$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa File: e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa (raw, json) Hash identifier: w9o16z025Te7dKvR6nUson8TkDuWHokMkogmei4OO2s= Subject key identifier: 40:09:41:24:6C:71:85:B2:47:1D:44:6F:29:78:CD:65:AB:84:46:92 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584D571FAF994DF146AD8E5CD900 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 12129 IP address blocks: 199.231.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:af:99:4d:f1:46:ad:8e:5c:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=bdc3ed7b-001c-4507-b84c-2ff9deaa0d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:81:31:f5:68:61:b7:7e:34:68:96:0b:21: d9:9f:47:63:b8:ee:5c:ff:e2:e7:e7:b7:bf:9d:36: 88:f3:44:87:fd:94:ee:6e:6a:29:62:5b:2a:69:8b: 04:f1:d8:38:55:3d:e2:72:11:66:ad:da:6d:10:68: 69:86:0d:30:a9:45:9b:26:0f:ab:db:a5:7e:cc:d0: fc:64:65:af:f3:ea:2f:06:5f:d4:9c:03:e9:4e:f4: 60:1e:d3:cf:f1:d2:c3:2d:17:ea:42:8b:84:03:e6: eb:ad:f0:d2:d3:49:4e:b2:62:ea:15:ca:8b:c1:09: 1b:a8:a7:fa:51:f5:52:59:ec:62:a4:fb:62:41:4d: 28:b9:e4:33:cb:1e:7c:38:62:89:3a:dd:09:ab:97: e1:94:52:23:95:b9:d7:a5:f7:70:52:8e:c1:86:29: e7:dd:9f:6b:2c:8a:c3:35:c4:63:cc:42:1b:97:ee: f5:10:7c:8e:20:4f:82:9d:3b:3d:64:9c:24:a3:2a: 08:dc:c8:54:3a:0a:23:68:4b:cc:41:62:ad:71:69: eb:eb:e8:ef:41:76:a8:d1:47:b3:5d:b0:19:ca:7b: fd:76:b0:c0:ff:e7:0a:19:44:a7:f0:75:2b:45:be: b5:ed:35:b1:a5:2a:45:68:75:cd:7a:ee:7a:3b:aa: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:09:41:24:6C:71:85:B2:47:1D:44:6F:29:78:CD:65:AB:84:46:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/e9c12cb6-83c6-36c7-9163-89ab2f55a7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 199.231.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f7:7a:b0:94:69:7e:d4:7f:9b:96:fb:b5:67:93:cd:4b:bb: f4:47:01:7d:69:70:c2:37:67:ef:39:8e:d2:85:37:e4:51:6a: a7:4d:16:10:b9:97:36:6f:28:8f:71:f6:37:f5:25:b6:31:03: 88:8d:a6:0c:75:57:0f:e7:13:94:bf:4a:96:8b:2b:1f:00:90: 3d:42:88:5f:d4:cc:e0:93:07:32:21:6b:53:9a:63:75:75:81: 92:5e:ba:ea:2b:bd:0b:73:de:20:4a:d8:d1:6b:7c:13:d5:45: 9b:14:53:29:28:dc:2b:3b:ee:f6:fc:db:07:29:95:5f:f0:0d: 6e:7e:50:7c:45:21:14:92:c1:ae:17:cf:82:5f:49:8f:5e:5c: 13:0f:c4:44:43:2c:5c:d6:6b:f7:91:a1:2e:76:d1:11:4c:77: 91:fe:81:da:44:8e:db:49:00:a2:d2:b2:e4:f2:f1:ef:f7:0a: fc:4d:8e:b4:45:9e:1f:de:11:1a:be:ad:22:3b:5f:98:64:a8: b4:1f:45:9f:73:51:b0:06:cc:f4:10:a7:63:73:48:62:a3:2e: 4a:56:d8:0a:d9:69:01:9b:3f:8c:fd:4a:39:6f:11:62:14:c1: a4:18:8c:ff:71:22:0d:03:e3:87:4c:9b:11:03:9a:ce:54:17: 46:98:03:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6+ZTfFGrY5c2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YmRjM2VkN2ItMDAxYy00NTA3LWI4NGMtMmZmOWRlYWEwZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+GBMfVoYbd+NGiWCyHZn0djuO5c/+Ln57e/ nTaI80SH/ZTubmopYlsqaYsE8dg4VT3ichFmrdptEGhphg0wqUWbJg+r26V+zND8 ZGWv8+ovBl/UnAPpTvRgHtPP8dLDLRfqQouEA+brrfDS00lOsmLqFcqLwQkbqKf6 UfVSWexipPtiQU0oueQzyx58OGKJOt0Jq5fhlFIjlbnXpfdwUo7Bhinn3Z9rLIrD NcRjzEIbl+71EHyOIE+CnTs9ZJwkoyoI3MhUOgojaEvMQWKtcWnr6+jvQXao0Uez XbAZynv9drDA/+cKGUSn8HUrRb617TWxpSpFaHXNeu56O6pqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAJQSRscYWyRx1Ebyl4zWWrhEaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZTljMTJjYjYtODNjNi0z NmM3LTkxNjMtODlhYjJmNTVhN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+c0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP3erCUaX7Uf5uW+7Vnk81Lu/RHAX1pcMI3Z+85jtKFN+RRaqdNFhC5 lzZvKI9x9jf1JbYxA4iNpgx1Vw/nE5S/SpaLKx8AkD1CiF/UzOCTBzIha1OaY3V1 gZJeuuorvQtz3iBK2NFrfBPVRZsUUyko3Cs77vb82wcplV/wDW5+UHxFIRSSwa4X z4JfSY9eXBMPxERDLFzWa/eRoS520RFMd5H+gdpEjttJAKLSsuTy8e/3CvxNjrRF nh/eERq+rSI7X5hkqLQfRZ9zUbAGzPQQp2NzSGKjLkpW2ArZaQGbP4z9SjlvEWIU waQYjP9xIg0D44dMmxEDms5UF0aYA+0= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:58 2026 by rpki-client