$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa File: acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa (raw, json) Hash identifier: w/Tw03vYtOU5L4ZfLfpSjyyY2iowF1ENUS1P2c3utxM= Subject key identifier: 89:1F:76:E1:94:21:9C:71:B0:63:82:9B:40:F9:EB:A2:E0:62:01:59 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E89ED28FE184840D4860 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 198.100.44.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e8:9e:d2:8f:e1:84:84:0d:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=88d38358-77e7-48c2-a479-977495237fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:e8:3c:63:f9:eb:16:1e:90:bc:81:45:8f: 04:85:0f:e8:a0:d1:2f:d2:2d:23:cc:49:16:5b:77: f7:ea:23:08:ed:eb:8c:e4:30:36:61:2d:62:b7:54: 3c:10:34:fe:b6:d0:80:71:0c:4b:be:c1:d0:64:6e: 26:53:4d:cc:c7:60:15:d6:2e:f4:fd:a9:e7:2c:5d: ab:c9:20:f8:04:ab:e2:2d:70:f5:e3:24:f1:6b:42: b4:06:51:f9:77:03:ae:7d:27:d2:47:a5:f6:a4:d4: 33:79:a5:d5:05:41:71:e1:89:eb:a6:e0:d4:30:6e: e5:90:04:b4:27:a1:b4:87:fa:e1:31:0f:9c:e0:2b: 5c:49:cb:4d:ce:8f:56:08:db:8b:05:43:e8:29:ba: 62:61:77:76:06:1e:c6:b3:68:35:5a:a5:04:f9:fe: 7a:35:53:b2:68:2e:aa:70:06:3f:c2:40:7a:ba:47: cc:64:57:8c:63:9b:6c:12:2c:32:58:c7:a8:a7:79: 75:4e:12:b0:4c:48:f4:7a:a5:0a:e9:a1:b7:c2:5e: 78:b9:b7:48:7f:b5:2e:09:3d:44:d2:94:73:85:5e: 73:46:08:e6:8b:a0:07:80:a2:32:6c:36:62:d5:78: 42:4b:f0:d6:89:ef:9a:c2:ab:c6:e4:8b:c1:52:c9: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1F:76:E1:94:21:9C:71:B0:63:82:9B:40:F9:EB:A2:E0:62:01:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/acfa99ce-cc35-3066-9e60-02a2e4a9db80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 198.100.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:22:6d:f2:28:99:62:8a:4f:ba:3a:40:7c:73:04:c7:5d:e5: 95:87:51:3a:cd:29:40:67:f4:8d:d9:e9:a2:f1:70:33:1f:f6: 02:8b:06:7e:0f:e6:d2:6f:c6:de:b1:5a:7f:a7:78:b6:a6:f5: a1:7d:06:e0:8b:c1:6e:38:11:98:98:a9:77:b0:08:ad:1a:71: c9:e9:78:d5:c2:b4:f3:84:a0:7a:b9:0a:29:9b:2f:90:ad:f2: 89:6a:3c:7b:5f:7b:87:9f:cc:96:a0:f0:4f:0f:c4:ff:32:b2: 4e:fc:67:08:57:30:05:da:72:fe:e2:ed:ed:ce:66:20:d5:12: 69:ac:c4:47:bf:19:cf:9b:e1:15:f2:ba:72:ad:23:1f:13:cd: d0:9c:b4:b2:80:a3:0d:a3:a8:2c:35:51:5f:a0:ab:f8:f6:9f: b7:4b:df:e3:83:8e:7d:02:f6:7f:a6:3d:44:4f:ca:50:61:47: eb:df:bb:52:fc:3f:c4:e9:2e:d5:61:e9:fc:6a:c1:b9:f6:a6: e3:1c:e4:1e:3c:e2:9c:e9:b4:b2:d9:e0:21:bc:b9:0d:50:32: e9:63:5f:1d:16:71:41:f7:c4:e2:72:73:c8:76:de:29:3e:2e: 95:a3:d8:50:08:7e:14:16:e3:13:85:91:a2:97:69:68:41:bb: 9b:1b:0d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOie0o/hhIQNSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODhkMzgzNTgtNzdlNy00OGMyLWE0NzktOTc3NDk1MjM3ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiroPGP56xYekLyBRY8EhQ/ooNEv0i0jzEkW W3f36iMI7euM5DA2YS1it1Q8EDT+ttCAcQxLvsHQZG4mU03Mx2AV1i70/annLF2r ySD4BKviLXD14yTxa0K0BlH5dwOufSfSR6X2pNQzeaXVBUFx4YnrpuDUMG7lkAS0 J6G0h/rhMQ+c4CtcSctNzo9WCNuLBUPoKbpiYXd2Bh7Gs2g1WqUE+f56NVOyaC6q cAY/wkB6ukfMZFeMY5tsEiwyWMeop3l1ThKwTEj0eqUK6aG3wl54ubdIf7UuCT1E 0pRzhV5zRgjmi6AHgKIybDZi1XhCS/DWie+awqvG5IvBUsn6xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkfduGUIZxxsGOCm0D566LgYgFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYWNmYTk5Y2UtY2MzNS0z MDY2LTllNjAtMDJhMmU0YTlkYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmQsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwibfIomWKKT7o6QHxzBMdd5ZWHUTrNKUBn9I3Z6aLxcDMf9gKLBn4P 5tJvxt6xWn+neLam9aF9BuCLwW44EZiYqXewCK0accnpeNXCtPOEoHq5CimbL5Ct 8olqPHtfe4efzJag8E8PxP8ysk78ZwhXMAXacv7i7e3OZiDVEmmsxEe/Gc+b4RXy unKtIx8TzdCctLKAow2jqCw1UV+gq/j2n7dL3+ODjn0C9n+mPURPylBhR+vfu1L8 P8TpLtVh6fxqwbn2puMc5B484pzptLLZ4CG8uQ1QMuljXx0WcUH3xOJyc8h23ik+ LpWj2FAIfhQW4xOFkaKXaWhBu5sbDXw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:15 2026 by rpki-client