$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa File: aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa (raw, json) Hash identifier: QznD4angfN14miqeP9oPoV/QqGKXtxqHqosRo4rllyY= Subject key identifier: 3C:AC:26:1A:22:5D:7A:DE:B5:A2:88:46:42:C3:2D:4A:15:B5:7C:F4 Certificate issuer: /CN=4f12be01-5f55-4434-8f8a-921808f7c306 Certificate serial: 010D0C9F4328584D5024EFCEDCD25E4D6C529C80 Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 62582 IP address blocks: 199.5.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:ef:ce:dc:d2:5e:4d:6c:52:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=1b4951d6-1f41-497f-b94e-f401726ba89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:15:8c:4b:63:0e:b8:d7:63:28:e0:4f:57: 83:18:4e:2e:c2:fb:79:8e:90:b0:be:3c:4a:68:e9: 33:c7:d3:52:09:09:d6:e2:82:7f:53:7e:2c:cf:3e: 6f:d3:27:93:ea:8b:f0:dd:75:7c:73:c8:2e:ba:02: 0a:af:a4:52:fa:4d:89:ad:ad:e6:8a:d7:84:02:fc: c7:17:e2:3b:bc:74:41:46:52:05:1e:de:cb:1d:b4: da:fc:31:52:fc:5c:a6:0d:da:79:9c:50:05:63:d5: 2c:ff:b8:d6:9e:a0:c3:a3:92:25:bd:fc:01:30:14: 26:c9:5f:62:f0:a4:95:de:0f:67:d0:83:7b:54:d5: da:69:79:4c:1d:b6:6b:1c:c5:54:f1:d0:91:ef:7a: b3:31:6f:96:00:64:c8:3d:11:75:15:b3:bb:5f:ba: 1f:e9:55:42:a4:88:53:37:a0:84:ca:b5:fd:45:51: 23:24:4c:e5:30:10:80:63:5d:f2:1b:4e:8c:c8:dd: 5b:b8:a3:d7:27:9f:53:b3:e5:84:c6:96:cb:81:1f: f2:66:b9:76:f0:9e:9a:bd:37:aa:12:15:b8:e5:24: 9c:a8:19:8c:d7:ed:1a:96:57:8e:4d:20:f3:e3:5d: d5:49:a9:54:43:6d:f9:79:19:5b:de:b4:e2:a6:c0: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:26:1A:22:5D:7A:DE:B5:A2:88:46:42:C3:2D:4A:15:B5:7C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/aa90e09e-8113-3e33-beae-1a3b47cdc2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl X509v3 Authority Key Identifier: keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer sbgp-ipAddrBlock: critical IPv4: 199.5.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ef:11:3f:e5:92:cb:dd:82:ce:09:f4:93:5e:e3:82:ae:82: d6:77:fc:59:68:ca:5a:cd:cf:d8:64:82:af:63:a1:c4:c2:1b: be:db:b5:bb:f6:bc:df:30:69:f7:43:7e:fc:9b:de:cc:6e:15: 3f:4d:31:bb:5f:e8:52:ee:7a:86:0c:03:c9:43:12:39:34:ca: fb:45:98:d0:c1:90:dd:54:7a:8f:d9:e2:e6:27:7f:1c:f9:04: a5:9b:9c:33:c9:01:c4:69:9b:4f:9f:8e:25:15:b4:d5:d8:d0: 25:d8:ce:ca:f1:f7:3a:88:5f:08:6d:d0:c5:bb:b0:1d:1e:4e: c8:8e:0a:d9:da:6b:51:6a:3f:95:6f:ee:36:14:43:95:9f:6e: 18:2d:2d:da:f2:46:c2:5c:52:f8:42:6e:d9:a6:f7:f2:52:ad: 89:a5:b8:26:5d:76:7f:1f:d5:e3:37:93:13:f5:d9:c1:dc:72: f2:1a:f2:ff:97:08:f3:d9:0f:14:70:f1:3d:b9:85:e3:3c:7b: be:91:d5:13:03:c1:2c:74:c7:24:14:c7:04:cd:87:54:98:36: 47:2c:94:e4:5d:ef:42:d1:f7:a1:9f:bc:49:68:07:21:bb:c7: 3e:7e:02:07:28:44:ba:9d:94:3f:d2:aa:3f:58:1e:a3:9f:8f: bf:01:4c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJO/O3NJeTWxSnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj MzA2MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk MWI0OTUxZDYtMWY0MS00OTdmLWI5NGUtZjQwMTcyNmJhODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8MVjEtjDrjXYyjgT1eDGE4uwvt5jpCwvjxK aOkzx9NSCQnW4oJ/U34szz5v0yeT6ovw3XV8c8guugIKr6RS+k2Jra3miteEAvzH F+I7vHRBRlIFHt7LHbTa/DFS/FymDdp5nFAFY9Us/7jWnqDDo5IlvfwBMBQmyV9i 8KSV3g9n0IN7VNXaaXlMHbZrHMVU8dCR73qzMW+WAGTIPRF1FbO7X7of6VVCpIhT N6CEyrX9RVEjJEzlMBCAY13yG06MyN1buKPXJ59Ts+WExpbLgR/yZrl28J6avTeq EhW45SScqBmM1+0alleOTSDz413VSalUQ235eRlb3rTipsBrMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDysJhoiXXretaKIRkLDLUoVtXz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvYWE5MGUwOWUtODExMy0z ZTMzLWJlYWUtMWEzYjQ3Y2RjMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3 YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4 MDhmN2MzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7vET/lksvdgs4J9JNe44KugtZ3/FloylrNz9hkgq9jocTCG77btbv2 vN8wafdDfvyb3sxuFT9NMbtf6FLueoYMA8lDEjk0yvtFmNDBkN1Ueo/Z4uYnfxz5 BKWbnDPJAcRpm0+fjiUVtNXY0CXYzsrx9zqIXwht0MW7sB0eTsiOCtnaa1FqP5Vv 7jYUQ5WfbhgtLdryRsJcUvhCbtmm9/JSrYmluCZddn8f1eM3kxP12cHccvIa8v+X CPPZDxRw8T25heM8e76R1RMDwSx0xyQUxwTNh1SYNkcslORd70LR96GfvEloByG7 xz5+AgcoRLqdlD/Sqj9YHqOfj78BTFc= -----END CERTIFICATE-----Generated at Fri Apr 17 17:49:07 2026 by rpki-client