$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa File: d9aff715-467a-358e-a765-6f5f138dd650.roa (raw, json) Hash identifier: +Re6Oryq6wzcKTQbnHzH4O+DC+sAbGJW+XpyzDYaMyM= Subject key identifier: 69:92:7F:44:D1:1A:0C:70:0A:8F:05:F4:D5:77:3B:A2:17:61:6A:FD Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F4328584D3B34E4403C25B512EBE3C840 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 8075 IP address blocks: 199.21.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e4:40:3c:25:b5:12:eb:e3:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=8152a11f-461b-4288-92ea-a8c768b44bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:70:6e:dd:c1:a1:25:6e:06:a4:42:1a:e5: 96:34:58:b5:eb:ad:9f:ae:d8:dc:20:32:c5:97:7d: 18:d2:24:dc:79:2c:cb:f8:72:e9:21:07:5e:a5:ca: c1:13:6d:b1:64:30:4f:2c:68:b9:bb:8c:71:01:50: 42:6c:da:80:97:20:5b:30:6e:e7:91:5d:7e:61:b2: 30:68:2e:5f:43:cb:55:10:e2:50:9e:2f:01:f4:21: 82:11:a5:96:bc:d8:de:0a:ae:5b:11:42:84:91:0c: 52:ab:62:81:b4:59:87:a7:7a:cc:35:42:00:33:78: f6:e3:d9:fc:a1:82:c5:9c:c9:22:18:66:0b:df:b3: 29:ab:04:ba:02:1f:9a:da:f7:d8:60:4f:cc:4b:b4: 33:d3:b7:90:76:d8:01:9a:b3:60:ed:08:0b:8d:dd: 34:d4:b7:fe:9d:43:f5:e1:ad:f4:a5:4b:c8:fe:84: 79:77:dc:37:be:b8:f9:70:7d:6f:7a:74:ed:53:fe: 89:d9:e0:82:7c:78:7e:5f:21:87:36:19:ea:ce:6d: 02:9c:4e:74:12:93:14:4b:5f:fe:08:7a:dd:14:f8: ac:23:e2:27:be:e3:3e:ed:79:92:0a:f6:ba:fe:ba: 4f:15:4d:fe:78:29:47:04:a4:75:78:a2:01:9a:09: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:92:7F:44:D1:1A:0C:70:0A:8F:05:F4:D5:77:3B:A2:17:61:6A:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:97:8a:55:ae:f3:71:d5:4a:a8:f1:77:a7:08:98:5d:c9:ed: 70:46:82:06:5e:c0:f9:d9:db:07:90:b8:6a:10:1e:ab:8f:4e: 80:a4:cb:3e:68:86:08:e1:9a:a6:e8:62:5f:e2:16:62:5c:9c: 41:ec:7d:b9:6a:69:43:5a:5d:c1:49:e2:7d:f1:65:18:01:f4: 82:c2:e3:75:2f:51:ae:34:28:57:42:bd:eb:1d:57:5b:11:70: 9d:c1:cc:8b:38:73:2f:68:af:28:61:1d:5d:e8:98:d6:60:44: 86:49:c3:80:0e:0e:4d:bd:71:d3:4f:41:bd:ed:86:91:39:e8: a9:4c:25:da:e0:91:35:9c:25:68:33:0f:d5:72:9d:00:ef:4a: b9:dc:42:39:ac:23:77:f8:3e:6f:55:ee:7c:72:52:80:7b:c4: f2:1d:35:58:8d:2d:58:c3:9b:9d:99:c4:a5:45:d7:09:19:69: 5c:6f:4c:63:7b:d2:d1:49:4a:99:a1:c0:c0:62:4b:5a:24:4f: 1a:39:f7:fe:30:df:38:94:fc:be:79:6b:48:fe:b4:4e:26:ac: 68:ba:6f:c5:7b:25:3e:d7:f7:a7:89:b1:31:41:f8:e7:9f:1f: f0:1b:81:c5:21:68:9b:54:33:f8:17:80:80:74:f7:ad:bb:16: 17:16:ac:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NORAPCW1EuvjyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk ODE1MmExMWYtNDYxYi00Mjg4LTkyZWEtYThjNzY4YjQ0YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlExwbt3BoSVuBqRCGuWWNFi1662frtjcIDLF l30Y0iTceSzL+HLpIQdepcrBE22xZDBPLGi5u4xxAVBCbNqAlyBbMG7nkV1+YbIw aC5fQ8tVEOJQni8B9CGCEaWWvNjeCq5bEUKEkQxSq2KBtFmHp3rMNUIAM3j249n8 oYLFnMkiGGYL37MpqwS6Ah+a2vfYYE/MS7Qz07eQdtgBmrNg7QgLjd001Lf+nUP1 4a30pUvI/oR5d9w3vrj5cH1venTtU/6J2eCCfHh+XyGHNhnqzm0CnE50EpMUS1/+ CHrdFPisI+InvuM+7XmSCva6/rpPFU3+eClHBKR1eKIBmgmgMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmSf0TRGgxwCo8F9NV3O6IXYWr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvZDlhZmY3MTUtNDY3YS0z NThlLWE3NjUtNmY1ZjEzOGRkNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaXilWu83HVSqjxd6cImF3J7XBGggZewPnZ2weQuGoQHquPToCkyz5o hgjhmqboYl/iFmJcnEHsfblqaUNaXcFJ4n3xZRgB9ILC43UvUa40KFdCvesdV1sR cJ3BzIs4cy9oryhhHV3omNZgRIZJw4AODk29cdNPQb3thpE56KlMJdrgkTWcJWgz D9VynQDvSrncQjmsI3f4Pm9V7nxyUoB7xPIdNViNLVjDm52ZxKVF1wkZaVxvTGN7 0tFJSpmhwMBiS1okTxo59/4w3ziU/L55a0j+tE4mrGi6b8V7JT7X96eJsTFB+Oef H/AbgcUhaJtUM/gXgIB09627FhcWrMA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:20 2026 by rpki-client