$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa File: c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa (raw, json) Hash identifier: xrvb1Dqi0AhC0du1I4NQ8qv+Lg3P/hpnOLYVnMIromE= Subject key identifier: 82:8A:46:90:DA:3C:CA:BC:88:94:7D:C0:5A:6E:D3:BF:F6:A7:03:A6 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A26E1DAF4937AD5CC73880 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 400615 IP address blocks: 199.58.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:6e:1d:af:49:37:ad:5c:c7:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=b20494f9-4b08-410f-bdb5-0e47068d220a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:a7:92:05:46:26:5a:2e:4a:09:7c:25:a1: 2d:b4:ae:e8:68:92:b0:44:3a:dc:c3:a3:ef:42:a9: cf:f6:9b:71:44:c5:b8:e4:84:03:34:52:c5:4b:17: 21:b8:33:80:ee:8b:15:a5:a9:4f:27:2d:90:4c:13: 7b:1c:82:34:23:0b:d0:da:ff:b5:28:f8:03:8f:74: 84:d1:99:05:58:c5:76:7c:22:e7:f5:86:6c:18:f1: 7b:20:42:16:19:2c:c6:ec:38:03:7b:2d:0c:32:e8: 5c:30:af:79:2d:bb:5b:e0:34:09:50:c6:13:02:cd: c8:b1:27:45:1e:3d:68:7d:df:26:d2:87:a8:0c:a8: 78:4f:f2:b8:9e:0a:2c:37:8c:1e:c7:c9:99:73:53: 40:b8:5e:73:47:7d:8b:04:ea:a8:d7:0a:a3:94:b8: 0c:3e:d0:58:76:eb:f5:09:88:2a:ed:f4:0a:01:6c: 2f:61:7b:51:af:0c:8c:3c:5b:f3:56:1f:34:1a:6c: 2f:42:63:08:ac:d0:ea:74:02:a9:ee:3d:e2:80:a4: 07:84:68:73:9d:b7:9e:ba:9d:e4:03:aa:06:7d:74: 1e:05:dd:98:da:55:46:ab:47:6c:ab:5d:94:c3:60: a4:8e:51:af:0b:07:38:83:93:58:97:b4:1d:cb:00: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8A:46:90:DA:3C:CA:BC:88:94:7D:C0:5A:6E:D3:BF:F6:A7:03:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c00f9ac5-4131-301e-aa77-b7f7e35cff07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:05:f9:e8:2c:c0:74:79:fd:3a:f2:ee:a5:49:67:1e:4a:ae: 25:1a:fe:56:de:1c:c5:87:5b:ba:e3:a5:f7:a4:79:29:7e:23: ea:3b:e7:28:1f:07:78:06:27:ca:6d:0e:ae:0c:ac:e6:69:c1: 89:5c:01:cb:cb:98:15:30:94:9d:2b:99:15:b3:a4:c3:fc:2e: e4:df:92:29:50:4b:6f:3d:28:12:ec:a8:c5:6d:c3:07:77:8e: 1c:17:d1:c4:33:92:3b:c0:0d:77:fe:1b:85:59:36:cc:1c:43: c1:93:13:b6:4d:8e:17:b0:fb:9b:a3:89:76:5b:03:ea:d6:5e: 0b:40:f7:ee:d1:43:f9:a5:fb:ff:0c:31:97:b8:92:ff:6c:ff: 64:ba:53:d6:01:0c:06:6f:09:59:76:0e:92:73:ef:ae:ee:9c: 4f:83:45:d5:22:c8:82:cf:9b:5d:09:0e:9b:1b:65:b4:c8:f0: 4b:ce:ad:04:b2:41:38:70:eb:15:76:50:b6:04:f8:17:de:37: 4f:6e:66:bd:7c:c6:9a:3f:24:01:bc:dc:58:0f:fa:ff:b0:11: e4:29:0c:40:96:84:6c:1d:68:9e:91:20:7c:0f:94:10:9f:f5: 67:ec:fb:67:d7:14:03:d7:d3:14:43:99:99:b5:41:16:8c:9b: cb:6f:d8:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vom4dr0k3rVzHOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk YjIwNDk0ZjktNGIwOC00MTBmLWJkYjUtMGU0NzA2OGQyMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BenkgVGJlouSgl8JaEttK7oaJKwRDrcw6Pv QqnP9ptxRMW45IQDNFLFSxchuDOA7osVpalPJy2QTBN7HII0IwvQ2v+1KPgDj3SE 0ZkFWMV2fCLn9YZsGPF7IEIWGSzG7DgDey0MMuhcMK95Lbtb4DQJUMYTAs3IsSdF Hj1ofd8m0oeoDKh4T/K4ngosN4wex8mZc1NAuF5zR32LBOqo1wqjlLgMPtBYduv1 CYgq7fQKAWwvYXtRrwyMPFvzVh80GmwvQmMIrNDqdAKp7j3igKQHhGhznbeeup3k A6oGfXQeBd2Y2lVGq0dsq12Uw2CkjlGvCwc4g5NYl7QdywBVVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKKRpDaPMq8iJR9wFpu07/2pwOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYzAwZjlhYzUtNDEzMS0z MDFlLWFhNzctYjdmN2UzNWNmZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsF+egswHR5/Try7qVJZx5KriUa/lbeHMWHW7rjpfekeSl+I+o75ygf B3gGJ8ptDq4MrOZpwYlcAcvLmBUwlJ0rmRWzpMP8LuTfkilQS289KBLsqMVtwwd3 jhwX0cQzkjvADXf+G4VZNswcQ8GTE7ZNjhew+5ujiXZbA+rWXgtA9+7RQ/ml+/8M MZe4kv9s/2S6U9YBDAZvCVl2DpJz767unE+DRdUiyILPm10JDpsbZbTI8EvOrQSy QThw6xV2ULYE+BfeN09uZr18xpo/JAG83FgP+v+wEeQpDECWhGwdaJ6RIHwPlBCf 9Wfs+2fXFAPX0xRDmZm1QRaMm8tv2Pg= -----END CERTIFICATE-----Generated at Thu Mar 26 05:48:41 2026 by rpki-client