$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/656200c3-44fc-3bd5-b2cf-de2fb7e3f379.roa File: 656200c3-44fc-3bd5-b2cf-de2fb7e3f379.roa (raw, json) Hash identifier: hk/IGQYShBfzmdP1/xoK4M9y6d6FUP5GPfxe84c0lNs= Subject key identifier: C5:8B:C5:4F:19:92:7D:19:FB:B5:FF:65:6A:BD:2F:87:84:1A:65:83 Certificate issuer: /CN=7b881d7c-479b-4ae4-80c2-a2995524b9ae Certificate serial: 010D0C9F4328584D72DEAB4823B56B9F7DCB9B00 Authority key identifier: A7:95:A6:99:1B:D8:BE:AA:90:24:79:19:2A:8F:A9:2B:23:ED:90:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/656200c3-44fc-3bd5-b2cf-de2fb7e3f379.roa Signing time: Thu 09 Apr 2026 11:32:23 +0000 ROA not before: Thu 09 Apr 2026 11:32:23 +0000 ROA not after: Wed 08 Jul 2026 11:32:23 +0000 asID: 399468 IP address blocks: 199.15.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:72:de:ab:48:23:b5:6b:9f:7d:cb:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b881d7c-479b-4ae4-80c2-a2995524b9ae Validity Not Before: Apr 9 11:32:23 2026 GMT Not After : Jul 8 11:32:23 2026 GMT Subject: CN=1f065d2b-43e8-4975-bf41-2cfd9aa66359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:02:55:2a:c9:a2:c6:75:21:35:67:63:ed: 54:af:40:16:f5:bc:00:4f:dd:40:9a:78:ac:08:29: 64:da:cd:1b:c6:7a:9c:2b:76:45:30:16:4d:20:c3: b2:10:bd:56:28:54:c8:17:b0:1c:d8:8d:a6:aa:f4: ae:ff:f9:5c:95:83:a0:a2:f5:b3:8c:7b:28:72:bc: 54:79:de:fe:a6:ce:a8:b6:66:ce:1f:15:2f:f5:02: a6:98:c4:23:95:17:8e:ee:de:a7:e4:ce:7d:5a:de: 0a:17:47:a3:2e:74:2b:13:f6:06:19:22:ab:86:bb: d0:d5:11:92:2e:83:98:c6:71:fa:66:52:c8:e6:0b: 38:c1:fe:f1:24:1e:ad:54:a7:a2:c1:1e:e3:9c:1f: 07:d3:b0:67:8a:bd:b8:35:65:96:b7:64:31:e4:c1: 4b:8d:15:55:a8:cf:e2:92:00:ac:f8:dd:fa:b2:c9: 12:ca:f1:e5:0a:9f:71:1a:0f:26:85:0c:2f:bd:b4: 27:07:74:b1:5c:49:43:13:60:e9:7b:76:58:f6:53: 6c:51:d5:12:94:c2:3a:d9:b8:87:53:c3:9c:55:d6: 6b:1a:f0:5d:9e:46:f9:0b:00:68:c6:b0:ea:cb:52: 0b:8a:d7:c4:8c:7c:53:63:87:7b:d9:b8:d5:6a:57: ff:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:C5:4F:19:92:7D:19:FB:B5:FF:65:6A:BD:2F:87:84:1A:65:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/656200c3-44fc-3bd5-b2cf-de2fb7e3f379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.crl X509v3 Authority Key Identifier: keyid:A7:95:A6:99:1B:D8:BE:AA:90:24:79:19:2A:8F:A9:2B:23:ED:90:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer sbgp-ipAddrBlock: critical IPv4: 199.15.