$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa File: 7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa (raw, json) Hash identifier: Q+DuqlVuqaTff+ia8OJXaKW1mL3OPfW4Boe3gSnYyhE= Subject key identifier: 1A:EB:0A:3B:73:29:FB:27:B3:38:E9:5B:48:D9:05:FC:BF:62:92:E1 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFE7028E4BDB276533BE80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 17359 IP address blocks: 199.200.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e7:02:8e:4b:db:27:65:33:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=cab5da84-f288-41e2-b081-7f6810f10a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:f7:3c:79:ce:da:83:d0:46:78:50:3f:34: 70:a6:55:3a:23:86:3d:4b:ae:01:f4:16:b0:2f:24: 12:3e:93:f4:ac:3b:4d:68:91:d6:1c:d9:66:a7:5a: 5d:f9:20:61:8d:c5:66:05:e5:c0:25:68:d9:e4:5e: b3:ec:10:74:6f:c3:bc:f9:b6:6a:47:3e:f4:06:87: c7:bc:dc:2d:d3:59:23:95:92:39:71:51:8f:58:43: 4f:8f:2b:c7:a9:18:13:09:81:22:f0:97:9e:1e:d7: c9:16:6b:17:26:16:a9:6f:dd:54:96:26:8c:2d:22: d8:68:47:2d:8f:88:57:38:4a:bc:f1:1d:62:5c:ff: 73:3b:ef:3e:57:70:b1:31:c8:36:8f:81:d5:af:f6: 06:a0:5a:62:e0:97:e4:7c:2b:17:bb:32:0c:de:4a: 83:c0:3f:fc:8d:72:de:3a:19:e6:ac:76:b6:26:b7: 50:30:71:c8:4c:c1:1e:7a:b4:40:b5:09:08:59:92: ba:6d:c1:57:c2:0b:75:71:8d:4c:86:2d:79:86:f3: 0f:6f:00:fd:5a:d4:7a:d3:4b:eb:39:8a:c0:cd:94: 00:8d:b9:82:7e:4e:5e:6c:af:80:b0:ba:07:ea:e7: 09:7a:ac:88:93:a8:93:0b:df:ed:10:bb:2c:d4:ab: 31:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EB:0A:3B:73:29:FB:27:B3:38:E9:5B:48:D9:05:FC:BF:62:92:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 199.200.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ea:6d:be:a6:ab:27:fa:24:74:0e:5b:d6:fb:84:2e:44:d4: 9f:6b:d6:35:1f:30:c4:16:e1:01:e5:38:04:69:33:1f:3e:21: 90:36:30:b4:22:c0:ac:5d:60:5f:85:6a:70:36:61:6a:9c:19: cc:1e:65:63:e9:d1:0f:49:f8:1c:a1:80:fe:a2:41:41:c3:8c: 6e:6d:1a:72:68:e3:79:33:ba:c1:ea:a0:c6:51:56:2e:67:c4: ac:a7:eb:40:1b:21:fe:47:14:2f:23:07:ce:c3:3f:2c:b1:4e: 44:02:ad:ed:f8:4e:3e:1b:8e:3e:29:b1:4e:01:ec:36:d0:5e: bc:d0:83:f4:44:7e:4e:6a:d1:b6:61:ca:1a:9b:ba:e3:4c:67: 64:27:a2:14:7b:ad:89:72:4c:af:63:9e:1b:22:7a:62:97:89: 70:1d:bf:9e:02:92:de:ff:78:ff:94:74:b1:de:09:ac:6e:0e: 4e:1c:d1:6a:47:88:82:d9:4d:6a:1d:f5:69:38:23:82:6e:2c: b5:c3:3c:37:fc:a1:17:fa:f1:78:d9:23:14:bf:6a:1a:ee:69: 20:fb:c1:6e:42:99:6d:21:5b:1a:6e:a4:07:12:67:a7:4d:4f: 05:0e:ec:44:e2:af:04:a6:12:45:0a:c3:ec:44:7b:ac:f5:55: 7b:71:90:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+cCjkvbJ2UzvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk Y2FiNWRhODQtZjI4OC00MWUyLWIwODEtN2Y2ODEwZjEwYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ73PHnO2oPQRnhQPzRwplU6I4Y9S64B9Baw LyQSPpP0rDtNaJHWHNlmp1pd+SBhjcVmBeXAJWjZ5F6z7BB0b8O8+bZqRz70BofH vNwt01kjlZI5cVGPWENPjyvHqRgTCYEi8JeeHtfJFmsXJhapb91UliaMLSLYaEct j4hXOEq88R1iXP9zO+8+V3CxMcg2j4HVr/YGoFpi4JfkfCsXuzIM3kqDwD/8jXLe OhnmrHa2JrdQMHHITMEeerRAtQkIWZK6bcFXwgt1cY1Mhi15hvMPbwD9WtR600vr OYrAzZQAjbmCfk5ebK+AsLoH6ucJeqyIk6iTC9/tELss1KsxbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrrCjtzKfsnszjpW0jZBfy/YpLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvN2E0MmYwNTYtNGJlZi0z YTU2LThkYjMtNGNhOGMzOGNkNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/qbb6mqyf6JHQOW9b7hC5E1J9r1jUfMMQW4QHlOARpMx8+IZA2MLQi wKxdYF+FanA2YWqcGcweZWPp0Q9J+ByhgP6iQUHDjG5tGnJo43kzusHqoMZRVi5n xKyn60AbIf5HFC8jB87DPyyxTkQCre34Tj4bjj4psU4B7DbQXrzQg/REfk5q0bZh yhqbuuNMZ2QnohR7rYlyTK9jnhsiemKXiXAdv54Ckt7/eP+UdLHeCaxuDk4c0WpH iILZTWod9Wk4I4JuLLXDPDf8oRf68XjZIxS/ahruaSD7wW5CmW0hWxpupAcSZ6dN TwUO7ETirwSmEkUKw+xEe6z1VXtxkCo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:29 2026 by rpki-client