$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa File: 2863cd8d-e932-373f-bff5-503c406d81fa.roa (raw, json) Hash identifier: k8OQ1bZtDbjr6wcvBo4Bnp/pH17sl82RHHDV4RA5T30= Subject key identifier: 6A:8D:5E:9A:A7:DD:B4:A3:A2:1D:60:C1:46:A5:CC:42:A8:AD:B4:8E Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584D3B34DD78F822C6A443F15740 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 46455 IP address blocks: 199.71.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:dd:78:f8:22:c6:a4:43:f1:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=ba24fb18-8652-46c5-be56-9a3cee93c085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:f6:14:26:ac:93:54:a7:a3:30:79:2a:25: 2a:bd:b3:0a:3f:45:96:2a:38:d5:eb:d6:22:93:d6: 88:00:f7:fa:75:db:3b:5c:2c:1b:ff:ca:70:92:81: a6:7c:39:28:da:99:d5:07:3a:60:03:c7:c9:25:40: eb:c5:45:96:3e:7b:19:73:e4:cf:26:d5:d9:42:9f: cf:29:30:e9:f3:bc:b5:ac:70:57:3e:e8:8a:09:f8: f7:52:85:a9:67:fc:b9:c4:9f:d0:83:09:33:e4:0d: fa:b6:f1:2b:be:8f:1d:cf:65:91:3c:6a:61:7e:a2: 4a:e6:d4:d6:fb:1a:27:48:79:7e:9d:05:73:e7:8e: b9:f6:6d:fe:2b:35:e5:56:04:1a:7c:a0:e6:c1:ba: 4c:bd:b4:dd:80:44:4c:d9:a0:be:40:c4:5e:a8:dd: 58:8b:3a:74:bb:a4:7f:67:61:6f:2a:18:89:91:3b: bd:6e:8d:88:ee:c5:68:9f:a7:c9:83:39:77:bd:9d: 17:46:35:6f:e7:21:e4:53:f8:95:f5:51:28:15:07: 10:e6:fa:cb:00:ca:bd:c1:5c:21:8b:68:2f:1d:42: 07:ca:10:f7:2d:e4:b8:4b:4a:49:ef:4a:0c:99:a6: d4:71:39:4a:85:1e:d5:aa:32:f9:07:04:36:e1:c0: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:5E:9A:A7:DD:B4:A3:A2:1D:60:C1:46:A5:CC:42:A8:AD:B4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 199.71.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:49:8d:23:58:44:95:66:64:f1:f4:2b:71:5b:3c:f7:73:f3: d6:a7:c9:da:b8:05:c7:f0:a1:7a:fa:53:79:a0:54:b6:e7:ce: 1b:14:2e:38:7f:47:6c:c2:ee:e5:6c:a7:a0:42:f1:b6:40:12: 46:6a:21:be:0f:df:15:d3:63:59:d4:7c:50:c0:cd:2f:07:23: 22:1c:25:8c:9f:2b:f8:5d:27:aa:d4:46:b2:ee:ba:55:42:1f: 3e:a5:fc:7e:c3:7e:37:43:06:fa:a4:f1:68:8c:09:07:3e:61: 86:3a:07:b1:c7:97:e9:a9:38:9b:38:73:6c:8e:f4:f1:4f:2c: a1:b4:5a:4c:c6:a6:49:30:39:de:86:fe:57:d0:28:f2:3f:c1: a7:a3:38:9d:2a:3c:ce:8c:88:49:fc:82:29:fb:b0:c4:d9:66: 51:9a:c9:e3:65:2b:21:fc:41:f3:85:45:37:f6:5c:5f:83:08: 1b:86:82:19:8d:7f:14:35:4e:3d:4b:4a:cf:0a:ea:76:96:d3: 4b:81:ec:cc:39:0e:25:1b:0f:e5:63:89:5c:e2:55:a9:49:fd: 8c:bf:71:ca:66:96:57:28:84:b3:7b:d7:8a:81:14:a8:b7:e2: 74:67:cf:74:0a:2e:78:c3:3b:cc:e3:34:36:35:92:e1:f9:7a: 73:ae:46:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NN14+CLGpEPxV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk YmEyNGZiMTgtODY1Mi00NmM1LWJlNTYtOWEzY2VlOTNjMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxL2FCask1SnozB5KiUqvbMKP0WWKjjV69Yi k9aIAPf6dds7XCwb/8pwkoGmfDko2pnVBzpgA8fJJUDrxUWWPnsZc+TPJtXZQp/P KTDp87y1rHBXPuiKCfj3UoWpZ/y5xJ/Qgwkz5A36tvErvo8dz2WRPGphfqJK5tTW +xonSHl+nQVz54659m3+KzXlVgQafKDmwbpMvbTdgERM2aC+QMReqN1Yizp0u6R/ Z2FvKhiJkTu9bo2I7sVon6fJgzl3vZ0XRjVv5yHkU/iV9VEoFQcQ5vrLAMq9wVwh i2gvHUIHyhD3LeS4S0pJ70oMmabUcTlKhR7VqjL5BwQ24cBA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqNXpqn3bSjoh1gwUalzEKorbSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMjg2M2NkOGQtZTkzMi0z NzNmLWJmZjUtNTAzYzQwNmQ4MWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0fmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdJjSNYRJVmZPH0K3FbPPdz89anydq4BcfwoXr6U3mgVLbnzhsULjh/ R2zC7uVsp6BC8bZAEkZqIb4P3xXTY1nUfFDAzS8HIyIcJYyfK/hdJ6rURrLuulVC Hz6l/H7DfjdDBvqk8WiMCQc+YYY6B7HHl+mpOJs4c2yO9PFPLKG0WkzGpkkwOd6G /lfQKPI/waejOJ0qPM6MiEn8gin7sMTZZlGayeNlKyH8QfOFRTf2XF+DCBuGghmN fxQ1Tj1LSs8K6naW00uB7Mw5DiUbD+VjiVziValJ/Yy/ccpmllcohLN714qBFKi3 4nRnz3QKLnjDO8zjNDY1kuH5enOuRus= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:49 2026 by rpki-client