$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa File: 31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa (raw, json) Hash identifier: H60+nf9tKMJclpbqlEG/5KrD2JQbNP4FJ0hVu/T/Pqo= Subject key identifier: 56:F9:1E:90:B4:41:89:83:E9:BC:00:B4:EA:4A:65:DC:D7:53:75:0B Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584D0BDCF7B17965AA75F6F869C0 Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 14523 IP address blocks: 199.188.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dc:f7:b1:79:65:aa:75:f6:f8:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=f81c449e-fb96-47da-9580-8a2822cb155e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:72:9c:c8:c7:34:ac:c9:47:1b:5f:2c:ad: 70:b9:ff:75:d3:22:fd:5b:f7:22:eb:e8:67:71:b8: fe:43:6d:73:55:d5:09:ff:56:8a:b8:58:4e:ce:25: 8f:a4:73:49:80:87:c5:86:74:ee:ab:9f:e7:3e:ce: 9b:5e:dd:d3:e8:25:7f:6e:90:ee:72:af:63:f7:ee: 5d:e2:2f:bb:a3:94:dd:31:cb:18:b1:03:77:07:29: 1a:ce:67:e3:05:d8:66:99:9b:9e:fe:79:79:e5:60: a9:96:35:30:5f:41:9d:fd:74:4a:72:e6:aa:d1:19: e0:e6:be:bb:a4:93:7e:98:5a:dd:d6:c5:fa:c9:7f: 46:65:b7:6b:5d:8a:db:be:8e:cc:ca:7e:29:ad:da: 5b:4c:8f:df:b0:71:ab:cd:70:8b:c6:ed:b3:94:9e: 96:85:9b:15:6e:f2:6c:55:56:b0:a7:18:65:75:92: cb:2b:d1:10:06:d1:fc:22:49:8e:33:98:cd:ad:e8: fb:be:84:f9:ce:29:95:b8:42:b7:b0:89:ee:92:e6: 2b:ce:43:72:9f:de:04:b3:e2:bd:c1:64:6e:70:ef: 7e:91:8b:bd:be:f8:36:8a:1c:76:3e:50:a0:d9:b7: fc:a2:4d:b6:eb:34:98:fe:75:96:de:a1:d3:46:97: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:1E:90:B4:41:89:83:E9:BC:00:B4:EA:4A:65:DC:D7:53:75:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: 199.188.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:63:c6:98:60:db:0e:88:17:43:a3:fa:89:60:18:be:ca:24: c9:75:b0:1b:3a:37:47:f1:bb:f8:f9:76:e6:f2:cb:3f:7b:d1: 85:fb:0b:73:ed:7a:c9:86:ca:33:f4:2a:16:95:5c:f0:5c:78: 40:f6:af:5a:10:36:04:c1:5d:6c:f0:53:88:26:6f:d6:ce:bf: 00:7b:76:c6:92:07:b6:22:15:3b:04:a4:25:92:4f:2b:e7:af: 51:ee:0c:6e:02:a3:bb:74:42:09:ed:68:48:c1:16:d7:6c:0b: 70:22:77:99:75:16:3a:6b:65:eb:f7:88:86:7e:f1:dc:65:e4: 2c:cf:8e:bd:7a:89:38:47:cf:51:dc:5b:a6:90:ef:99:a5:0f: e5:4f:23:cb:5c:f5:39:1f:7f:6d:d3:49:bb:9b:fe:ed:78:ed: 31:2f:49:55:6a:98:cd:e4:88:94:71:6f:01:41:6b:26:e1:30: 46:62:86:46:9a:af:af:c4:63:b0:00:25:37:fb:23:49:be:12: 4f:4e:38:9b:8c:4b:79:24:7a:15:76:f7:45:a5:e3:a0:cf:57: dd:6e:9f:ad:05:30:0f:73:14:e4:5a:bb:08:6b:b8:9a:47:d9: 7a:40:c3:54:7b:1e:f9:03:ff:89:e9:a6:7e:28:ba:3e:46:a2: 55:5f:2a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3PexeWWqdfb4acAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZjgxYzQ0OWUtZmI5Ni00N2RhLTk1ODAtOGEyODIyY2IxNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHZynMjHNKzJRxtfLK1wuf910yL9W/ci6+hn cbj+Q21zVdUJ/1aKuFhOziWPpHNJgIfFhnTuq5/nPs6bXt3T6CV/bpDucq9j9+5d 4i+7o5TdMcsYsQN3BykazmfjBdhmmZue/nl55WCpljUwX0Gd/XRKcuaq0Rng5r67 pJN+mFrd1sX6yX9GZbdrXYrbvo7Myn4prdpbTI/fsHGrzXCLxu2zlJ6WhZsVbvJs VVawpxhldZLLK9EQBtH8IkmOM5jNrej7voT5zimVuEK3sInukuYrzkNyn94Es+K9 wWRucO9+kYu9vvg2ihx2PlCg2bf8ok226zSY/nWW3qHTRpdzPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb5HpC0QYmD6bwAtOpKZdzXU3ULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvMzFmNTQ3ZjAtNWU5OC0z YTZmLWExNTgtZWEyMjAwMWU5ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7wcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBjxphg2w6IF0Oj+olgGL7KJMl1sBs6N0fxu/j5dubyyz970YX7C3Pt esmGyjP0KhaVXPBceED2r1oQNgTBXWzwU4gmb9bOvwB7dsaSB7YiFTsEpCWSTyvn r1HuDG4Co7t0QgntaEjBFtdsC3Aid5l1FjprZev3iIZ+8dxl5CzPjr16iThHz1Hc W6aQ75mlD+VPI8tc9Tkff23TSbub/u147TEvSVVqmM3kiJRxbwFBaybhMEZihkaa r6/EY7AAJTf7I0m+Ek9OOJuMS3kkehV290Wl46DPV91un60FMA9zFORauwhruJpH 2XpAw1R7HvkD/4nppn4ouj5GolVfKsU= -----END CERTIFICATE-----Generated at Sat Mar 28 14:29:14 2026 by rpki-client