$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa File: 16e56f4d-ab70-3766-907b-22447a23eeb4.roa (raw, json) Hash identifier: JEaoNMay5cXmiklrC7HS9P1WxHYzyX7s4rnTMOYH80k= Subject key identifier: B5:A0:39:1D:D5:15:5D:9D:A9:13:EA:82:38:7E:74:99:57:BC:34:49 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584D40CB9DD89409AD610D0AD880 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 400702 IP address blocks: 199.127.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9d:d8:94:09:ad:61:0d:0a:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=3ea205a0-a709-40e3-8a64-d19894f3779d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:09:d1:ba:c2:ba:61:6c:2f:1e:da:67:e0: 7a:fc:ef:b7:b9:40:bb:90:e5:c0:62:29:7e:52:d4: 85:be:e8:77:fa:3d:b1:2c:07:bb:3f:02:49:d9:a5: e1:e8:b8:12:68:03:59:81:9d:56:d8:9d:3c:3b:77: 71:3f:d4:f6:23:de:e2:ac:15:a9:7d:a1:9b:54:b2: 90:f3:28:59:e3:25:7f:0c:2e:6e:32:f2:6b:dd:39: 15:06:26:1f:f5:74:f1:49:49:75:f2:ce:8e:a4:03: 79:99:7c:99:dc:82:b9:99:3c:f3:94:2d:88:90:2d: 43:d0:e3:a3:77:9a:fc:f3:65:ae:bf:5c:10:64:d9: 61:8e:de:3f:58:10:09:9e:d0:61:a9:15:ba:25:36: 8b:2d:20:69:ed:55:3a:b8:d8:37:63:fd:85:6b:2d: c6:c8:6d:f1:ca:c6:96:8b:58:98:22:f5:ad:52:b3: cb:1f:6c:ae:c0:6e:1a:50:2b:ba:4e:21:17:b9:13: 99:4c:78:df:43:ba:25:99:d4:36:09:15:06:e4:58: 12:fe:7b:85:68:58:f9:d8:20:f5:85:cd:70:98:12: e2:34:37:36:33:f8:08:7c:28:89:3b:9c:dc:d7:77: ba:04:70:a9:11:ef:0f:7e:a6:ba:a2:fe:8f:75:a3: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A0:39:1D:D5:15:5D:9D:A9:13:EA:82:38:7E:74:99:57:BC:34:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/16e56f4d-ab70-3766-907b-22447a23eeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: 199.127.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fd:77:25:d3:d6:1a:d0:70:5e:3e:b1:52:02:22:33:6b:1a: 41:53:fc:d8:19:de:34:ce:bf:f9:85:89:6f:2f:46:74:e7:31: d8:7b:32:7d:97:5b:3e:e2:18:0a:c7:b1:b5:5b:28:79:d0:53: 96:fa:74:ff:e4:ec:9b:e6:44:03:8b:04:ab:4d:37:4a:9e:5a: b5:c0:b2:a8:2c:4b:f6:0d:f0:30:04:44:28:d1:eb:37:2a:a4: 70:04:3a:4f:34:63:a7:e4:95:1d:b4:96:2f:a6:6d:7d:62:49: 68:f4:15:df:8a:64:e4:a9:00:c9:fe:03:cb:d8:b8:78:ec:dc: 41:a6:45:9c:11:08:c8:30:30:3b:38:12:ee:89:63:58:40:1d: 3b:53:31:51:5a:ab:0b:ab:2e:3d:dc:3e:15:5e:aa:fe:36:2f: cc:bd:dd:50:91:42:9c:9c:1e:70:f7:af:e7:6d:05:82:ed:49: 38:6a:1b:2a:d2:23:ec:28:b4:c1:69:76:08:05:66:31:82:d7: 43:40:4b:79:46:9e:b5:e1:58:47:e2:d0:02:34:3a:22:92:62: 82:b8:af:e4:59:2c:d1:35:f1:29:38:63:01:ee:be:ba:6c:db: 4f:54:e6:21:e3:43:db:7a:23:a1:f6:56:25:af:ad:65:cf:f9: 21:30:c1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay53YlAmtYQ0K2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk M2VhMjA1YTAtYTcwOS00MGUzLThhNjQtZDE5ODk0ZjM3NzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeIJ0brCumFsLx7aZ+B6/O+3uUC7kOXAYil+ UtSFvuh3+j2xLAe7PwJJ2aXh6LgSaANZgZ1W2J08O3dxP9T2I97irBWpfaGbVLKQ 8yhZ4yV/DC5uMvJr3TkVBiYf9XTxSUl18s6OpAN5mXyZ3IK5mTzzlC2IkC1D0OOj d5r882Wuv1wQZNlhjt4/WBAJntBhqRW6JTaLLSBp7VU6uNg3Y/2Fay3GyG3xysaW i1iYIvWtUrPLH2yuwG4aUCu6TiEXuROZTHjfQ7olmdQ2CRUG5FgS/nuFaFj52CD1 hc1wmBLiNDc2M/gIfCiJO5zc13e6BHCpEe8Pfqa6ov6PdaMI7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWgOR3VFV2dqRPqgjh+dJlXvDRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvMTZlNTZmNGQtYWI3MC0z NzY2LTkwN2ItMjI0NDdhMjNlZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf9dyXT1hrQcF4+sVICIjNrGkFT/NgZ3jTOv/mFiW8vRnTnMdh7Mn2X Wz7iGArHsbVbKHnQU5b6dP/k7JvmRAOLBKtNN0qeWrXAsqgsS/YN8DAERCjR6zcq pHAEOk80Y6fklR20li+mbX1iSWj0Fd+KZOSpAMn+A8vYuHjs3EGmRZwRCMgwMDs4 Eu6JY1hAHTtTMVFaqwurLj3cPhVeqv42L8y93VCRQpycHnD3r+dtBYLtSThqGyrS I+wotMFpdggFZjGC10NAS3lGnrXhWEfi0AI0OiKSYoK4r+RZLNE18Sk4YwHuvrps 209U5iHjQ9t6I6H2ViWvrWXP+SEwwcI= -----END CERTIFICATE-----Generated at Thu Mar 26 04:38:02 2026 by rpki-client