$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa File: 760253bb-67cf-3504-9a97-8d6c02166051.roa (raw, json) Hash identifier: D43hl2OaC7VQyAz4N/hzyCxE5hEsEn3eMj3LOkmCPEw= Subject key identifier: EF:12:6B:B0:E2:85:9B:FD:76:6C:B3:A4:82:F3:96:E6:C6:F2:A9:E1 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584D237A6A072FA8B06849D8A980 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36290 IP address blocks: 199.21.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6a:07:2f:a8:b0:68:49:d8:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9611df5e-c1e1-492c-b4e9-81c1033bfdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:85:ec:34:bf:34:1d:5a:e8:46:45:8a:51: d8:11:74:3f:a6:04:a7:6f:bf:f7:fb:d9:81:5c:9a: ed:6e:dc:13:28:54:32:b1:e0:e1:e9:58:da:3e:35: a8:6a:28:c4:da:13:d3:df:d1:93:fc:56:f0:32:a3: e7:6c:b8:01:10:20:2d:b2:25:93:4b:3b:21:1b:16: e0:d7:0b:f4:8b:32:3e:b8:46:cd:ac:cf:db:ae:f9: 59:98:75:ab:f1:8e:ca:06:ef:f3:bb:ab:40:a0:09: 2d:cd:53:83:9e:5c:89:8f:3d:4d:28:4c:2e:ec:b7: cc:b5:b4:0e:35:0b:b1:dc:29:75:f1:0b:55:e5:06: 55:b8:c9:ab:12:75:87:89:b1:90:5a:f2:59:c2:d3: 09:ef:9f:37:68:ed:73:e3:95:31:15:c4:88:cb:0e: 00:ea:88:e3:10:68:14:19:11:dc:a5:c3:44:78:a1: dc:83:b6:a2:f0:7f:a5:81:c5:87:d1:17:5c:c9:ce: bb:05:5c:76:ee:dc:3a:a1:28:c6:f3:55:f8:4f:fa: a1:6c:42:51:33:3d:fb:6c:30:c3:fc:e8:7c:a4:49: 54:cd:d3:a9:13:20:ad:bc:bc:cc:7f:c8:6b:28:fe: 54:b1:f2:3a:7b:ee:43:ce:de:e4:17:ec:95:aa:51: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:12:6B:B0:E2:85:9B:FD:76:6C:B3:A4:82:F3:96:E6:C6:F2:A9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/760253bb-67cf-3504-9a97-8d6c02166051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 199.21.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1c:7a:99:65:6c:bd:5f:67:19:ac:23:f1:66:5d:b1:76:00: f1:dc:f4:b7:40:80:5e:fe:d0:c3:c3:77:c0:06:92:c9:e5:64: 83:ef:8a:9d:ce:cd:62:12:92:1a:19:8c:16:98:7c:39:cf:d7: 2f:e5:a6:0d:f6:ba:22:be:e4:85:5c:98:09:7b:a7:58:4c:35: e7:68:9d:32:e9:f7:dd:57:f3:1f:96:5d:8b:ec:32:83:a7:26: b2:d1:ae:f0:42:2e:b6:3d:d0:3b:36:fe:c7:e6:ea:75:10:0d: f4:94:ac:93:a9:ea:1b:a1:b9:98:69:03:58:48:bd:5e:c3:58: 7e:da:3f:dc:53:1e:eb:7d:87:fa:cc:c1:39:9f:ee:5f:ad:35: de:81:e8:6f:34:b8:7c:82:f2:58:b6:d9:a0:fa:1f:b0:e3:1b: 41:5f:e7:93:62:dd:09:ea:ac:54:96:26:57:1f:95:00:e8:01: ca:d8:3a:0d:df:53:e2:96:a3:66:c7:d4:b3:06:48:4c:d2:7f: c5:9c:e4:a0:b7:df:72:7f:e9:9b:c3:0c:d0:19:44:27:fc:6b: 64:82:a1:e0:ad:64:96:bf:70:11:e7:07:ec:5b:69:c9:0b:69: f1:56:41:17:81:02:ed:05:21:06:c0:43:72:79:9f:23:3b:f3: 2f:4d:00:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemoHL6iwaEnYqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTYxMWRmNWUtYzFlMS00OTJjLWI0ZTktODFjMTAzM2JmZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFqF7DS/NB1a6EZFilHYEXQ/pgSnb7/3+9mB XJrtbtwTKFQyseDh6VjaPjWoaijE2hPT39GT/FbwMqPnbLgBECAtsiWTSzshGxbg 1wv0izI+uEbNrM/brvlZmHWr8Y7KBu/zu6tAoAktzVODnlyJjz1NKEwu7LfMtbQO NQux3Cl18QtV5QZVuMmrEnWHibGQWvJZwtMJ7583aO1z45UxFcSIyw4A6ojjEGgU GRHcpcNEeKHcg7ai8H+lgcWH0Rdcyc67BVx27tw6oSjG81X4T/qhbEJRMz37bDDD /Oh8pElUzdOpEyCtvLzMf8hrKP5UsfI6e+5Dzt7kF+yVqlEAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8Sa7DihZv9dmyzpILzlubG8qnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvNzYwMjUzYmItNjdjZi0z NTA0LTlhOTctOGQ2YzAyMTY2MDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAcepllbL1fZxmsI/FmXbF2APHc9LdAgF7+0MPDd8AGksnlZIPvip3O zWISkhoZjBaYfDnP1y/lpg32uiK+5IVcmAl7p1hMNedonTLp991X8x+WXYvsMoOn JrLRrvBCLrY90Ds2/sfm6nUQDfSUrJOp6huhuZhpA1hIvV7DWH7aP9xTHut9h/rM wTmf7l+tNd6B6G80uHyC8li22aD6H7DjG0Ff55Ni3QnqrFSWJlcflQDoAcrYOg3f U+KWo2bH1LMGSEzSf8Wc5KC333J/6ZvDDNAZRCf8a2SCoeCtZJa/cBHnB+xbackL afFWQReBAu0FIQbAQ3J5nyM78y9NAEg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:52:23 2026 by rpki-client