$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa File: aefef297-d69c-3e8f-a44d-67a05d5e4438.roa (raw, json) Hash identifier: pyiZk15UPy3oIQfAJl7ZaUG+T8oMGcs0nCa3RF/A8pY= Subject key identifier: 77:39:54:3F:12:FC:22:5B:CA:C6:B3:7A:66:B1:A5:04:AC:9F:B1:44 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D2BDA19F4DC011D004FE41180 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397630 IP address blocks: 199.101.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:19:f4:dc:01:1d:00:4f:e4:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=4ad32940-7d0f-4261-b3fc-b8c357e8b931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ee:8b:15:88:88:21:87:1e:67:0d:45:31:b5: 51:dc:11:52:45:7a:f5:6b:3c:ec:b8:fc:47:4f:6c: 36:2f:d1:33:a6:60:ba:69:44:3d:3d:49:91:44:e4: fd:2c:7d:40:fc:d4:8f:d1:a5:d7:2e:f3:46:76:76: 08:af:90:29:93:de:cf:d8:19:7c:49:df:1c:76:d1: 07:ce:74:8e:27:bb:e3:bc:a8:ac:72:8e:9d:54:47: e1:68:18:cd:08:4c:fd:63:cb:d1:24:da:4e:2b:70: 74:4e:fc:f3:8d:53:ac:ca:0b:bc:08:5e:08:37:52: d3:12:fe:62:22:be:f7:d9:0b:b7:3e:8a:2d:88:4d: ca:fd:1b:01:c1:88:1d:78:2f:c3:ab:6c:32:b1:6c: e3:30:2a:70:d0:ac:d8:db:df:5b:69:a6:2f:01:ba: 54:f1:a9:0e:bc:06:89:0f:ed:db:b3:f7:72:56:fc: 87:12:27:89:7b:75:61:db:3c:10:fd:c1:13:b3:20: 8e:1c:a3:7b:54:ed:c1:ae:db:eb:f0:91:f6:b4:b1: d0:c7:d1:80:21:91:4e:10:24:f5:ed:26:8e:cb:62: e5:d5:c6:5f:3f:8c:da:71:d5:26:59:d7:e0:43:00: f9:e5:17:93:e7:d9:44:1d:1b:67:b2:26:17:30:f5: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:39:54:3F:12:FC:22:5B:CA:C6:B3:7A:66:B1:A5:04:AC:9F:B1:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 199.101.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:5c:c0:1d:81:1e:aa:16:58:8f:6e:32:48:c9:d5:ea:7d:2e: c4:d2:d0:e7:24:fc:7f:b7:5e:e5:d6:3e:72:2d:86:de:ff:c1: fe:f9:ed:40:cc:c5:5f:2c:f4:06:92:21:14:84:6f:6b:b2:84: 42:96:a2:34:09:b0:c3:b3:0a:4b:2e:9b:a5:a1:05:2b:b2:b4: da:73:2c:83:82:71:22:a0:ff:64:c6:f3:2b:c5:f3:1f:21:83: de:0a:c4:a3:5c:06:26:49:31:26:d3:76:0f:6a:1e:d7:2c:24: 1a:c7:03:b7:91:30:8e:3c:7d:2d:52:dd:1a:07:d7:83:54:57: 41:26:37:5e:d3:6d:b0:a6:17:fd:22:e6:7b:70:67:15:34:ae: d0:70:0f:e3:6b:af:b5:16:df:65:ff:e2:1c:63:a6:f4:cb:0e: e6:8a:6b:fa:4a:29:04:db:f2:06:3b:9d:10:27:e0:c0:51:8f: 50:23:0f:76:69:c7:67:2b:e5:50:ec:6d:fa:28:b8:fe:06:99: 1a:4f:70:71:3d:e7:c8:36:10:02:a2:01:0a:6e:9b:0a:45:ce: 83:e0:43:97:a6:a7:fe:d6:e5:35:7b:ae:ac:ad:a9:30:94:90: 1c:a8:d4:27:6b:d2:b7:34:a2:a9:70:27:57:b1:36:04:e1:74: 78:e9:9c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hn03AEdAE/kEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NGFkMzI5NDAtN2QwZi00MjYxLWIzZmMtYjhjMzU3ZThiOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu6LFYiIIYceZw1FMbVR3BFSRXr1azzsuPxH T2w2L9EzpmC6aUQ9PUmRROT9LH1A/NSP0aXXLvNGdnYIr5Apk97P2Bl8Sd8cdtEH znSOJ7vjvKisco6dVEfhaBjNCEz9Y8vRJNpOK3B0TvzzjVOsygu8CF4IN1LTEv5i Ir732Qu3PootiE3K/RsBwYgdeC/Dq2wysWzjMCpw0KzY299baaYvAbpU8akOvAaJ D+3bs/dyVvyHEieJe3Vh2zwQ/cETsyCOHKN7VO3Brtvr8JH2tLHQx9GAIZFOECT1 7SaOy2Ll1cZfP4zacdUmWdfgQwD55ReT59lEHRtnsiYXMPXbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc5VD8S/CJbysazemaxpQSsn7FEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWVmZWYyOTctZDY5Yy0z ZThmLWE0NGQtNjdhMDVkNWU0NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2WOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVcwB2BHqoWWI9uMkjJ1ep9LsTS0Ock/H+3XuXWPnItht7/wf757UDM xV8s9AaSIRSEb2uyhEKWojQJsMOzCksum6WhBSuytNpzLIOCcSKg/2TG8yvF8x8h g94KxKNcBiZJMSbTdg9qHtcsJBrHA7eRMI48fS1S3RoH14NUV0EmN17TbbCmF/0i 5ntwZxU0rtBwD+Nrr7UW32X/4hxjpvTLDuaKa/pKKQTb8gY7nRAn4MBRj1AjD3Zp x2cr5VDsbfoouP4GmRpPcHE958g2EAKiAQpumwpFzoPgQ5emp/7W5TV7rqytqTCU kByo1Cdr0rc0oqlwJ1exNgThdHjpnBI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:25 2026 by rpki-client