$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa File: b33f9824-1d22-3c11-b98f-82918021c09b.roa (raw, json) Hash identifier: gBuC+nv732V+T8fQXNA841mK1i51z6dZUxwgpFfXwfs= Subject key identifier: 76:44:7E:AE:9B:8E:4E:94:55:98:1A:B2:DE:1D:77:FD:D2:2D:36:E4 Certificate issuer: /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Certificate serial: 010D0C9F4328584D3DFFA69FFA685ACB49380480 Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 53429 IP address blocks: 199.68.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a6:9f:fa:68:5a:cb:49:38:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=c60d0611-4dd2-4429-9c1d-6c49e5267986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:f2:bb:1b:6b:21:84:40:36:2d:e4:37:a1: 41:4d:4d:7f:87:2b:2f:f9:dd:c9:3d:9b:b1:4b:35: ec:b7:f3:b6:ce:90:62:6d:a5:8c:a6:b2:39:11:56: ba:6e:1a:5f:13:46:66:58:5c:7b:ce:4d:b3:fd:77: 70:c7:3d:03:c4:09:50:20:41:f2:ce:e3:83:08:e9: 48:3a:39:74:94:a5:f6:df:bc:cf:d5:d3:5d:a5:6c: f5:73:19:f4:a2:ac:63:4b:1e:a1:13:e8:af:db:0e: 32:11:f9:2d:81:02:ef:45:5e:bb:e5:f9:e7:19:83: db:ac:be:08:99:42:7d:01:27:5d:4d:46:8a:fb:ad: b4:af:1d:e8:4a:1b:b6:1c:c0:6b:38:a1:ce:d4:f8: 52:ee:d6:6d:cf:9d:e1:5f:ad:84:dd:3e:c1:36:75: 03:bb:99:41:25:cd:cc:8e:03:79:fa:6c:0e:94:a5: 8d:0c:6d:cc:79:16:7e:db:43:f1:1b:2e:70:22:e9: 82:8f:13:1a:9c:6b:39:80:6a:32:de:5e:bd:9f:18: 1c:d0:12:e3:38:34:83:03:d0:8c:11:df:95:22:88: 5a:ab:83:bd:51:e4:01:a4:33:ee:a6:33:e7:6c:ba: 93:d1:94:57:a1:53:a5:b3:24:10:fb:fc:c5:03:12: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:44:7E:AE:9B:8E:4E:94:55:98:1A:B2:DE:1D:77:FD:D2:2D:36:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl X509v3 Authority Key Identifier: keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer sbgp-ipAddrBlock: critical IPv4: 199.68.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b8:6b:4c:c6:93:2b:d9:ed:56:dd:29:4a:28:60:5a:62:5a: 31:04:c4:be:a2:8c:74:e4:40:6a:4b:85:5d:ff:80:5d:f5:b9: 92:bb:fa:0b:0d:81:69:60:56:ae:b6:a6:fa:f5:3e:17:1e:ff: dd:5a:43:95:34:82:b1:d5:47:96:eb:91:7a:e3:b2:3e:f1:c1: 3a:c9:99:75:48:94:9e:0e:db:13:93:38:f6:69:69:3a:5f:94: 23:78:80:b9:64:1d:b4:51:89:55:5b:24:c0:d2:d8:42:bd:2b: 9a:57:bf:72:d1:32:b4:be:27:52:b8:5a:b6:f8:c3:27:8b:4f: 69:d5:1d:15:0b:65:36:b6:f8:30:22:23:7d:d6:ab:59:2a:3e: 0c:ca:18:ec:06:56:ce:08:9c:79:99:88:d1:46:6b:b4:63:2b: f6:4a:a7:65:01:c4:e5:24:21:15:21:32:a3:f2:96:d9:c9:78: 93:a2:70:40:48:97:13:1e:bf:d2:dc:5a:49:95:5a:cf:b6:99: 7e:bd:45:93:b4:aa:3d:83:f6:34:48:d7:ec:cf:5a:09:70:2f: fd:10:c6:d2:da:79:8e:69:34:d8:4b:92:4c:cf:3e:c8:86:fc: cd:d2:b4:54:29:a4:1d:82:9e:17:34:e2:47:c9:3e:60:c9:3d: 05:df:b0:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6af+mhay0k4BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2MzVkNmEtODYyMy00OTE4LTgyM2EtZGMxYWQ1NmVj MWJkMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YzYwZDA2MTEtNGRkMi00NDI5LTljMWQtNmM0OWU1MjY3OTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BryuxtrIYRANi3kN6FBTU1/hysv+d3JPZux SzXst/O2zpBibaWMprI5EVa6bhpfE0ZmWFx7zk2z/Xdwxz0DxAlQIEHyzuODCOlI Ojl0lKX237zP1dNdpWz1cxn0oqxjSx6hE+iv2w4yEfktgQLvRV675fnnGYPbrL4I mUJ9ASddTUaK+620rx3oShu2HMBrOKHO1PhS7tZtz53hX62E3T7BNnUDu5lBJc3M jgN5+mwOlKWNDG3MeRZ+20PxGy5wIumCjxManGs5gGoy3l69nxgc0BLjODSDA9CM Ed+VIohaq4O9UeQBpDPupjPnbLqT0ZRXoVOlsyQQ+/zFAxI+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZEfq6bjk6UVZgast4dd/3SLTbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYz NWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFhZDU2ZWMxYmQvYjMzZjk4MjQtMWQyMi0z YzExLWI5OGYtODI5MTgwMjFjMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjg2MzVkNmEtODYyMy00OTE4LTgy M2EtZGMxYWQ1NmVjMWJkLzI4NjM1ZDZhLTg2MjMtNDkxOC04MjNhLWRjMWFkNTZl YzFiZC5jcmwwHwYDVR0jBBgwFoAU7Y/GRiPu+pXqPCwpLQzC0G0eZtIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYzNWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFh ZDU2ZWMxYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS4a0zGkyvZ7VbdKUooYFpiWjEExL6ijHTkQGpLhV3/gF31uZK7+gsN gWlgVq62pvr1Phce/91aQ5U0grHVR5brkXrjsj7xwTrJmXVIlJ4O2xOTOPZpaTpf lCN4gLlkHbRRiVVbJMDS2EK9K5pXv3LRMrS+J1K4Wrb4wyeLT2nVHRULZTa2+DAi I33Wq1kqPgzKGOwGVs4InHmZiNFGa7RjK/ZKp2UBxOUkIRUhMqPyltnJeJOicEBI lxMev9LcWkmVWs+2mX69RZO0qj2D9jRI1+zPWglwL/0QxtLaeY5pNNhLkkzPPsiG /M3StFQppB2Cnhc04kfJPmDJPQXfsH8= -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:51 2026 by rpki-client