$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa File: a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json) Hash identifier: ds1EnQZH/QJi430J0lhMEA67u+nOx7l4wEWUVD5+8T0= Subject key identifier: 9D:95:94:8E:A0:54:BD:E0:C6:E5:F9:3B:DD:46:AF:70:5F:6D:56:4C Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D237A2CF1BE2218EA61E0F200 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 11404 IP address blocks: 199.91.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2c:f1:be:22:18:ea:61:e0:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d31b206f-2731-4ae9-bcba-50b908d4481a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:84:8a:46:5d:b8:5d:6f:57:36:47:49:0a: a7:e5:ed:1c:39:80:70:5d:04:b2:27:51:13:c0:07: 93:4b:8e:87:85:9e:dc:3a:c8:e4:e4:05:72:a4:84: 21:00:0a:e5:10:4f:29:eb:ca:65:a1:36:1b:36:32: f2:9e:87:04:31:88:4b:c1:dd:70:dc:2b:b1:7f:d4: 28:c6:72:9f:5c:9f:7a:67:78:63:12:73:3d:86:9b: 1f:0f:ed:e9:ca:5c:93:11:38:34:61:f4:1b:c5:12: fd:f7:97:91:c3:aa:b3:2a:a5:e7:4c:ae:6a:5f:d7: 26:a9:e7:79:58:45:40:55:53:d1:d5:6f:f9:09:1f: 22:b9:6d:44:d3:db:16:6d:dd:6b:7c:f8:84:ce:4f: 3d:83:50:f0:2a:bc:e3:e2:72:18:64:39:8d:f6:e4: 83:68:c5:15:d0:11:a0:6f:95:ef:64:fa:9b:35:88: 27:8c:de:b5:12:df:9a:76:9a:b5:af:98:9c:1b:ad: 58:d7:81:a7:2c:89:96:08:e4:a5:f1:79:69:87:37: 6c:e4:fa:12:a5:57:b9:d6:03:c4:fb:c7:15:aa:c6: 08:08:0f:10:92:7f:05:4c:a1:3c:96:65:1c:51:7a: ba:fe:c7:e0:d2:00:e1:81:58:87:c7:e4:b6:f0:74: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:94:8E:A0:54:BD:E0:C6:E5:F9:3B:DD:46:AF:70:5F:6D:56:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.91.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bc:23:68:6d:11:73:6f:a3:99:f4:c1:31:d5:ef:eb:67:c6: af:22:c0:a7:1b:7f:f6:92:e1:03:41:aa:13:26:a9:65:ff:0b: 5e:89:b9:25:79:0c:4e:9a:e5:31:97:a2:34:ff:f9:78:46:a7: a8:0f:de:7e:49:4e:7c:ca:05:4f:46:eb:9b:f3:ed:90:cd:c0: 48:9e:cf:b5:81:5a:de:3f:03:dd:89:f7:23:c1:7f:c0:d5:e9: 22:e4:98:ea:b8:63:22:44:2f:ac:36:cc:ac:85:99:61:e1:e2: 41:51:92:55:d4:51:c6:48:ee:97:df:c8:16:78:f7:71:53:73: 60:ae:d7:5c:fe:91:88:98:51:2a:1e:a3:6d:36:a7:10:82:1f: 5e:cb:6a:db:50:83:c9:00:59:5d:1c:eb:c3:b3:51:9b:2d:2f: 2d:f1:6e:a9:85:08:e8:d0:92:47:be:12:05:e0:c1:9b:b1:16: 4e:89:9f:b8:32:e4:52:7b:f6:09:d8:1b:ea:38:b9:39:75:f7: 94:c8:e5:29:fe:70:a6:4d:09:ba:bf:af:91:9b:42:a0:30:04: d4:76:e2:54:7d:b2:d5:39:ce:c4:cd:a4:dc:6a:fb:fc:e0:39: f0:70:f9:90:77:bc:19:6a:9a:15:62:5c:50:51:cd:d1:2f:67: 3c:37:48:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeizxviIY6mHg8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDMxYjIwNmYtMjczMS00YWU5LWJjYmEtNTBiOTA4ZDQ0ODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbuEikZduF1vVzZHSQqn5e0cOYBwXQSyJ1ET wAeTS46HhZ7cOsjk5AVypIQhAArlEE8p68ploTYbNjLynocEMYhLwd1w3Cuxf9Qo xnKfXJ96Z3hjEnM9hpsfD+3pylyTETg0YfQbxRL995eRw6qzKqXnTK5qX9cmqed5 WEVAVVPR1W/5CR8iuW1E09sWbd1rfPiEzk89g1DwKrzj4nIYZDmN9uSDaMUV0BGg b5XvZPqbNYgnjN61Et+adpq1r5icG61Y14GnLImWCOSl8Xlphzds5PoSpVe51gPE +8cVqsYICA8Qkn8FTKE8lmUcUXq6/sfg0gDhgViHx+S28HQoBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2VlI6gVL3gxuX5O91Gr3BfbVZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTlhMDJkYTMtMTA0NC0z NWY0LTkwOTUtZTQwYWEzNTBhMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC8I2htEXNvo5n0wTHV7+tnxq8iwKcbf/aS4QNBqhMmqWX/C16JuSV5 DE6a5TGXojT/+XhGp6gP3n5JTnzKBU9G65vz7ZDNwEiez7WBWt4/A92J9yPBf8DV 6SLkmOq4YyJEL6w2zKyFmWHh4kFRklXUUcZI7pffyBZ493FTc2Cu11z+kYiYUSoe o202pxCCH17LattQg8kAWV0c68OzUZstLy3xbqmFCOjQkke+EgXgwZuxFk6Jn7gy 5FJ79gnYG+o4uTl195TI5Sn+cKZNCbq/r5GbQqAwBNR24lR9stU5zsTNpNxq+/zg OfBw+ZB3vBlqmhViXFBRzdEvZzw3SMg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:44 2026 by rpki-client