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b0:70:1a:78:b3:17:d7:d2:e0:15:d9:58:a8:cc:1a:34:fc: e1:27:c7:e8:19:47:f9:86:a1:3e:99:d4:40:c6:8c:0d:8b:30: 06:fe:97:aa:ef:8c:41:01:75:43:d0:59:19:bb:a4:f5:d0:d5: ae:be:4c:e2:92:23:fe:01:bd:0b:03:f6:4d:db:47:86:7d:2a: 97:bc:95:a8:54:4d:df:e6:4e:37:e2:80:2a:a7:73:0e:c2:77: a1:e5:24:b7:f2:6a:2a:40:61:91:7a:11:64:9c:17:0c:fe:1b: 0a:e0:0b:ee:af:45:79:07:d4:80:f7:83:c5:04:5b:f8:07:c8: 67:df:ac:2a:34:b9:e1:d2:fd:2c:19:e0:f1:ce:81:9d:2f:f0: c2:93:ea:19:98:d7:18:0a:bc:c0:e2:82:41:53:cb:7e:b7:3f: 77:c2:86:c1:8c:56:b3:33:6e:9f:1d:18:29:62:5c:37:2c:e2: e9:28:3d:20:9d:3c:87:fe:6d:b9:2f:c1:18:3f:ee:f3:42:9a: 22:48:93:2e:30:c2:79:06:5b:dd:63:6f:29:0e:9e:19:42:c9: d9:6d:ba:4e:cd:74:cb:56:1d:85:dd:bc:7d:98:63:04:32:86: 22:09:7f:ef:1c:f1:89:23:49:2b:17:df:df:d5:6c:ef:13:ef: 9d:3f:6c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1y3qtII7Vrn33LmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4ODFkN2MtNDc5Yi00YWU0LTgwYzItYTI5OTU1MjRi OWFlMB4XDTI2MDQwOTExMzIyM1oXDTI2MDcwODExMzIyM1owLzEtMCsGA1UEAxMk MWYwNjVkMmItNDNlOC00OTc1LWJmNDEtMmNmZDlhYTY2MzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkQCVSrJosZ1ITVnY+1Ur0AW9bwAT91Amnis CClk2s0bxnqcK3ZFMBZNIMOyEL1WKFTIF7Ac2I2mqvSu//lclYOgovWzjHsocrxU ed7+ps6otmbOHxUv9QKmmMQjlReO7t6n5M59Wt4KF0ejLnQrE/YGGSKrhrvQ1RGS LoOYxnH6ZlLI5gs4wf7xJB6tVKeiwR7jnB8H07Bnir24NWWWt2Qx5MFLjRVVqM/i kgCs+N36sskSyvHlCp9xGg8mhQwvvbQnB3SxXElDE2Dpe3ZY9lNsUdUSlMI62biH U8OcVdZrGvBdnkb5CwBoxrDqy1ILitfEjHxTY4d72bjValf/HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWLxU8Zkn0Z+7X/ZWq9L4eEGmWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83Yjg4 MWQ3Yy00NzliLTRhZTQtODBjMi1hMjk5NTUyNGI5YWUvNjU2MjAwYzMtNDRmYy0z YmQ1LWIyY2YtZGUyZmI3ZTNmMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2I4ODFkN2MtNDc5Yi00YWU0LTgw YzItYTI5OTU1MjRiOWFlLzdiODgxZDdjLTQ3OWItNGFlNC04MGMyLWEyOTk1NTI0 YjlhZS5jcmwwHwYDVR0jBBgwFoAUp5WmmRvYvqqQJHkZKo+pKyPtkC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83Yjg4MWQ3Yy00NzliLTRhZTQtODBjMi1hMjk5 NTUyNGI5YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxw/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuwcBp4sxfX0uAV2ViozBo0/OEnx+gZR/mGoT6Z1EDGjA2LMAb+l6rv jEEBdUPQWRm7pPXQ1a6+TOKSI/4BvQsD9k3bR4Z9Kpe8lahUTd/mTjfigCqncw7C d6HlJLfyaipAYZF6EWScFwz+GwrgC+6vRXkH1ID3g8UEW/gHyGffrCo0ueHS/SwZ 4PHOgZ0v8MKT6hmY1xgKvMDigkFTy363P3fChsGMVrMzbp8dGCliXDcs4ukoPSCd PIf+bbkvwRg/7vNCmiJIky4wwnkGW91jbykOnhlCydltuk7NdMtWHYXdvH2YYwQy hiIJf+8c8YkjSSsX39/VbO8T750/bNE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:25:45 2026 by rpki-client