$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/8bd5e447-a1f6-3074-970e-47f889f55781.roa File: 8bd5e447-a1f6-3074-970e-47f889f55781.roa (raw, json) Hash identifier: 5qnseB8f6PhpGBsQIhQCiEr/gIa40j0UKD6wXMWzgQ0= Subject key identifier: 38:C2:82:94:0F:4A:CF:0E:44:C9:D3:FC:86:89:01:04:15:8E:9D:38 Certificate issuer: /CN=dbcce398-e4da-4d5d-8cbc-ef8968bec8fe Certificate serial: 010D0C9F4328584D20AF4386374AF8B06C4BDF80 Authority key identifier: F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/8bd5e447-a1f6-3074-970e-47f889f55781.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 19272 IP address blocks: 199.180.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:43:86:37:4a:f8:b0:6c:4b:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcce398-e4da-4d5d-8cbc-ef8968bec8fe Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=41171973-22fc-4ee7-9010-6bbdcec4de4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:97:11:6c:de:c2:5b:b1:63:79:bd:1a:ad:9b: 86:a6:8f:e2:7c:34:42:29:dc:54:98:e4:6a:a7:23: ae:64:29:0a:bf:4d:0c:d0:28:05:83:c9:26:61:44: 93:42:c8:8b:c6:41:28:17:4e:b6:d7:7c:22:be:88: 94:cb:36:ad:2b:fa:46:8e:8a:ac:5b:a7:00:be:9e: 59:20:d9:72:6f:64:b8:84:83:92:22:fa:f7:dd:a9: 53:d4:d2:47:41:e8:5d:c8:38:e8:42:12:6b:79:66: 6f:41:48:6f:18:7c:a7:85:e9:b1:eb:ef:66:63:8c: 37:ed:46:02:7e:11:4d:25:5c:c7:87:a3:f6:db:1c: 2d:ed:d2:24:75:77:46:9f:d9:69:bc:8e:bd:ed:86: 65:6c:d5:fe:20:2e:de:26:49:a1:f8:eb:18:ac:81: ad:3b:2f:79:20:f8:84:26:6c:f3:05:ae:68:e6:35: b4:07:c8:04:ec:3d:62:1f:d3:8f:13:2e:61:40:49: 73:4a:c9:9f:cc:f3:b7:44:39:92:79:2d:83:5b:0e: c6:45:06:b8:3b:e9:5b:ec:43:03:37:d0:84:2d:87: 96:d2:c2:bb:3d:f2:b2:49:93:af:b3:77:a3:7a:b5: 79:16:7c:5f:de:d8:1e:9b:43:b2:32:35:7b:a5:15: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C2:82:94:0F:4A:CF:0E:44:C9:D3:FC:86:89:01:04:15:8E:9D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/8bd5e447-a1f6-3074-970e-47f889f55781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.crl X509v3 Authority Key Identifier: keyid:F2:0E:BD:24:DA:92:98:65:FC:32:D3:EB:5C:F1:CA:11:03:F6:34:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbcce398-e4da-4d5d-8cbc-ef8968bec8fe.cer sbgp-ipAddrBlock: critical IPv4: 199.180.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f9:8a:19:98:20:6d:6a:fc:36:35:fb:93:34:b7:95:39:5d: 61:44:68:dd:46:48:73:42:32:71:1a:eb:a7:18:b0:b2:09:64: f3:ec:df:ea:e9:32:fc:2d:58:f6:81:db:bc:e7:c4:32:20:78: 82:33:6c:0d:62:22:c1:c8:48:63:9c:18:5b:7a:51:f7:20:07: 92:42:de:74:d2:47:fa:75:ac:ef:af:85:63:06:da:6e:9b:33: 3b:f0:7c:fa:d7:6c:56:68:db:b7:6a:b0:90:2b:fe:ba:6a:58: 68:ac:92:c8:82:2b:0d:ae:0c:98:d7:71:3d:c5:07:42:65:f2: e9:80:b8:59:2d:0b:1e:c9:85:58:d4:06:86:3f:c1:a4:ca:ff: 6b:98:86:87:fd:9a:78:b7:31:91:d0:8f:19:b2:79:69:00:8b: b1:f3:eb:77:8c:3d:48:26:ec:4d:e7:92:e8:b8:90:72:57:2b: 10:9f:2c:ef:d1:04:e5:5e:14:7c:40:df:c3:fd:e1:40:19:be: 79:b0:97:93:18:c5:dc:e7:2b:49:e6:17:e3:37:08:62:8e:7f: a4:79:2c:01:cb:5f:f9:a1:4d:75:c0:24:4a:21:6f:0c:dc:ea: 8c:6a:94:e2:6a:38:fe:1e:8c:fa:b1:89:7a:e6:cb:9e:60:9b: 37:9d:e9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0OGN0r4sGxL34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjY2UzOTgtZTRkYS00ZDVkLThjYmMtZWY4OTY4YmVj OGZlMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NDExNzE5NzMtMjJmYy00ZWU3LTkwMTAtNmJiZGNlYzRkZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5cRbN7CW7Fjeb0arZuGpo/ifDRCKdxUmORq pyOuZCkKv00M0CgFg8kmYUSTQsiLxkEoF06213wivoiUyzatK/pGjoqsW6cAvp5Z INlyb2S4hIOSIvr33alT1NJHQehdyDjoQhJreWZvQUhvGHynhemx6+9mY4w37UYC fhFNJVzHh6P22xwt7dIkdXdGn9lpvI697YZlbNX+IC7eJkmh+OsYrIGtOy95IPiE JmzzBa5o5jW0B8gE7D1iH9OPEy5hQElzSsmfzPO3RDmSeS2DWw7GRQa4O+lb7EMD N9CELYeW0sK7PfKySZOvs3ejerV5Fnxf3tgem0OyMjV7pRWFbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjCgpQPSs8ORMnT/IaJAQQVjp04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmNj ZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5NjhiZWM4ZmUvOGJkNWU0NDctYTFmNi0z MDc0LTk3MGUtNDdmODg5ZjU1NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjY2UzOTgtZTRkYS00ZDVkLThj YmMtZWY4OTY4YmVjOGZlL2RiY2NlMzk4LWU0ZGEtNGQ1ZC04Y2JjLWVmODk2OGJl YzhmZS5jcmwwHwYDVR0jBBgwFoAU8g69JNqSmGX8MtPrXPHKEQP2NNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmNjZTM5OC1lNGRhLTRkNWQtOGNiYy1lZjg5 NjhiZWM4ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx7RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD5ihmYIG1q/DY1+5M0t5U5XWFEaN1GSHNCMnEa66cYsLIJZPPs3+rp MvwtWPaB27znxDIgeIIzbA1iIsHISGOcGFt6UfcgB5JC3nTSR/p1rO+vhWMG2m6b MzvwfPrXbFZo27dqsJAr/rpqWGisksiCKw2uDJjXcT3FB0Jl8umAuFktCx7JhVjU BoY/waTK/2uYhof9mni3MZHQjxmyeWkAi7Hz63eMPUgm7E3nkui4kHJXKxCfLO/R BOVeFHxA38P94UAZvnmwl5MYxdznK0nmF+M3CGKOf6R5LAHLX/mhTXXAJEohbwzc 6oxqlOJqOP4ejPqxiXrmy55gmzed6W0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:05 2026 by rpki-client