$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa File: 300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (raw, json) Hash identifier: bPnG07NVXYTp2n3xWxiC7+3kDwhPx2lLVqUk0q2NYWw= Subject key identifier: 41:9D:B7:29:63:F5:CC:52:AE:6D:77:60:49:39:EA:1E:CD:49:A5:02 Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Certificate serial: 010D0C9F4328584D386A4A4B15BD3C193373C380 Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 2728 IP address blocks: 162.255.88.0/21 maxlen: 24 199.185.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4a:4b:15:bd:3c:19:33:73:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=749cee2a-5203-4202-b278-a09273397a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:80:b4:28:b0:8f:2c:d0:44:75:f3:51:26: 62:86:1b:9b:7c:70:c4:20:0c:91:14:cb:6a:33:d0: f3:8f:49:aa:4a:c4:b7:fa:6c:46:4f:e7:92:b1:55: ec:f9:20:a4:a1:62:5a:75:ee:52:0d:a5:e9:95:aa: 5d:80:3e:ee:11:f0:61:2f:c1:aa:e7:1b:6b:dc:4a: 8f:42:67:44:45:fc:a0:fd:dc:fa:84:fa:5e:a3:9c: 03:39:9d:5e:c1:4b:c1:01:d8:42:79:a9:82:83:3d: 7a:ae:b6:54:ab:89:75:fa:85:a5:c1:0a:4e:79:dc: 51:56:86:09:7e:a3:c3:67:e9:73:5c:94:64:20:61: f9:b6:eb:40:39:f8:ad:40:b5:38:54:69:8b:8b:7f: de:bd:00:ff:dc:96:b2:83:7d:77:e2:1f:6b:e6:8d: b0:de:e9:fb:7b:31:2a:d5:5d:7b:de:67:cc:c4:af: be:f4:7f:0d:d9:cd:cc:c8:a0:9e:35:a7:5e:ce:6b: 8d:52:5d:f0:83:bf:96:cf:d4:1c:8f:36:60:cb:c4: 4c:24:cb:29:30:71:68:c4:db:4a:8a:9d:cf:a1:b0: fe:68:91:c5:71:c6:1e:90:56:c2:00:78:15:bc:52: 78:93:c2:bd:bb:40:c6:fb:bf:8a:d5:7b:41:43:ef: 6e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:B7:29:63:F5:CC:52:AE:6D:77:60:49:39:EA:1E:CD:49:A5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl X509v3 Authority Key Identifier: keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer sbgp-ipAddrBlock: critical IPv4: 162.255.88.0/21 199.185.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3d:2c:51:87:1a:21:a4:1d:c5:8d:41:93:10:9f:f3:b4:3e: 92:6f:7b:34:7b:d4:eb:51:35:d2:38:af:d9:a5:1c:ce:a1:bf: c5:97:a9:0f:fb:99:ce:4e:1e:0c:b3:1d:0f:d9:b0:55:ef:37: 5a:b8:9a:2b:e7:53:9b:07:08:11:7e:ba:4b:d1:90:1f:98:93: 42:db:f2:d4:60:1f:67:8e:f4:5c:4c:ab:03:55:9f:53:78:9b: 0a:d0:bf:7b:dd:b3:92:86:3c:8a:e4:ea:0a:f9:63:46:e6:7d: 67:c5:7a:f0:2e:97:eb:c1:06:c9:80:c2:20:5a:b1:7a:64:85: 4b:dc:bf:d1:f2:f2:15:7d:51:a4:b4:8a:7d:f7:e5:1f:27:5f: 51:78:7d:2f:f9:fc:ca:a0:0f:ec:68:51:ea:f3:e1:b0:64:80: 5b:64:09:5e:fe:52:d9:b9:00:d7:a2:0f:0e:7d:02:d8:9c:60: db:34:2e:84:3b:13:31:fb:8b:35:80:f3:d1:28:c4:dc:b3:3f: 31:9b:cd:10:21:b1:41:10:2a:3e:c0:f2:91:cb:74:e0:42:cc: 79:34:6e:f6:36:ca:a8:0c:3f:b2:07:a7:86:06:89:86:96:12: 30:da:64:42:d5:70:59:e8:06:2f:32:da:97:35:89:46:d1:91: 31:15:ee:a7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE04akpLFb08GTNzw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1 YjBhMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzQ5Y2VlMmEtNTIwMy00MjAyLWIyNzgtYTA5MjczMzk3YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++AtCiwjyzQRHXzUSZihhubfHDEIAyRFMtq M9Dzj0mqSsS3+mxGT+eSsVXs+SCkoWJade5SDaXplapdgD7uEfBhL8Gq5xtr3EqP QmdERfyg/dz6hPpeo5wDOZ1ewUvBAdhCeamCgz16rrZUq4l1+oWlwQpOedxRVoYJ fqPDZ+lzXJRkIGH5tutAOfitQLU4VGmLi3/evQD/3Jayg3134h9r5o2w3un7ezEq 1V173mfMxK++9H8N2c3MyKCeNadezmuNUl3wg7+Wz9QcjzZgy8RMJMspMHFoxNtK ip3PobD+aJHFccYekFbCAHgVvFJ4k8K9u0DG+7+K1XtBQ+9uxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEGdtylj9cxSrm13YEk56h7NSaUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvMzAwYTVhNGQtNWQwZC0z ZTIyLWE5YTEtZTI1OTFhOGUzNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3 NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0 Mzk3NzViMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov9YAwQB x7muMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADg9LFGHGiGkHcWNQZMQn/O0PpJvezR71OtRNdI4r9mlHM6h v8WXqQ/7mc5OHgyzHQ/ZsFXvN1q4mivnU5sHCBF+ukvRkB+Yk0Lb8tRgH2eO9FxM qwNVn1N4mwrQv3vds5KGPIrk6gr5Y0bmfWfFevAul+vBBsmAwiBasXpkhUvcv9Hy 8hV9UaS0in335R8nX1F4fS/5/MqgD+xoUerz4bBkgFtkCV7+Utm5ANeiDw59Atic YNs0LoQ7EzH7izWA89EoxNyzPzGbzRAhsUEQKj7A8pHLdOBCzHk0bvY2yqgMP7IH p4YGiYaWEjDaZELVcFnoBi8y2pc1iUbRkTEV7qc= -----END CERTIFICATE-----Generated at Thu Mar 26 06:52:18 2026 by rpki-client