$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/e3952e50-b49e-38d3-b3f2-ee3600ee5b09.roa File: e3952e50-b49e-38d3-b3f2-ee3600ee5b09.roa (raw, json) Hash identifier: UAPgaZ64tttlGkPxtXTIIf4TJzye9U/FVKLB6vk0TgY= Subject key identifier: 4F:96:2A:B7:1C:AE:B3:D1:66:08:4E:B5:A0:62:28:85:96:5D:3D:48 Certificate issuer: /CN=13d1e2d5-5089-4514-80fb-652631b3cfab Certificate serial: 010D0C9F4328584D397B9733B54FAA4E0D7AA740 Authority key identifier: 03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/e3952e50-b49e-38d3-b3f2-ee3600ee5b09.roa Signing time: Thu 19 Mar 2026 22:11:40 +0000 ROA not before: Thu 19 Mar 2026 22:11:40 +0000 ROA not after: Wed 17 Jun 2026 22:11:40 +0000 asID: 62917 IP address blocks: 199.87.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:7b:97:33:b5:4f:aa:4e:0d:7a:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d1e2d5-5089-4514-80fb-652631b3cfab Validity Not Before: Mar 19 22:11:40 2026 GMT Not After : Jun 17 22:11:40 2026 GMT Subject: CN=37acd3e0-ad05-4f07-b312-11628766fdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:f0:e2:52:5c:26:12:5b:2a:64:ec:f0:1e: 6b:94:f6:15:20:e4:63:e7:ac:6f:fa:c7:0e:1f:88: b8:9d:de:82:cf:21:e3:1a:bf:09:9c:3d:bb:43:75: ee:b6:3e:b5:27:b8:11:68:ec:3d:c5:e0:95:0f:32: df:53:2f:74:ba:bb:4c:73:fe:f7:a1:23:c4:07:f5: a3:a0:a3:cf:5c:24:fa:e8:bd:d1:63:cf:59:07:0a: f3:3f:91:56:7c:33:c1:91:6e:8a:74:48:92:59:d5: a9:7f:59:e9:1e:4e:c6:61:36:d5:70:f7:8a:aa:67: a2:e9:ef:57:e2:a6:47:9d:6c:85:d1:a2:e7:86:77: 17:83:ec:4f:4f:ed:73:e3:e2:39:a6:bb:ee:f2:30: 33:ab:a3:74:be:d3:65:77:74:03:3c:ef:a7:d0:88: b8:f7:cc:f4:b1:bf:74:15:7e:e4:24:d7:17:1d:d3: 79:07:2a:47:da:0b:d3:25:f1:73:5d:b7:f8:3a:99: 0b:0c:41:9b:fa:71:cb:7f:19:6d:0b:d2:bb:1a:2d: 5a:f6:b5:df:f0:62:65:e4:c5:c0:52:c1:04:c8:ad: fb:f1:33:dd:d9:41:b5:23:d2:6b:ec:1e:e0:72:e5: 95:c7:31:e2:fd:fa:a3:3c:3e:54:10:88:31:9c:3a: 36:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:96:2A:B7:1C:AE:B3:D1:66:08:4E:B5:A0:62:28:85:96:5D:3D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/e3952e50-b49e-38d3-b3f2-ee3600ee5b09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl X509v3 Authority Key Identifier: keyid:03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer sbgp-ipAddrBlock: critical IPv4: 199.87.