$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa File: fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json) Hash identifier: lzc7yXKnBLhurZngKK8aTkusZ4y6b1KftRgCZnqC5/k= Subject key identifier: 0A:8E:E6:D1:83:47:3B:85:EF:97:BB:0A:C2:DF:DE:2C:7C:64:27:E4 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E8D2E6FF3D198BC69680 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 200.69.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e8:d2:e6:ff:3d:19:8b:c6:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=474b9b1d-c326-4902-81f5-672f2d1452cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:9e:6f:1e:03:bb:78:eb:15:fb:aa:56:27: 7a:a8:bc:24:69:d8:9b:b3:92:ce:ff:37:74:4a:bf: 5e:8d:e1:a0:e8:f9:10:48:04:3d:97:28:51:54:1a: 4b:1a:09:d8:22:2b:ca:f9:50:97:f8:14:ab:49:d8: 6c:aa:bc:09:ab:82:86:a5:88:92:89:1d:69:98:56: 6c:67:cc:7f:2b:59:83:05:62:7d:18:09:56:53:da: 84:11:c3:3f:05:ed:26:e6:89:85:b6:f3:c7:4b:e4: 37:46:66:7a:8f:9b:e1:c9:62:ab:38:9e:49:80:ab: e4:ed:c7:23:50:6c:91:5e:46:96:d7:57:82:52:06: a9:b9:15:94:0c:54:d6:47:3e:db:20:ac:30:3b:a4: 71:0d:93:4d:b6:a8:3e:74:e3:97:37:d7:44:c7:6b: cc:a6:de:33:52:bc:02:aa:8c:8c:7a:09:a5:e1:61: b5:b4:bd:e2:54:cd:b7:03:67:ea:3f:39:e4:6c:e0: 4f:74:93:45:48:ee:c9:21:3b:ab:ed:39:25:4f:6c: 62:ae:f2:ee:f4:8c:d2:d8:4a:6b:e4:48:70:71:66: 83:c8:26:91:ce:34:b2:df:e6:77:7d:a0:ce:f9:da: a3:02:ee:76:6d:cd:c9:02:0d:e9:00:76:72:94:ef: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:E6:D1:83:47:3B:85:EF:97:BB:0A:C2:DF:DE:2C:7C:64:27:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 200.69.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7f:4b:b3:bd:1d:58:39:55:48:d9:ee:9e:94:43:9d:8a:80: 42:b4:a9:44:0a:a3:de:d0:59:a2:dd:d8:a3:f1:f1:7c:44:30: db:52:3a:07:9b:13:da:b9:ec:5a:8b:2d:a6:4e:c6:bc:ea:28: 14:70:81:24:46:ae:53:35:94:a0:56:93:9f:ff:c4:8e:e9:0f: 84:d0:dc:2b:75:99:fa:3f:b4:4e:53:da:a6:ee:80:ec:a0:30: 97:08:fa:ef:c5:f9:b3:d2:d9:a7:23:f3:71:0e:02:55:28:7d: a2:d3:1c:34:f3:fa:2c:ec:18:c4:65:56:34:1f:61:0b:b1:42: ab:ce:d5:71:30:50:aa:71:73:da:d3:3f:c2:c2:7d:a7:d8:83: 7b:3e:02:8c:25:e6:5c:05:1d:db:c7:ae:55:25:45:e7:72:f4: 36:e7:a0:b6:b3:91:a6:b9:db:34:09:72:db:96:7c:d6:9a:02: 00:59:a1:64:7b:00:d5:48:f5:9e:3c:5e:74:5f:e7:63:e5:eb: 73:4f:b3:4f:47:ce:71:50:34:86:e5:13:39:b8:61:1b:30:55: 48:bf:4f:52:12:b4:0b:18:88:65:77:11:3d:61:db:dd:4a:b6: 2c:20:e4:89:75:97:4d:d2:72:b7:72:5b:2d:7e:02:2a:69:7b: 10:29:e7:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOjS5v89GYvGloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDc0YjliMWQtYzMyNi00OTAyLTgxZjUtNjcyZjJkMTQ1MmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMmebx4Du3jrFfuqVid6qLwkadibs5LO/zd0 Sr9ejeGg6PkQSAQ9lyhRVBpLGgnYIivK+VCX+BSrSdhsqrwJq4KGpYiSiR1pmFZs Z8x/K1mDBWJ9GAlWU9qEEcM/Be0m5omFtvPHS+Q3RmZ6j5vhyWKrOJ5JgKvk7ccj UGyRXkaW11eCUgapuRWUDFTWRz7bIKwwO6RxDZNNtqg+dOOXN9dEx2vMpt4zUrwC qoyMegml4WG1tL3iVM23A2fqPznkbOBPdJNFSO7JITur7TklT2xirvLu9IzS2Epr 5EhwcWaDyCaRzjSy3+Z3faDO+dqjAu52bc3JAg3pAHZylO87GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqO5tGDRzuF75e7CsLf3ix8ZCfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZmM5YWE1YTYtMDJjZC0z NzUwLTg5OGUtZjIyMWFlODE4Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyEUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx/S7O9HVg5VUjZ7p6UQ52KgEK0qUQKo97QWaLd2KPx8XxEMNtSOgeb E9q57FqLLaZOxrzqKBRwgSRGrlM1lKBWk5//xI7pD4TQ3Ct1mfo/tE5T2qbugOyg MJcI+u/F+bPS2acj83EOAlUofaLTHDTz+izsGMRlVjQfYQuxQqvO1XEwUKpxc9rT P8LCfafYg3s+Aowl5lwFHdvHrlUlRedy9DbnoLazkaa52zQJctuWfNaaAgBZoWR7 ANVI9Z48XnRf52Pl63NPs09HznFQNIblEzm4YRswVUi/T1IStAsYiGV3ET1h291K tiwg5Il1l03ScrdyWy1+AippexAp51w= -----END CERTIFICATE-----Generated at Thu Mar 26 17:35:09 2026 by rpki-client