$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa File: 6fa35cde-5df1-345d-be26-fa0c513a4da8.roa (raw, json) Hash identifier: 5vBUs0c3jzxf3IVc9EV1/NZwoJwctN6PqurpxBHgG7I= Subject key identifier: 81:AE:B2:3C:78:C0:D3:6D:CB:4A:82:47:1E:83:DD:EA:0D:C0:06:CE Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A26227E38A8C01A3CAAD00 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 397325 IP address blocks: 199.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:62:27:e3:8a:8c:01:a3:ca:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=bc4a76c3-1a86-4c82-9233-58060efd7044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:75:4a:0f:49:85:fc:43:e5:44:7a:fa:6d: 6e:dc:26:38:e4:1a:a9:c3:e9:25:ce:22:4f:72:8d: 9e:eb:e5:37:32:a7:d7:e7:94:49:42:0e:9a:2f:f8: e5:02:21:dc:c9:85:44:71:0a:5f:d2:09:6d:03:91: 5b:ea:55:88:22:c8:f8:78:2e:02:68:59:db:29:5a: a5:84:3f:52:9a:62:44:74:f6:de:bb:8c:b3:5e:16: 7e:90:b4:25:08:c3:c4:ce:4d:47:2d:91:33:d7:3e: 75:16:d0:9e:c6:24:0e:fd:77:f9:53:94:01:44:73: d9:85:88:f0:43:ac:67:ac:6c:91:6c:9b:2d:e7:42: 5a:97:e0:3a:03:67:41:49:f0:9d:97:ff:84:8e:97: 96:25:77:f0:bf:af:44:03:ef:8f:be:13:d6:cf:4e: 67:99:70:34:cd:95:b0:dd:37:03:55:89:f6:d6:a5: ff:45:35:f9:cc:53:39:1b:4a:56:a6:94:b6:4d:46: bb:0a:1e:29:1f:87:16:23:fd:0b:89:99:60:c2:13: 5e:e1:8b:ba:98:ab:cc:8e:4b:61:06:c7:81:d6:69: 7a:d7:fb:39:a3:9c:85:ec:0e:48:43:42:c7:41:64: 91:64:1b:53:02:d3:6f:8b:ce:ab:fd:8b:e0:de:6b: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AE:B2:3C:78:C0:D3:6D:CB:4A:82:47:1E:83:DD:EA:0D:C0:06:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/6fa35cde-5df1-345d-be26-fa0c513a4da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:51:1a:cf:20:75:f4:88:d5:fb:0b:16:23:ba:37:54:6c:ce: 12:ca:57:67:cc:4c:31:6b:90:0a:f6:c5:14:98:67:a5:ab:1f: 6f:91:5a:a8:ba:53:44:0b:e6:47:e9:54:d5:95:ca:94:a4:84: da:9a:cb:0e:d1:b1:17:b7:3e:e3:6f:f5:72:30:33:2c:50:e3: 53:56:3e:61:78:04:51:0c:d3:5f:d5:ca:c8:29:e2:de:b5:c0: 7d:b0:12:9a:fa:0f:50:8f:aa:8b:3c:9a:2c:64:49:36:a1:2f: 67:e4:84:62:39:1e:84:7b:1a:bb:0a:ab:ca:59:df:9f:5c:e4: 7e:37:4a:fa:ac:2f:22:98:c5:6e:31:62:c8:1a:31:62:a8:77: 1d:ce:7a:4d:b6:c4:09:b0:2e:86:71:62:ee:f7:3d:29:8a:dc: 54:d7:54:73:0b:a9:a9:49:a8:dd:0e:48:b9:5a:ac:31:65:92: 4a:50:f8:ae:d0:eb:e2:e5:88:5e:40:75:ad:5d:74:b2:6f:4d: ae:70:84:0b:0f:6b:62:e3:57:4d:ff:b5:66:1e:ac:45:a4:60: 99:47:23:46:7c:df:9c:ef:38:75:ad:bf:ad:50:0e:c4:35:f1: b4:11:c7:f0:f0:36:45:f1:74:2c:a6:c1:2c:ed:f8:1c:2f:d8: 28:d2:3e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomIn44qMAaPKrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk YmM0YTc2YzMtMWE4Ni00YzgyLTkyMzMtNTgwNjBlZmQ3MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EF1Sg9JhfxD5UR6+m1u3CY45Bqpw+klziJP co2e6+U3MqfX55RJQg6aL/jlAiHcyYVEcQpf0gltA5Fb6lWIIsj4eC4CaFnbKVql hD9SmmJEdPbeu4yzXhZ+kLQlCMPEzk1HLZEz1z51FtCexiQO/Xf5U5QBRHPZhYjw Q6xnrGyRbJst50Jal+A6A2dBSfCdl/+EjpeWJXfwv69EA++PvhPWz05nmXA0zZWw 3TcDVYn21qX/RTX5zFM5G0pWppS2TUa7Ch4pH4cWI/0LiZlgwhNe4Yu6mKvMjkth BseB1ml61/s5o5yF7A5IQ0LHQWSRZBtTAtNvi86r/Yvg3msUBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGusjx4wNNty0qCRx6D3eoNwAbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNmZhMzVjZGUtNWRmMS0z NDVkLWJlMjYtZmEwYzUxM2E0ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9RGs8gdfSI1fsLFiO6N1RszhLKV2fMTDFrkAr2xRSYZ6WrH2+RWqi6 U0QL5kfpVNWVypSkhNqayw7RsRe3PuNv9XIwMyxQ41NWPmF4BFEM01/Vysgp4t61 wH2wEpr6D1CPqos8mixkSTahL2fkhGI5HoR7GrsKq8pZ359c5H43SvqsLyKYxW4x YsgaMWKodx3Oek22xAmwLoZxYu73PSmK3FTXVHMLqalJqN0OSLlarDFlkkpQ+K7Q 6+LliF5Ada1ddLJvTa5whAsPa2LjV03/tWYerEWkYJlHI0Z835zvOHWtv61QDsQ1 8bQRx/DwNkXxdCymwSzt+Bwv2CjSPjU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:31 2026 by rpki-client