$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d99cb051-c6d4-3f0e-a402-dec46de49224.roa File: d99cb051-c6d4-3f0e-a402-dec46de49224.roa (raw, json) Hash identifier: pD+Y1qqRgeWqwZj4GRj1bgkmriCCLqzFJVFNinS8/70= Subject key identifier: 90:69:88:81:86:85:87:B5:18:E9:02:03:1A:A4:BC:24:A1:85:C1:7A Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D32D4CBF7D24C05F40294C400 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d99cb051-c6d4-3f0e-a402-dec46de49224.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 0 IP address blocks: 199.255.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:cb:f7:d2:4c:05:f4:02:94:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=95ba3b77-db3b-4bac-b0a9-5b8f2aee9efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:d5:9c:2a:b4:a5:cb:cd:a4:49:60:ff:2a: 27:39:1c:b0:7f:8e:f8:39:93:92:a0:a8:e5:da:96: 59:ef:07:c9:93:3d:fc:3e:97:42:5c:6a:82:da:6f: 92:ea:b6:54:b4:c3:ee:49:54:da:94:07:cb:ca:08: 28:4c:a5:b6:cb:df:61:0a:d1:28:03:a3:e8:c9:cf: b9:49:20:46:d4:0d:b0:d9:77:48:5a:b1:b0:48:04: 29:0e:0b:78:b6:9f:05:ba:74:d7:f0:51:12:fa:8b: 4b:23:b1:21:05:50:d7:fc:54:b3:43:cb:53:c9:47: 47:81:7b:61:45:08:16:f3:37:67:fa:fa:4a:86:2d: b3:41:bc:6d:e7:d0:ad:73:40:81:e8:aa:91:dc:94: 87:91:38:97:45:d8:1e:03:af:97:9d:49:4a:4e:42: 1e:5a:6a:57:d6:d7:ec:27:a0:50:a5:5d:2b:1e:db: 2c:cc:fa:00:17:c4:6d:fe:21:0b:2c:04:f0:7f:02: f7:f3:7d:69:03:78:c0:6c:76:67:e7:9e:f5:56:61: f6:c8:88:fe:79:4b:2f:2e:7a:86:64:db:b5:50:a2: 2b:63:ae:e5:5c:dd:b7:18:2d:b2:8e:29:e4:00:89: 67:2e:5f:8f:86:8b:9d:52:72:74:9c:a7:86:1b:4d: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:69:88:81:86:85:87:B5:18:E9:02:03:1A:A4:BC:24:A1:85:C1:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d99cb051-c6d4-3f0e-a402-dec46de49224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 199.255.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2c:f4:a4:eb:92:be:05:f7:21:e0:93:4e:58:3f:61:55:5a: 9e:2b:6c:cc:06:5e:16:e4:5f:6a:f2:75:89:18:16:ee:aa:bc: a0:5c:c9:a4:81:bd:93:e5:86:d5:f8:ae:85:02:65:e8:b7:02: f6:c4:9e:3d:06:01:ca:5c:e5:56:af:28:a9:68:2c:5e:e3:78: 98:1f:ac:cb:84:5d:f8:22:72:79:3f:4b:56:cc:a5:da:13:1a: 9d:3f:3b:2b:f0:90:51:a3:f5:e5:95:2b:44:23:56:dc:f8:91: bf:b3:65:82:d3:fc:e4:55:45:af:af:17:60:1c:b0:0d:a7:6a: bc:97:dd:9b:a0:45:0d:f8:00:0a:14:79:a3:48:a4:b3:2e:be: c6:95:9e:47:2a:2e:77:c6:eb:02:03:13:a8:b6:08:f3:83:e4: 5a:74:95:c7:73:82:f1:b8:aa:47:4b:22:67:50:c7:0c:5a:4e: d8:7a:4d:51:2e:2e:10:54:d0:36:c6:38:1c:68:7a:d5:7e:2d: 06:45:d6:59:93:09:4c:b4:68:59:27:5c:a4:29:f7:6c:9d:fb: c1:a6:cc:c8:f6:e4:41:b1:95:d2:0e:18:fc:a7:fc:32:82:ca: 69:6c:92:e1:cb:f1:45:b1:e9:4b:ca:88:39:1c:8b:58:e5:8e: ea:8a:fa:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1Mv30kwF9AKUxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk OTViYTNiNzctZGIzYi00YmFjLWIwYTktNWI4ZjJhZWU5ZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjjVnCq0pcvNpElg/yonORywf474OZOSoKjl 2pZZ7wfJkz38PpdCXGqC2m+S6rZUtMPuSVTalAfLyggoTKW2y99hCtEoA6Poyc+5 SSBG1A2w2XdIWrGwSAQpDgt4tp8FunTX8FES+otLI7EhBVDX/FSzQ8tTyUdHgXth RQgW8zdn+vpKhi2zQbxt59Ctc0CB6KqR3JSHkTiXRdgeA6+XnUlKTkIeWmpX1tfs J6BQpV0rHtsszPoAF8Rt/iELLATwfwL3831pA3jAbHZn5571VmH2yIj+eUsvLnqG ZNu1UKIrY67lXN23GC2yjinkAIlnLl+PhoudUnJ0nKeGG01NLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBpiIGGhYe1GOkCAxqkvCShhcF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDk5Y2IwNTEtYzZkNC0z ZjBlLWE0MDItZGVjNDZkZTQ5MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUs9KTrkr4F9yHgk05YP2FVWp4rbMwGXhbkX2rydYkYFu6qvKBcyaSB vZPlhtX4roUCZei3AvbEnj0GAcpc5VavKKloLF7jeJgfrMuEXfgicnk/S1bMpdoT Gp0/OyvwkFGj9eWVK0QjVtz4kb+zZYLT/ORVRa+vF2AcsA2naryX3ZugRQ34AAoU eaNIpLMuvsaVnkcqLnfG6wIDE6i2CPOD5Fp0lcdzgvG4qkdLImdQxwxaTth6TVEu LhBU0DbGOBxoetV+LQZF1lmTCUy0aFknXKQp92yd+8GmzMj25EGxldIOGPyn/DKC ymlskuHL8UWx6UvKiDkci1jljuqK+js= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:42 2026 by rpki-client