$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa File: 69935949-26cb-3a1a-85e7-7b6948013483.roa (raw, json) Hash identifier: 2UXjp5YuGeI3hOYZDyyI3fe9NiOtJERAzWm7d2i8guw= Subject key identifier: FD:45:17:3E:FB:39:EF:B3:D7:DB:18:5E:A5:CB:79:04:1E:BC:8C:84 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584D3DFFAC357ED1BBB05D230B00 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396952 IP address blocks: 199.36.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ac:35:7e:d1:bb:b0:5d:23:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d5b5f0b5-a960-4b7f-a50f-091fb19117af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:1c:b4:c5:7e:2e:c8:fc:71:91:11:33:b9: 4b:8f:dd:53:7e:6c:79:13:b2:52:de:01:14:12:36: 3e:f9:67:24:88:ac:3b:7b:60:01:43:2f:33:ff:b6: ce:5d:73:2d:b9:c8:4a:dc:a7:ef:c7:23:66:a7:29: 55:0f:fa:0f:86:76:d4:12:ce:9d:b1:47:65:60:07: 07:82:44:cf:a3:1d:ea:60:95:af:dd:00:39:a0:4c: 71:a2:72:3a:51:d9:32:5b:ff:3e:35:00:07:73:00: 0e:59:8f:e1:8b:12:26:48:3d:7f:6f:bc:1f:19:25: ca:d0:bd:e7:56:01:92:21:26:12:1b:83:92:39:40: 1d:9e:4f:25:cb:fb:d6:1d:8a:14:be:b5:d7:23:40: 48:4a:a3:de:11:4b:9f:16:24:3a:e4:53:8c:c8:c4: 6a:ab:34:3f:11:23:85:ef:1b:9f:56:f3:66:8f:f0: 78:78:d3:6b:db:6d:57:13:e3:b4:a5:6d:37:ba:15: 48:24:13:7b:c7:4e:af:22:ec:2e:7b:20:9a:1d:20: b0:40:b5:2d:e7:df:ea:cd:f4:04:c4:ae:4f:e6:af: 82:00:12:fd:61:49:1d:32:ac:3c:76:a5:38:a4:1e: b8:93:dc:36:6e:ae:5e:19:e6:b1:a5:10:56:54:d6: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:45:17:3E:FB:39:EF:B3:D7:DB:18:5E:A5:CB:79:04:1E:BC:8C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 199.36.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ab:fe:21:fa:09:e3:a9:a4:a8:94:c5:4a:ce:8f:6c:8d:0d: 4a:06:d6:08:4c:6a:78:08:ed:64:51:78:c2:89:02:13:52:31: 09:31:9b:39:92:92:f3:c1:fb:6b:6a:b4:49:41:4e:ee:74:e0: 65:25:7f:42:21:73:2e:b4:98:61:b7:f5:6d:db:9b:15:9c:58: 33:8e:6f:8c:cd:ea:9a:10:37:33:65:85:2b:ef:6e:ac:81:c7: 26:61:18:46:8c:ec:62:de:09:5f:1f:bf:35:3a:70:1a:f2:b9: 91:4f:bd:d2:b3:03:6b:64:9c:90:a7:cf:44:ab:a7:87:cc:02: d5:27:5b:26:6e:6f:79:1a:bc:0c:81:c0:20:e6:e8:5c:22:3b: 93:a2:79:a7:25:fa:cb:47:6c:c4:95:5f:d2:de:ae:5d:1d:e9: bf:06:cc:3a:dc:39:16:1d:a0:f3:be:f3:3a:81:a3:bb:6f:ad: a8:e9:00:63:b5:5f:e5:9b:8f:0c:71:64:1a:f0:a9:12:aa:ea: 4f:78:ea:95:f9:55:6a:d2:2b:4f:10:e2:f2:89:70:38:0a:e3: 5f:63:42:f8:09:e7:a4:12:f6:17:87:32:aa:7c:f6:e9:1d:ca: d3:20:e2:18:7c:5b:22:33:a8:b3:39:04:2e:d1:d8:3a:80:f6: bb:aa:1b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6w1ftG7sF0jCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDViNWYwYjUtYTk2MC00YjdmLWE1MGYtMDkxZmIxOTExN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqYctMV+Lsj8cZERM7lLj91Tfmx5E7JS3gEU EjY++WckiKw7e2ABQy8z/7bOXXMtuchK3KfvxyNmpylVD/oPhnbUEs6dsUdlYAcH gkTPox3qYJWv3QA5oExxonI6UdkyW/8+NQAHcwAOWY/hixImSD1/b7wfGSXK0L3n VgGSISYSG4OSOUAdnk8ly/vWHYoUvrXXI0BISqPeEUufFiQ65FOMyMRqqzQ/ESOF 7xufVvNmj/B4eNNr221XE+O0pW03uhVIJBN7x06vIuwueyCaHSCwQLUt59/qzfQE xK5P5q+CABL9YUkdMqw8dqU4pB64k9w2bq5eGeaxpRBWVNZZWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1FFz77Oe+z19sYXqXLeQQevIyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvNjk5MzU5NDktMjZjYi0z YTFhLTg1ZTctN2I2OTQ4MDEzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+r/iH6CeOppKiUxUrOj2yNDUoG1ghMangI7WRReMKJAhNSMQkxmzmS kvPB+2tqtElBTu504GUlf0Ihcy60mGG39W3bmxWcWDOOb4zN6poQNzNlhSvvbqyB xyZhGEaM7GLeCV8fvzU6cBryuZFPvdKzA2tknJCnz0Srp4fMAtUnWyZub3kavAyB wCDm6FwiO5Oieacl+stHbMSVX9Lerl0d6b8GzDrcORYdoPO+8zqBo7tvrajpAGO1 X+WbjwxxZBrwqRKq6k946pX5VWrSK08Q4vKJcDgK419jQvgJ56QS9heHMqp89ukd ytMg4hh8WyIzqLM5BC7R2DqA9ruqGwI= -----END CERTIFICATE-----Generated at Thu Mar 26 02:48:04 2026 by rpki-client