$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa File: 3df446ef-8f84-35ef-9354-563bf5792560.roa (raw, json) Hash identifier: x3kn0qFGEu+VQUC5xROvevxpf5XkMG7ZK+KkIPdZ8Fw= Subject key identifier: 30:F7:DB:F4:44:26:13:ED:66:68:ED:17:8C:CC:EF:09:FA:8E:AA:75 Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584D3F64E6FDC77EF3A61F3E0080 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 42567 IP address blocks: 99.192.207.0/24 maxlen: 24 199.59.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e6:fd:c7:7e:f3:a6:1f:3e:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8b5c9905-382a-4e9a-bb4a-e3b934f53969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:52:c2:67:0c:6e:39:f0:02:c4:1d:bc:33: 93:c2:fc:ca:c0:dd:3b:95:4b:cb:39:e4:57:23:d8: c3:98:b8:23:ad:21:a8:5a:ec:5b:87:b1:b9:ff:72: c1:ac:a4:dd:d3:32:92:f5:95:30:52:3d:d7:01:a1: 84:7f:14:e4:94:ad:a8:e6:ff:8e:11:3a:6d:04:fa: e4:56:72:75:c5:1d:86:cd:5c:a1:77:b5:95:76:42: 9a:b2:d6:2e:15:2b:ca:99:5b:a0:9f:6d:af:2c:40: e2:b2:43:c2:10:26:74:a6:77:81:a6:ec:11:97:64: 63:86:5e:af:4f:b8:2a:1e:fe:ef:6b:66:4c:bb:ce: 1f:61:43:48:35:3e:6f:37:5c:0f:13:d0:72:a8:01: 40:b3:c4:f4:99:4d:47:6b:b9:b2:30:71:89:1f:c3: 90:95:e3:57:90:57:ad:bc:b3:01:f1:ae:1b:8a:a9: 58:23:10:97:32:59:45:08:3d:4c:ac:16:1c:29:45: 74:56:2e:e4:b1:64:11:67:01:a5:d5:75:17:7c:8d: fe:19:0e:53:37:38:9c:12:46:9c:8d:4f:40:77:e1: fb:09:35:50:26:94:09:eb:e7:15:15:fd:25:08:28: 51:a9:97:c7:95:64:4c:db:41:c9:54:62:35:0b:9f: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F7:DB:F4:44:26:13:ED:66:68:ED:17:8C:CC:EF:09:FA:8E:AA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: 99.192.207.0/24 199.59.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:93:23:69:ca:7e:4a:5d:08:78:96:9c:5c:ef:31:99:12:90: d6:3f:4a:81:ef:c6:69:e0:e7:87:5e:ab:f3:fb:ab:88:0f:87: 80:d2:2a:02:d9:8e:d1:6d:09:54:3a:33:0b:f1:f8:d8:02:b4: f7:a0:2e:fd:e5:4a:93:fc:21:7a:78:cb:41:07:8d:5c:c5:56: 30:d4:ed:ac:a1:0a:43:c4:cf:a3:42:d0:f1:87:dc:b9:12:e2: 0c:dc:dc:a9:b9:5a:e1:d7:bb:a3:1e:4f:36:52:54:4c:b5:ca: e0:3a:73:f8:74:7e:1c:67:a4:64:94:0d:10:5e:c4:27:a3:6b: 13:e1:56:13:48:74:28:5f:14:39:9f:3f:02:f2:0a:38:60:3c: 89:d5:f8:e7:8b:3f:c8:78:b0:a5:97:75:d3:14:20:12:62:d7: 1a:be:c7:41:de:9a:d2:86:dd:68:b9:79:4d:b8:f6:b3:85:63: cb:a3:55:45:95:e8:91:9c:e6:49:77:20:6f:eb:cd:bf:53:b2: ee:87:0a:bb:29:f2:72:86:92:8b:7d:69:70:8e:97:fa:ad:7e: 5e:a9:ad:8e:bd:f5:f7:3e:fa:9a:e1:74:a3:a5:42:d0:52:e2: b2:da:54:38:ae:66:d8:5d:9b:dd:8e:c1:28:31:61:fe:7e:15: 9f:be:2a:8e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0/ZOb9x37zph8+AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OGI1Yzk5MDUtMzgyYS00ZTlhLWJiNGEtZTNiOTM0ZjUzOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmflSwmcMbjnwAsQdvDOTwvzKwN07lUvLOeRX I9jDmLgjrSGoWuxbh7G5/3LBrKTd0zKS9ZUwUj3XAaGEfxTklK2o5v+OETptBPrk VnJ1xR2GzVyhd7WVdkKastYuFSvKmVugn22vLEDiskPCECZ0pneBpuwRl2Rjhl6v T7gqHv7va2ZMu84fYUNINT5vN1wPE9ByqAFAs8T0mU1Ha7myMHGJH8OQleNXkFet vLMB8a4biqlYIxCXMllFCD1MrBYcKUV0Vi7ksWQRZwGl1XUXfI3+GQ5TNzicEkac jU9Ad+H7CTVQJpQJ6+cVFf0lCChRqZfHlWRM20HJVGI1C5/EhQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDD32/REJhPtZmjtF4zM7wn6jqp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2RmNDQ2ZWYtOGY4NC0z NWVmLTkzNTQtNTYzYmY1NzkyNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAY8DPAwQA xzteMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHaTI2nKfkpdCHiWnFzvMZkSkNY/SoHvxmng54deq/P7q4gP h4DSKgLZjtFtCVQ6Mwvx+NgCtPegLv3lSpP8IXp4y0EHjVzFVjDU7ayhCkPEz6NC 0PGH3LkS4gzc3Km5WuHXu6MeTzZSVEy1yuA6c/h0fhxnpGSUDRBexCejaxPhVhNI dChfFDmfPwLyCjhgPInV+OeLP8h4sKWXddMUIBJi1xq+x0HemtKG3Wi5eU249rOF Y8ujVUWV6JGc5kl3IG/rzb9Tsu6HCrsp8nKGkot9aXCOl/qtfl6prY699fc++prh dKOlQtBS4rLaVDiuZthdm92OwSgxYf5+FZ++Ko4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:11 2026 by rpki-client