$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa File: 526e36cc-a981-3c59-acbd-26bbb5e64f70.roa (raw, json) Hash identifier: d8rWeuzqrjYjwSy7Z5WVlbxfnV8rtriXJXdY3bQVyO8= Subject key identifier: E3:1B:9E:18:30:32:12:08:69:1D:87:26:18:08:87:19:C6:F0:94:F5 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A26E535E0CA0B263099B80 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 399110 IP address blocks: 199.58.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:6e:53:5e:0c:a0:b2:63:09:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=2557e894-a20b-4ef7-81cb-bf09dd02f7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:d6:82:2d:e9:31:94:7e:88:1f:4d:74:c4: 53:dd:5c:54:0a:99:13:96:77:0f:1e:01:94:61:cb: 2e:58:57:99:52:9a:87:ef:83:24:63:c9:33:c2:ad: e3:94:a2:90:4f:73:9e:f5:c2:9d:fd:9d:91:7e:33: d0:b8:6c:89:34:60:f7:41:4a:df:aa:4d:dc:22:ba: b8:a6:3d:f9:37:ff:e7:17:4b:08:b2:7a:f8:84:bf: 6d:c2:d4:e4:a1:45:8f:ba:18:aa:e4:1a:53:09:57: 2f:d9:0b:51:4d:cc:3e:02:c8:bf:35:d5:72:35:35: 5f:fe:72:4c:96:fd:08:40:89:b8:50:3f:ed:e3:9e: 80:c9:cf:83:87:54:a3:b7:b3:f0:4d:1d:b4:02:97: 4b:06:6d:5c:87:ef:78:fb:52:c5:3c:59:ce:0f:d0: 5b:66:4c:d9:18:b3:37:26:69:08:92:ed:8f:a6:c0: 9d:83:07:71:d9:be:4e:6a:b7:90:c4:a4:f7:0e:f6: 2c:4d:f6:9d:a8:53:c4:d3:4b:e1:d1:e9:3a:95:4f: 24:0e:ee:a7:80:63:11:1a:20:cb:2f:64:38:1f:43: c6:e0:02:35:5d:f2:31:bf:9e:bc:08:a1:23:e6:07: 72:10:f8:dc:51:b9:46:b0:e4:51:d8:8b:21:8f:0a: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1B:9E:18:30:32:12:08:69:1D:87:26:18:08:87:19:C6:F0:94:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/526e36cc-a981-3c59-acbd-26bbb5e64f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:df:30:74:e0:81:a0:0c:84:e9:56:77:d2:f0:1d:2a:07:d3: d9:8c:c4:48:61:a1:9a:bc:af:96:73:e3:a2:e1:06:36:5f:1d: f4:2c:83:84:c1:8d:b7:d3:b4:67:cc:5e:0e:04:2a:b2:6e:89: 3c:ef:88:8b:b6:41:fa:6b:a0:c2:ee:8a:61:73:b9:0f:de:86: a1:c5:87:f8:8f:c0:40:ae:0e:3d:05:75:9f:86:55:b2:3c:43: 10:f7:d3:b0:0c:92:67:50:31:bb:26:12:f8:ed:e5:0c:5f:34: 5b:8c:39:1e:03:87:56:68:fb:18:10:e9:34:dd:9f:36:ed:b5: 08:4f:7f:fc:8b:b2:85:30:6a:c9:1a:4b:9d:17:9a:2d:14:c6: 58:67:03:c1:84:58:51:3e:8f:61:ef:f8:84:08:bc:a3:c5:93: cf:6a:53:12:7a:54:f6:e4:c2:3d:5d:85:79:7c:d2:dc:9e:5b: 65:d5:c2:1f:74:73:1b:83:53:1a:0d:1c:63:0d:e1:1f:9f:b9: 81:e3:b8:63:d9:a9:80:28:f7:59:a4:bb:ba:60:51:ea:aa:be: 04:f1:b8:9c:09:fd:e6:2a:45:23:43:2b:ff:bb:92:ac:8b:a8: 32:71:07:89:fd:92:5c:a4:92:65:16:fc:d1:39:24:25:02:fb: cb:41:2b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vom5TXgygsmMJm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MjU1N2U4OTQtYTIwYi00ZWY3LTgxY2ItYmYwOWRkMDJmN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ/Wgi3pMZR+iB9NdMRT3VxUCpkTlncPHgGU YcsuWFeZUpqH74MkY8kzwq3jlKKQT3Oe9cKd/Z2RfjPQuGyJNGD3QUrfqk3cIrq4 pj35N//nF0sIsnr4hL9twtTkoUWPuhiq5BpTCVcv2QtRTcw+Asi/NdVyNTVf/nJM lv0IQIm4UD/t456Ayc+Dh1Sjt7PwTR20ApdLBm1ch+94+1LFPFnOD9BbZkzZGLM3 JmkIku2PpsCdgwdx2b5OareQxKT3DvYsTfadqFPE00vh0ek6lU8kDu6ngGMRGiDL L2Q4H0PG4AI1XfIxv568CKEj5gdyEPjcUblGsORR2IshjwpP+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMbnhgwMhIIaR2HJhgIhxnG8JT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNTI2ZTM2Y2MtYTk4MS0z YzU5LWFjYmQtMjZiYmI1ZTY0ZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbfMHTggaAMhOlWd9LwHSoH09mMxEhhoZq8r5Zz46LhBjZfHfQsg4TB jbfTtGfMXg4EKrJuiTzviIu2QfproMLuimFzuQ/ehqHFh/iPwECuDj0FdZ+GVbI8 QxD307AMkmdQMbsmEvjt5QxfNFuMOR4Dh1Zo+xgQ6TTdnzbttQhPf/yLsoUwaska S50Xmi0UxlhnA8GEWFE+j2Hv+IQIvKPFk89qUxJ6VPbkwj1dhXl80tyeW2XVwh90 cxuDUxoNHGMN4R+fuYHjuGPZqYAo91mku7pgUeqqvgTxuJwJ/eYqRSNDK/+7kqyL qDJxB4n9klykkmUW/NE5JCUC+8tBK+o= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:40 2026 by rpki-client