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a6:1c:7e:fb:4c:df:77:e5:72:95:0c:21:ce:4b:36:a7:1f: 6a:45:eb:ca:63:de:9d:71:34:56:f7:1d:1e:d8:b4:9e:a6:4c: 8f:07:bc:48:dd:f2:8f:4e:86:f4:7e:1d:04:fe:4f:10:f1:bd: 68:b3:41:66:1e:79:33:80:a6:99:4d:99:39:1c:ce:a1:b1:ea: 5b:3d:5a:0f:c6:e0:d8:42:82:19:59:cb:03:39:a7:79:e2:ee: 2f:26:6d:32:03:96:d2:dc:1f:54:ea:45:8c:42:93:09:a2:c4: b7:03:88:d5:cc:82:9b:08:cf:3e:7f:f6:75:db:82:7a:80:86: 07:c7:c4:4b:09:d0:9e:d8:5f:50:d3:54:52:67:4c:21:11:89: c4:2e:53:e9:bb:9e:7a:12:c5:cf:e9:76:f7:74:2c:0b:18:48: 01:25:30:c4:92:30:1f:9c:ce:23:84:3c:33:89:de:5f:16:4d: f8:b3:60:0b:f1:af:68:86:1c:86:c5:58:2a:43:21:91:43:43: 15:c1:e6:40:5b:a0:c5:91:da:ed:95:08:4c:1f:23:2b:d6:44: 50:9b:47:5a:a0:6d:c3:3e:1e:91:6f:3f:08:5a:67:09:a2:ce: 66:5f:d5:6f:2d:37:95:c6:dc:ad:67:e5:b0:d5:c2:90:13:6d: 81:01:35:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05e5cztU+qTg16p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNkMWUyZDUtNTA4OS00NTE0LTgwZmItNjUyNjMxYjNj ZmFiMB4XDTI2MDMxOTIyMTE0MFoXDTI2MDYxNzIyMTE0MFowLzEtMCsGA1UEAxMk MzdhY2QzZTAtYWQwNS00ZjA3LWIzMTItMTE2Mjg3NjZmZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQHw4lJcJhJbKmTs8B5rlPYVIORj56xv+scO H4i4nd6CzyHjGr8JnD27Q3Xutj61J7gRaOw9xeCVDzLfUy90urtMc/73oSPEB/Wj oKPPXCT66L3RY89ZBwrzP5FWfDPBkW6KdEiSWdWpf1npHk7GYTbVcPeKqmei6e9X 4qZHnWyF0aLnhncXg+xPT+1z4+I5prvu8jAzq6N0vtNld3QDPO+n0Ii498z0sb90 FX7kJNcXHdN5BypH2gvTJfFzXbf4OpkLDEGb+nHLfxltC9K7Gi1a9rXf8GJl5MXA UsEEyK378TPd2UG1I9Jr7B7gcuWVxzHi/fqjPD5UEIgxnDo2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+WKrccrrPRZghOtaBiKIWWXT1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xM2Qx ZTJkNS01MDg5LTQ1MTQtODBmYi02NTI2MzFiM2NmYWIvZTM5NTJlNTAtYjQ5ZS0z OGQzLWIzZjItZWUzNjAwZWU1YjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTNkMWUyZDUtNTA4OS00NTE0LTgw ZmItNjUyNjMxYjNjZmFiLzEzZDFlMmQ1LTUwODktNDUxNC04MGZiLTY1MjYzMWIz Y2ZhYi5jcmwwHwYDVR0jBBgwFoAUA1NA98l+wMj8uy6wplNvBCDW4Y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xM2QxZTJkNS01MDg5LTQ1MTQtODBmYi02NTI2 MzFiM2NmYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1f4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKimHH77TN935XKVDCHOSzanH2pF68pj3p1xNFb3HR7YtJ6mTI8HvEjd 8o9OhvR+HQT+TxDxvWizQWYeeTOApplNmTkczqGx6ls9Wg/G4NhCghlZywM5p3ni 7i8mbTIDltLcH1TqRYxCkwmixLcDiNXMgpsIzz5/9nXbgnqAhgfHxEsJ0J7YX1DT VFJnTCERicQuU+m7nnoSxc/pdvd0LAsYSAElMMSSMB+cziOEPDOJ3l8WTfizYAvx r2iGHIbFWCpDIZFDQxXB5kBboMWR2u2VCEwfIyvWRFCbR1qgbcM+HpFvPwhaZwmi zmZf1W8tN5XG3K1n5bDVwpATbYEBNZQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:10:18 2026 by rpki-client