$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/5df263c3-7966-383e-9017-2c06bb14e11c.roa File: 5df263c3-7966-383e-9017-2c06bb14e11c.roa (raw, json) Hash identifier: o32vwyyAZwOqNHEU2B2n0QJ/sdAQvrAvHC+oLliZKqI= Subject key identifier: E0:0B:58:05:BB:1D:F3:80:F6:02:7C:67:7B:7E:F6:A1:44:EB:24:C7 Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Certificate serial: 010D0C9F4328584D6ADD813F1F817EE35A3E5680 Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/5df263c3-7966-383e-9017-2c06bb14e11c.roa Signing time: Mon 06 Apr 2026 14:43:34 +0000 ROA not before: Mon 06 Apr 2026 14:43:34 +0000 ROA not after: Sun 05 Jul 2026 14:43:34 +0000 asID: 26042 IP address blocks: 199.241.32.0/24 maxlen: 24 199.241.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:dd:81:3f:1f:81:7e:e3:5a:3e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Validity Not Before: Apr 6 14:43:34 2026 GMT Not After : Jul 5 14:43:34 2026 GMT Subject: CN=d99f4709-fa6f-40d6-a47d-785f9975d1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:a5:da:f2:6b:42:31:c6:e9:d1:43:c1:cd: b7:19:b0:00:ee:59:06:17:b3:16:20:4b:92:c5:c8: 1b:79:cd:ee:a1:90:a6:32:5e:de:0f:b4:05:9f:1f: 44:ae:e8:01:3e:31:ed:64:33:f6:0a:b0:fa:e9:9a: ac:21:4f:3d:13:ee:3c:2d:3a:2d:09:32:9b:4c:ce: e7:ca:39:cd:da:e5:d8:f6:01:97:81:8e:09:4a:13: e9:2b:a7:6e:6e:e5:2d:be:0f:55:b4:37:ac:27:4b: 53:6a:4b:d7:13:77:d8:0c:a2:57:2b:e6:b2:55:fc: 86:24:3e:e1:ac:7a:5e:1e:0e:59:97:25:b0:2c:d5: fe:6f:27:3f:ab:db:f6:13:86:2b:c7:af:dc:4b:31: a8:77:a4:90:fc:78:46:24:08:ae:ea:95:30:fb:ad: f7:bd:97:79:2c:29:b2:12:6b:2a:44:3b:81:32:58: c4:56:84:33:79:89:31:a7:6d:cf:bd:c3:1a:c1:22: c8:e6:5f:ce:0c:33:72:09:d8:da:8a:3a:ed:e3:1b: d1:50:b1:39:7f:57:a2:30:db:60:05:68:5f:c9:d9: 6d:5e:49:cf:06:f6:5f:2d:df:01:19:05:75:78:be: cd:f8:17:c2:e9:cd:3f:56:3e:fc:2f:9d:36:85:bf: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:58:05:BB:1D:F3:80:F6:02:7C:67:7B:7E:F6:A1:44:EB:24:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/5df263c3-7966-383e-9017-2c06bb14e11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl X509v3 Authority Key Identifier: keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer sbgp-ipAddrBlock: critical IPv4: 199.241.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:54:de:c9:b8:41:02:23:1c:22:99:aa:72:02:89:b8:ec:69: 18:0a:64:7d:cc:e5:09:ea:26:78:02:d0:8e:e7:06:30:31:eb: 33:24:ab:bb:24:8d:9f:74:85:8c:f4:87:99:90:53:05:a2:4b: e3:41:15:fd:b5:07:f2:49:4a:02:2f:34:fd:69:d2:db:dc:68: 24:f6:df:3e:2b:1c:28:e7:cb:3b:99:6a:1e:0d:99:69:74:d6: 30:19:0a:62:97:a6:9d:b9:60:6d:cf:1a:8d:ae:fe:4b:a6:85: 8d:92:aa:02:fd:b9:67:e1:fa:7e:1d:50:58:95:9e:40:ea:0c: 4d:79:f7:de:62:56:7c:25:ff:6e:71:e1:ca:43:0a:c1:46:15: bf:73:10:73:7f:cd:7c:d4:06:dd:ba:6d:ce:b8:fe:25:a6:17: 4b:0b:29:97:06:1d:53:d3:81:88:ec:b0:09:51:e7:25:35:8b: b7:e1:d7:37:32:ba:92:cc:c6:9a:5a:d7:b4:3a:55:cb:4b:7e: 52:e9:4f:9a:51:60:79:c2:00:ea:4c:20:fe:99:7f:20:57:f6: c4:34:80:a6:77:8a:8e:6b:7c:eb:0f:a5:e4:b3:cf:a4:a4:d5: c1:94:aa:ce:fd:9d:87:01:31:a9:da:49:63:97:26:19:a7:44: f0:63:73:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1q3YE/H4F+41o+VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi MWEyMB4XDTI2MDQwNjE0NDMzNFoXDTI2MDcwNTE0NDMzNFowLzEtMCsGA1UEAxMk ZDk5ZjQ3MDktZmE2Zi00MGQ2LWE0N2QtNzg1Zjk5NzVkMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm6l2vJrQjHG6dFDwc23GbAA7lkGF7MWIEuS xcgbec3uoZCmMl7eD7QFnx9ErugBPjHtZDP2CrD66ZqsIU89E+48LTotCTKbTM7n yjnN2uXY9gGXgY4JShPpK6dubuUtvg9VtDesJ0tTakvXE3fYDKJXK+ayVfyGJD7h rHpeHg5ZlyWwLNX+byc/q9v2E4Yrx6/cSzGod6SQ/HhGJAiu6pUw+633vZd5LCmy EmsqRDuBMljEVoQzeYkxp23PvcMawSLI5l/ODDNyCdjaijrt4xvRULE5f1eiMNtg BWhfydltXknPBvZfLd8BGQV1eL7N+BfC6c0/Vj78L502hb8TrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOALWAW7HfOA9gJ8Z3t+9qFE6yTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvNWRmMjYzYzMtNzk2Ni0z ODNlLTkwMTctMmMwNmJiMTRlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk MTBiYmIxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/EgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhU3sm4QQIjHCKZqnICibjsaRgKZH3M5QnqJngC0I7nBjAx6zMkq7sk jZ90hYz0h5mQUwWiS+NBFf21B/JJSgIvNP1p0tvcaCT23z4rHCjnyzuZah4NmWl0 1jAZCmKXpp25YG3PGo2u/kumhY2SqgL9uWfh+n4dUFiVnkDqDE15995iVnwl/25x 4cpDCsFGFb9zEHN/zXzUBt26bc64/iWmF0sLKZcGHVPTgYjssAlR5yU1i7fh1zcy upLMxppa17Q6VctLflLpT5pRYHnCAOpMIP6ZfyBX9sQ0gKZ3io5rfOsPpeSzz6Sk 1cGUqs79nYcBManaSWOXJhmnRPBjcz8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:00:45 2026 by rpki-client