$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa File: d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa (raw, json) Hash identifier: iOc3Nal1D/uClQAzcbppNsKHWpoGcKbbtixbL8altrw= Subject key identifier: 0E:8D:28:1E:82:13:10:9A:44:76:F5:2C:5A:77:D6:F9:80:FD:43:87 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584D3F64D7B234A4F82E4DEAFE40 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 3630 IP address blocks: 199.109.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d7:b2:34:a4:f8:2e:4d:ea:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=c8ede860-eff4-4bf9-80ad-f8710b556497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:20:b4:4b:ee:a7:95:46:eb:7e:bf:0f:74: bc:0a:0d:79:f0:6d:19:b2:ab:cf:04:7d:7f:94:5f: 8b:d6:05:8e:8e:02:69:c2:06:ec:9e:c1:65:f0:11: a2:c1:52:c5:7f:3b:31:4d:8e:ed:60:8f:33:c5:c0: 0b:ca:6d:4d:02:45:76:1c:de:ea:c6:e4:b8:a7:4b: 11:f7:12:cc:7f:b1:96:9f:32:9c:cc:9e:e8:d9:6f: 63:63:fd:c2:34:56:55:1f:62:18:c7:08:a5:bf:44: 2d:ca:03:ee:a7:0f:6a:21:03:64:b2:26:ff:1c:6b: d4:47:7c:5a:28:a8:45:06:ab:d0:55:96:ae:16:9c: 1a:88:b4:e4:08:f7:e7:79:38:4b:70:35:20:df:74: a4:1b:69:c8:19:e4:bb:46:60:c2:8d:f1:37:9c:8b: 44:4f:c4:5c:62:ec:a7:1a:41:3f:bb:f8:17:8e:c1: 96:81:4a:d1:e9:eb:83:c3:d9:8c:ee:0c:b4:14:22: a3:9c:15:8d:fd:7b:3c:d9:b7:8f:31:31:44:ec:01: 0c:ff:cb:2f:bb:83:1a:cb:f4:c2:68:93:c9:ce:1e: b9:3f:ea:21:55:ea:23:14:99:6b:b3:25:9a:39:13: 70:1b:ee:63:a1:27:0b:0d:d0:3d:6d:39:e1:7e:7d: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8D:28:1E:82:13:10:9A:44:76:F5:2C:5A:77:D6:F9:80:FD:43:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/d96ed0f1-f0cc-3243-91da-65a52051ee9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:03:ef:77:80:24:96:fa:cd:70:f3:67:05:37:18:13:8c:1f: 71:23:b9:41:f4:51:fb:2d:94:4a:f9:60:a0:ce:62:21:95:cc: a8:90:90:fa:c1:e7:57:28:6c:8f:65:6e:df:95:37:b9:85:5c: 5f:d8:bf:16:6d:0b:7d:0a:c6:dc:57:3d:93:ee:25:fa:66:9e: 8f:40:de:b4:d0:c3:43:90:fb:f3:70:28:96:b0:d6:cc:16:c6: c3:1b:1e:d4:1c:a9:f5:d4:c3:a6:94:8f:c6:93:88:bd:e3:29: fb:2e:bb:73:a8:92:90:f3:57:5d:ae:48:04:e5:17:da:32:0f: 9a:37:b6:0f:7f:85:1d:04:b7:f5:5a:c7:46:23:85:91:1f:d8: 09:48:8f:5f:fe:29:7c:61:94:76:71:d1:7a:0e:98:84:31:4f: 97:75:17:08:ae:e0:38:d0:f1:cc:e2:38:b9:c9:9c:d2:14:d7: ea:4b:11:c7:e9:85:c3:ef:f9:05:11:7e:35:80:a7:f7:55:9b: 3f:b3:22:dc:04:bf:ef:66:58:e1:f9:7f:0d:a3:28:f7:c0:28: f4:bf:bc:06:eb:79:7d:a9:e8:d7:5e:b0:ef:f2:79:3a:c7:cb: ad:e0:9b:8f:d6:6f:78:52:6c:2b:6c:62:43:e7:9e:e9:a2:18: 8c:9c:d2:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNeyNKT4Lk3q/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YzhlZGU4NjAtZWZmNC00YmY5LTgwYWQtZjg3MTBiNTU2NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVQgtEvup5VG636/D3S8Cg158G0ZsqvPBH1/ lF+L1gWOjgJpwgbsnsFl8BGiwVLFfzsxTY7tYI8zxcALym1NAkV2HN7qxuS4p0sR 9xLMf7GWnzKczJ7o2W9jY/3CNFZVH2IYxwilv0QtygPupw9qIQNksib/HGvUR3xa KKhFBqvQVZauFpwaiLTkCPfneThLcDUg33SkG2nIGeS7RmDCjfE3nItET8RcYuyn GkE/u/gXjsGWgUrR6euDw9mM7gy0FCKjnBWN/Xs82bePMTFE7AEM/8svu4May/TC aJPJzh65P+ohVeojFJlrsyWaORNwG+5joScLDdA9bTnhfn1faQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6NKB6CExCaRHb1LFp31vmA/UOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZDk2ZWQwZjEtZjBjYy0z MjQzLTkxZGEtNjVhNTIwNTFlZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx204MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUD73eAJJb6zXDzZwU3GBOMH3EjuUH0UfstlEr5YKDOYiGVzKiQkPrB 51cobI9lbt+VN7mFXF/YvxZtC30KxtxXPZPuJfpmno9A3rTQw0OQ+/NwKJaw1swW xsMbHtQcqfXUw6aUj8aTiL3jKfsuu3OokpDzV12uSATlF9oyD5o3tg9/hR0Et/Va x0YjhZEf2AlIj1/+KXxhlHZx0XoOmIQxT5d1Fwiu4DjQ8cziOLnJnNIU1+pLEcfp hcPv+QURfjWAp/dVmz+zItwEv+9mWOH5fw2jKPfAKPS/vAbreX2p6NdesO/yeTrH y63gm4/Wb3hSbCtsYkPnnumiGIyc0sw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:24:09 2026 by rpki-client