$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa File: 4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa (raw, json) Hash identifier: GQIb2l5lshRGhoyqNc2SoNsybdDi9gPtfuXEUgjjPqg= Subject key identifier: 19:F0:FA:14:77:89:C1:BF:33:3F:B0:E9:F8:94:BB:59:B8:B3:AB:65 Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Certificate serial: 010D0C9F4328584D6EDA63B4B4ED22BAA2DD96C0 Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 212374 IP address blocks: 199.115.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:63:b4:b4:ed:22:ba:a2:dd:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=901647ca-d7d8-4b2e-88f5-3e9c607df737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:84:27:ab:cd:b4:e4:75:93:6c:56:a3:f2: 4d:dc:79:66:85:99:cf:18:22:f7:eb:45:2e:43:4f: b7:c9:b1:b3:27:f7:83:bd:b7:92:db:c6:d9:b2:4f: d5:5c:fe:3c:ab:2e:13:7b:66:6b:0b:91:5d:73:f1: be:f7:b0:3f:6e:45:7a:8b:69:19:6f:82:29:87:32: e0:b8:34:f4:14:28:d8:72:fa:74:bf:fc:1f:c3:30: 04:26:96:6c:29:c3:f3:ac:77:51:8c:42:f3:51:ad: 0b:d0:39:94:bd:b8:65:b2:23:50:7d:fe:33:5c:64: 72:a5:e4:1e:49:a6:68:9b:50:79:6e:42:86:e9:fe: 44:a2:c8:28:cd:5b:c6:c7:56:01:85:fb:fe:6c:84: 44:03:e9:95:31:b2:35:2c:86:29:ab:b3:57:62:98: 47:fe:2a:d4:ae:8b:33:c7:19:7f:8e:43:15:58:39: 85:cc:a4:ca:ae:01:72:d7:c5:57:b2:d9:fd:74:3a: db:06:63:40:a9:13:f0:d8:ac:11:ac:52:db:a0:d7: 24:16:18:75:49:37:ca:63:54:c6:7a:76:71:97:6b: f8:71:e7:4c:f5:39:a0:f4:b5:b6:d6:24:42:ff:e2: c4:9e:d5:5a:b9:13:75:e8:1e:a0:81:4e:58:ab:4f: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F0:FA:14:77:89:C1:BF:33:3F:B0:E9:F8:94:BB:59:B8:B3:AB:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4aaf3026-3e0c-3529-9427-7c3d9ffa19c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl X509v3 Authority Key Identifier: keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer sbgp-ipAddrBlock: critical IPv4: 199.115.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:eb:33:95:92:c9:4e:48:c2:3a:80:58:73:ef:61:c4:df:a2: e7:da:f9:8b:e4:c4:aa:12:e9:a6:eb:30:30:64:89:f7:4a:ee: 99:d4:d3:c9:e7:86:70:a8:53:00:7f:0e:6b:39:a3:d3:ea:3f: 69:c0:d5:d9:8d:da:a9:e1:c3:67:1e:d5:dc:af:8d:75:3d:95: 07:d8:ad:9e:25:ca:74:20:24:4e:6d:19:fd:f3:b6:10:af:1c: 88:b7:c7:68:9b:ed:3b:14:84:40:00:db:ac:d7:fa:28:ed:e6: 21:41:86:50:92:85:40:fd:ef:d1:6b:f7:c4:0c:ee:c6:e0:13: 15:c6:01:18:1d:18:c5:bd:88:2e:61:c2:78:bc:3a:96:29:f8: a7:a9:69:f8:79:a8:bb:bd:64:e4:a5:28:0f:69:dd:20:3b:00: d6:df:32:22:cb:7f:54:d2:54:a7:db:44:e6:c3:de:80:46:eb: 32:35:e7:1c:b9:5f:e6:5b:26:21:07:84:43:c8:39:b5:c0:d8: 74:1e:95:04:45:d2:55:63:be:2f:a7:39:b2:06:ae:5d:ac:2e: b9:85:83:3a:cb:f0:12:d3:3d:7e:0a:fc:ed:77:8b:c7:27:38: 6b:a1:51:ac:ab:e6:aa:b7:26:d7:85:8e:f0:12:ee:ec:2e:55: 99:b2:2e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mO0tO0iuqLdlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm MjE4MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk OTAxNjQ3Y2EtZDdkOC00YjJlLTg4ZjUtM2U5YzYwN2RmNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRuEJ6vNtOR1k2xWo/JN3HlmhZnPGCL360Uu Q0+3ybGzJ/eDvbeS28bZsk/VXP48qy4Te2ZrC5Fdc/G+97A/bkV6i2kZb4IphzLg uDT0FCjYcvp0v/wfwzAEJpZsKcPzrHdRjELzUa0L0DmUvbhlsiNQff4zXGRypeQe SaZom1B5bkKG6f5EosgozVvGx1YBhfv+bIREA+mVMbI1LIYpq7NXYphH/irUrosz xxl/jkMVWDmFzKTKrgFy18VXstn9dDrbBmNAqRPw2KwRrFLboNckFhh1STfKY1TG enZxl2v4cedM9Tmg9LW21iRC/+LEntVauRN16B6ggU5Yq08F6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnw+hR3icG/Mz+w6fiUu1m4s6tlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvNGFhZjMwMjYtM2UwYy0z NTI5LTk0MjctN2MzZDlmZmExOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3NoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvrM5WSyU5IwjqAWHPvYcTfoufa+YvkxKoS6abrMDBkifdK7pnU08nn hnCoUwB/Dms5o9PqP2nA1dmN2qnhw2ce1dyvjXU9lQfYrZ4lynQgJE5tGf3zthCv HIi3x2ib7TsUhEAA26zX+ijt5iFBhlCShUD979Fr98QM7sbgExXGARgdGMW9iC5h wni8OpYp+Kepafh5qLu9ZOSlKA9p3SA7ANbfMiLLf1TSVKfbRObD3oBG6zI15xy5 X+ZbJiEHhEPIObXA2HQelQRF0lVjvi+nObIGrl2sLrmFgzrL8BLTPX4K/O13i8cn OGuhUayr5qq3JteFjvAS7uwuVZmyLoc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:02 2026 by rpki-client