$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa File: 96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa (raw, json) Hash identifier: B3NVmQLqkxp71xA6dn89z3raYnPRoexu6lEOm6bH57w= Subject key identifier: CA:63:39:15:3A:EF:AC:45:F0:40:3D:9B:CD:33:0E:15:A2:C8:1D:EF Certificate issuer: /CN=bcd833da-718f-40bc-8c07-110428cd6881 Certificate serial: 010D0C9F4328584D300A64F7404068698885C600 Authority key identifier: 78:6A:68:4F:55:E6:86:EB:3B:7A:8B:B8:1B:A1:46:DD:E4:77:8E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 398777 IP address blocks: 199.164.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/bcd833da-718f-40bc-8c07-110428cd6881.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/bcd833da-718f-40bc-8c07-110428cd6881.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:64:f7:40:40:68:69:88:85:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcd833da-718f-40bc-8c07-110428cd6881 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=266373d7-8aef-4527-8a01-32d12ea17a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:37:83:58:c2:05:44:56:88:a4:16:0f:b5: b6:e4:30:e6:a7:a3:01:02:e9:eb:72:3c:91:9a:e6: 15:51:82:18:bc:58:20:50:fe:6f:30:5f:64:ba:0d: d5:5a:a3:63:50:bc:86:a7:4a:57:1d:eb:6c:d1:44: 00:4c:a2:c2:7d:51:14:37:9a:83:9e:cf:4d:c6:84: d2:50:ca:a8:ec:28:c2:f0:6a:9d:73:ce:66:2b:db: 38:b7:68:5d:29:b7:17:7b:cd:0b:4d:d2:43:dc:ef: 49:d3:d4:e0:2f:50:2c:7a:d4:ee:8d:73:c3:f4:ab: cb:6d:41:2a:67:6f:d6:87:1c:50:5d:5f:c0:46:74: 09:f1:54:57:99:a7:ba:95:f8:af:2f:20:1d:d5:d9: 15:bf:40:a9:1e:7a:1f:86:a8:84:a0:9c:b2:c2:95: 59:50:ba:34:68:e4:22:d1:e0:aa:47:2b:88:a6:4c: e5:b8:3a:c7:2c:69:1f:12:f5:9f:0c:c2:e4:db:f9: b7:db:83:10:13:dc:c6:92:82:10:96:6b:21:ed:2d: d9:d1:9f:96:69:77:19:ba:e2:9c:5d:69:77:52:ca: a7:d4:f6:b1:94:ac:7a:e9:9f:bc:4c:ca:d5:36:6e: 8e:29:83:3d:5c:12:96:90:e5:09:de:56:27:36:5c: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:39:15:3A:EF:AC:45:F0:40:3D:9B:CD:33:0E:15:A2:C8:1D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/96cdb5c7-0ad5-39e3-8deb-46b700440d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881/bcd833da-718f-40bc-8c07-110428cd6881.crl X509v3 Authority Key Identifier: keyid:78:6A:68:4F:55:E6:86:EB:3B:7A:8B:B8:1B:A1:46:DD:E4:77:8E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcd833da-718f-40bc-8c07-110428cd6881.cer sbgp-ipAddrBlock: critical IPv4: 199.164.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c6:eb:89:70:ca:a8:5c:9e:66:b5:74:09:da:60:86:f9:4d: 64:f3:06:e8:6f:2e:99:94:22:e6:a9:4d:44:b9:02:eb:ae:4f: 65:56:ed:b4:f0:0a:df:d4:1a:4f:71:c8:0b:45:9e:41:b2:55: 2f:68:0b:df:f6:5e:1d:a7:1c:ec:38:51:ce:2d:51:17:aa:30: 2a:48:74:a3:ae:5a:9e:48:24:1d:e6:24:aa:a2:8e:b0:01:48: 8c:bb:01:2d:fa:f6:cb:f1:34:25:f5:f0:e5:a7:f2:dd:60:b0: 30:f4:25:3b:ac:16:76:27:45:09:46:5d:92:90:95:ea:6c:e2: 30:fe:95:f5:99:86:60:bb:98:16:02:95:e5:89:9a:01:01:63: cc:ec:0a:37:b0:b8:03:3a:b0:2a:b3:b9:0b:b7:b5:db:3a:d6: 27:d4:41:1b:86:c2:a0:e7:14:50:16:19:eb:f8:88:fc:f2:07: e7:42:9c:42:93:41:bf:ba:c2:6d:17:2f:e5:1c:12:3c:e8:fb: 6b:3f:c5:54:b1:56:4b:59:26:8b:45:66:58:08:c7:9c:71:f7: c7:11:a2:32:c2:29:f2:e1:17:67:01:32:fc:64:47:87:88:40: 97:2a:34:07:4d:e7:c8:92:6b:53:00:a8:b8:53:fa:c9:e4:0f: 22:2f:3c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmT3QEBoaYiFxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNkODMzZGEtNzE4Zi00MGJjLThjMDctMTEwNDI4Y2Q2 ODgxMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjY2MzczZDctOGFlZi00NTI3LThhMDEtMzJkMTJlYTE3YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0w3g1jCBURWiKQWD7W25DDmp6MBAunrcjyR muYVUYIYvFggUP5vMF9kug3VWqNjULyGp0pXHets0UQATKLCfVEUN5qDns9NxoTS UMqo7CjC8Gqdc85mK9s4t2hdKbcXe80LTdJD3O9J09TgL1AsetTujXPD9KvLbUEq Z2/WhxxQXV/ARnQJ8VRXmae6lfivLyAd1dkVv0CpHnofhqiEoJyywpVZULo0aOQi 0eCqRyuIpkzluDrHLGkfEvWfDMLk2/m324MQE9zGkoIQlmsh7S3Z0Z+WaXcZuuKc XWl3Usqn1PaxlKx66Z+8TMrVNm6OKYM9XBKWkOUJ3lYnNlxNFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpjORU676xF8EA9m80zDhWiyB3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2Q4 MzNkYS03MThmLTQwYmMtOGMwNy0xMTA0MjhjZDY4ODEvOTZjZGI1YzctMGFkNS0z OWUzLThkZWItNDZiNzAwNDQwZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNkODMzZGEtNzE4Zi00MGJjLThj MDctMTEwNDI4Y2Q2ODgxL2JjZDgzM2RhLTcxOGYtNDBiYy04YzA3LTExMDQyOGNk Njg4MS5jcmwwHwYDVR0jBBgwFoAUeGpoT1Xmhus7eou4G6FG3eR3jl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2Q4MzNkYS03MThmLTQwYmMtOGMwNy0xMTA0 MjhjZDY4ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6TjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnG64lwyqhcnma1dAnaYIb5TWTzBuhvLpmUIuapTUS5AuuuT2VW7bTw Ct/UGk9xyAtFnkGyVS9oC9/2Xh2nHOw4Uc4tUReqMCpIdKOuWp5IJB3mJKqijrAB SIy7AS369svxNCX18OWn8t1gsDD0JTusFnYnRQlGXZKQleps4jD+lfWZhmC7mBYC leWJmgEBY8zsCjewuAM6sCqzuQu3tds61ifUQRuGwqDnFFAWGev4iPzyB+dCnEKT Qb+6wm0XL+UcEjzo+2s/xVSxVktZJotFZlgIx5xx98cRojLCKfLhF2cBMvxkR4eI QJcqNAdN58iSa1MAqLhT+snkDyIvPCg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:42 2026 by rpki-client