$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa File: 6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (raw, json) Hash identifier: YmlnntRhIl2+ZN700a7/PRi4v3Xp5RHAqmV+oNT7wxs= Subject key identifier: 4D:A8:89:DC:5D:ED:8A:DD:AB:4E:16:E6:74:BD:43:12:93:AF:93:87 Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584D44FA4341E8DCFB2B0149A000 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 26677 IP address blocks: 199.212.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:43:41:e8:dc:fb:2b:01:49:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b6a9b5f5-04d6-48d1-9bbe-f418638ce175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:84:95:a4:97:b5:c8:85:45:f8:db:24:5f:6e: 38:e7:08:a2:12:97:98:29:8d:eb:da:5b:e3:39:45: 39:02:b8:44:c2:97:28:d6:a6:ab:b2:4e:37:2b:be: ad:6c:f5:62:4a:ad:34:6b:b2:89:fd:7c:27:ff:e0: 4c:d9:ee:78:b0:88:7b:d3:17:ee:cd:76:3c:2e:85: 48:73:02:33:1b:d5:b8:fa:d5:3e:e6:f4:33:8e:46: b6:54:1d:08:c5:48:d3:49:d5:3c:e0:a0:f1:9c:46: 68:dc:b6:47:f2:5d:dd:31:96:82:e7:6d:a5:45:5d: bc:55:34:84:cf:d2:e0:d9:62:d4:65:c1:95:cc:29: 92:ca:8d:fa:5b:bb:b3:f3:29:ba:90:01:4e:8a:c3: 76:01:09:2a:58:0e:ed:c0:e7:2c:05:b4:b6:cc:fa: bd:2e:2c:5c:87:31:2f:64:1a:0c:3a:14:80:53:73: 0f:e1:f4:ca:7d:41:be:4b:15:9e:e7:26:92:7b:8a: 71:e5:f7:c6:32:95:c3:0a:22:8a:78:e6:4a:a0:78: f1:54:00:4b:21:ef:30:e3:a7:d8:7a:45:3a:9e:ec: 35:72:dc:09:c4:51:01:d0:11:48:d1:b4:34:34:f6: 04:7c:45:0e:41:6a:46:a4:ac:2e:46:61:72:c0:80: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A8:89:DC:5D:ED:8A:DD:AB:4E:16:E6:74:BD:43:12:93:AF:93:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: 199.212.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:75:5c:d4:f4:81:16:f0:fd:1a:32:36:a6:d4:36:26:6e:a2: 9f:e0:f0:6e:ba:ed:e4:bc:dc:7c:12:aa:0e:2f:e6:dc:36:6f: be:bd:c6:c7:b6:90:ed:d7:a8:e7:6a:c9:77:8e:2b:88:a3:cf: 70:eb:03:7e:8f:e8:8c:ab:bb:ab:c8:a2:7c:9c:bc:61:b3:1f: b2:e4:35:f6:e9:10:47:13:d6:ea:b7:1c:d2:dc:db:10:8e:73: ad:93:2f:b5:33:f3:b1:a9:23:32:65:21:85:0a:df:22:de:2e: 1c:3a:37:07:7a:dd:ca:00:88:4f:5c:b0:47:1b:8d:22:47:db: 87:8e:ab:1e:2e:b4:37:04:53:d4:39:24:64:5f:65:5e:30:d6: 4a:43:9f:28:45:6c:da:8e:28:af:06:c9:a7:68:6d:51:a9:f2: 68:bd:b5:e8:61:db:3f:c9:ba:0d:a1:26:9f:96:f6:31:e5:f2: bf:a8:80:d8:bc:3a:cf:53:8a:a8:08:7c:3e:89:5f:3a:1a:d7: c5:a7:78:e1:99:5b:7a:f6:d3:ad:02:3f:51:25:8b:47:a4:df: ab:46:ad:50:a7:18:21:e2:69:6b:95:00:91:d2:cf:92:27:bc: e6:f9:46:da:3b:b7:0c:cc:34:27:c1:ae:73:59:6f:da:26:a8: c6:64:33:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kNB6Nz7KwFJoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YjZhOWI1ZjUtMDRkNi00OGQxLTliYmUtZjQxODYzOGNlMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYSVpJe1yIVF+NskX2445wiiEpeYKY3r2lvj OUU5ArhEwpco1qarsk43K76tbPViSq00a7KJ/Xwn/+BM2e54sIh70xfuzXY8LoVI cwIzG9W4+tU+5vQzjka2VB0IxUjTSdU84KDxnEZo3LZH8l3dMZaC522lRV28VTSE z9Lg2WLUZcGVzCmSyo36W7uz8ym6kAFOisN2AQkqWA7twOcsBbS2zPq9LixchzEv ZBoMOhSAU3MP4fTKfUG+SxWe5yaSe4px5ffGMpXDCiKKeOZKoHjxVABLIe8w46fY ekU6nuw1ctwJxFEB0BFI0bQ0NPYEfEUOQWpGpKwuRmFywIC6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2oidxd7Yrdq04W5nS9QxKTr5OHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvNmY2MmQ1ZjAtNjc0Mi0z ODdiLThmNzYtMmZkMWMzYWQ0OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB1XNT0gRbw/RoyNqbUNiZuop/g8G667eS83HwSqg4v5tw2b769xse2 kO3XqOdqyXeOK4ijz3DrA36P6Iyru6vIonycvGGzH7LkNfbpEEcT1uq3HNLc2xCO c62TL7Uz87GpIzJlIYUK3yLeLhw6Nwd63coAiE9csEcbjSJH24eOqx4utDcEU9Q5 JGRfZV4w1kpDnyhFbNqOKK8GyadobVGp8mi9tehh2z/Jug2hJp+W9jHl8r+ogNi8 Os9TiqgIfD6JXzoa18WneOGZW3r2060CP1Eli0ek36tGrVCnGCHiaWuVAJHSz5In vOb5Rto7twzMNCfBrnNZb9omqMZkM6w= -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:13 2026 by rpki-client