:4f:77:d8:b6:12:f3:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd417297-965f-4fd0-82f0-a774a3ef359e Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=8c5cbac1-6cb9-4f83-842a-113bc84f48f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:02:65:53:78:dd:ef:1b:46:a5:86:5c:fe:93: 30:89:17:2b:33:35:e9:48:94:0e:d7:c6:1f:0b:27: 9c:69:49:44:25:44:af:2d:08:85:f1:49:2d:30:95: 2a:f8:2e:11:94:29:0b:a0:ca:75:7a:01:36:70:38: e4:eb:9b:08:59:30:c4:f0:5d:af:74:8a:f0:61:b6: a0:72:09:a4:98:f6:d8:8a:42:64:63:da:ab:d1:a8: 58:c0:2f:c1:18:ad:25:6d:aa:d5:bc:d3:18:a3:b9: 8e:bf:20:8e:41:ec:c1:3d:2a:8e:15:93:9c:a2:74: 26:48:b7:88:80:b7:6a:8a:e1:5f:92:d3:a4:d0:22: 6b:e7:99:6b:b8:17:4a:56:19:21:0c:db:01:55:61: e2:38:cc:a0:c2:83:03:04:fc:11:dc:92:57:ba:b2: a5:ba:18:1a:ad:fe:37:73:41:d5:7d:4e:fd:3a:fd: cc:ff:57:56:6d:0d:08:37:e5:2d:36:e0:78:95:e0: 11:8e:e0:cc:78:d6:39:72:04:b5:7f:8b:3c:de:e7: 68:a6:5f:8c:50:dd:0a:9a:63:e1:73:58:28:e2:22: 5a:72:a3:da:3f:63:15:ce:7b:cf:9b:44:5b:49:30: 42:8f:0d:08:4b:79:7c:1f:67:00:a7:26:69:83:de: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:AC:7E:88:16:BD:34:F3:E6:D8:B7:D0:4C:CC:1A:15:89:DF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl X509v3 Authority Key Identifier: keyid:0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer sbgp-ipAddrBlock: critical IPv4: 199.88.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d9:e8:70:65:b9:c2:52:93:98:0e:f3:bd:b4:24:d7:b3:ab: 1f:0a:0e:13:9e:d3:4a:da:58:b2:2c:51:9f:4f:20:62:b8:1e: 34:96:29:e0:7e:1b:50:8d:8b:ec:17:1a:60:3b:5d:d8:05:ac: ed:51:95:fb:50:90:dc:30:21:0e:24:59:f9:fd:27:60:71:01: b3:ae:96:da:7a:15:7e:57:36:cb:26:b1:36:b8:95:9b:7b:60: 09:21:34:64:ae:48:75:5a:38:ca:77:03:b4:65:68:e4:cb:5f: c1:6d:e5:67:67:4b:e2:26:09:8d:7e:65:5a:78:c2:da:ba:39: 1d:08:5c:84:a6:11:55:51:3d:f9:cd:d5:15:a6:fe:67:d3:16: 84:de:e6:f5:d2:ae:df:5f:a5:f5:12:17:23:b9:8f:dc:ef:13: a1:fa:7e:8c:35:ab:07:b7:1d:a9:14:16:a7:8f:8b:13:0d:f4: 80:47:08:4e:e1:44:51:d1:ca:be:04:8c:b5:17:28:9c:ba:82: 05:55:a4:e0:16:c5:2d:28:40:0a:46:03:aa:69:64:ef:5a:97: fa:66:e0:7a:84:aa:24:6d:c3:37:ab:b6:ef:5f:27:ac:f7:2a: da:f5:56:47:16:7a:0b:34:09:7e:e5:0e:72:bf:56:64:90:f5: ab:98:fc:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NTTtT3fYthLzP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0MTcyOTctOTY1Zi00ZmQwLTgyZjAtYTc3NGEzZWYz NTllMB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk OGM1Y2JhYzEtNmNiOS00ZjgzLTg0MmEtMTEzYmM4NGY0OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gJlU3jd7xtGpYZc/pMwiRcrMzXpSJQO18Yf CyecaUlEJUSvLQiF8UktMJUq+C4RlCkLoMp1egE2cDjk65sIWTDE8F2vdIrwYbag cgmkmPbYikJkY9qr0ahYwC/BGK0lbarVvNMYo7mOvyCOQezBPSqOFZOconQmSLeI gLdqiuFfktOk0CJr55lruBdKVhkhDNsBVWHiOMygwoMDBPwR3JJXurKluhgarf43 c0HVfU79Ov3M/1dWbQ0IN+UtNuB4leARjuDMeNY5cgS1f4s83udopl+MUN0KmmPh c1go4iJacqPaP2MVznvPm0RbSTBCjw0IS3l8H2cApyZpg9692wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMjrH6IFr008+bYt9BMzBoVid9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQx NzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0YTNlZjM1OWUvYzk5YTJmNjktZmIyZS0z OGUzLThjZjEtNDE3ZTVhMDE2MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmQ0MTcyOTctOTY1Zi00ZmQwLTgy ZjAtYTc3NGEzZWYzNTllL2JkNDE3Mjk3LTk2NWYtNGZkMC04MmYwLWE3NzRhM2Vm MzU5ZS5jcmwwHwYDVR0jBBgwFoAUCoB/q4BfE61qX0Nq3dOrLISw87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQxNzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0 YTNlZjM1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1jyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLZ6HBlucJSk5gO8720JNezqx8KDhOe00raWLIsUZ9PIGK4HjSWKeB+ G1CNi+wXGmA7XdgFrO1RlftQkNwwIQ4kWfn9J2BxAbOultp6FX5XNssmsTa4lZt7 YAkhNGSuSHVaOMp3A7RlaOTLX8Ft5WdnS+ImCY1+ZVp4wtq6OR0IXISmEVVRPfnN 1RWm/mfTFoTe5vXSrt9fpfUSFyO5j9zvE6H6fow1qwe3HakUFqePixMN9IBHCE7h RFHRyr4EjLUXKJy6ggVVpOAWxS0oQApGA6ppZO9al/pm4HqEqiRtwzertu9fJ6z3 Ktr1VkcWegs0CX7lDnK/VmSQ9auY/Do= -----END CERTIFICATE-----Generated at Fri Apr 17 09:44:53 2026 by rpki-client