$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/d901d450-859c-353e-9847-847173ae25f4.roa File: d901d450-859c-353e-9847-847173ae25f4.roa (raw, json) Hash identifier: r5padr5R8/qsAx8DjdoWBLrvS9Nh+zu8emJkMXhoMMk= Subject key identifier: CF:79:99:2A:91:05:4D:44:D0:BB:4D:3F:0B:DB:BD:5F:80:C8:B7:E7 Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Certificate serial: 010D0C9F4328584D2AB950B23DE157B6827F9D00 Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/d901d450-859c-353e-9847-847173ae25f4.roa Signing time: Sat 14 Mar 2026 15:18:55 +0000 ROA not before: Sat 14 Mar 2026 15:18:55 +0000 ROA not after: Fri 12 Jun 2026 15:18:55 +0000 asID: 30277 IP address blocks: 199.26.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:b9:50:b2:3d:e1:57:b6:82:7f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Validity Not Before: Mar 14 15:18:55 2026 GMT Not After : Jun 12 15:18:55 2026 GMT Subject: CN=6351f125-8eaf-4446-8369-6371484b1579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:eb:2c:f3:3c:63:7f:4d:be:04:5e:05:87:86: 0e:ce:73:2f:6d:d5:a8:6e:55:7d:2f:84:ba:b5:79: 82:b7:f0:65:87:ae:ac:a9:84:93:ed:38:d2:2b:5d: 43:ba:02:e9:63:96:06:a6:74:29:3c:a9:ae:61:19: 9f:c2:cf:7f:bd:8e:ba:44:04:ed:20:b3:45:d7:bb: ec:3c:15:ed:12:6c:91:0d:89:6e:78:7f:a8:86:8c: 4b:36:6d:3f:9c:4f:11:94:aa:7e:09:2f:c8:3d:de: 13:a6:48:83:91:f0:f3:e9:2a:e1:4a:90:80:c2:98: c1:41:4f:21:03:85:61:fe:11:cc:20:d3:a8:f9:7d: d6:c2:dc:8a:c4:8f:ed:ad:2c:21:7c:59:04:ce:45: 52:78:5e:99:47:99:bf:7a:4c:b2:66:12:6a:0b:e0: 12:9e:1c:04:4d:77:2d:b6:57:ae:84:58:ab:a1:f4: 99:48:13:4b:c7:de:21:bb:94:d0:f9:35:5d:2f:b1: ff:cd:2d:66:0d:a1:e4:9e:25:c6:68:a1:37:74:e8: e2:a3:8d:1e:21:63:c6:fe:68:9e:ea:12:db:b5:b4: ad:5f:b3:86:27:dc:67:46:44:d9:6c:28:3e:05:b6: 88:96:dc:ab:57:e3:18:ec:9d:28:bc:f2:c9:7a:04: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:79:99:2A:91:05:4D:44:D0:BB:4D:3F:0B:DB:BD:5F:80:C8:B7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/d901d450-859c-353e-9847-847173ae25f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl X509v3 Authority Key Identifier: keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer sbgp-ipAddrBlock: critical IPv4: 199.26.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:3f:d7:27:b1:9d:07:c2:94:f1:f2:b0:f6:e3:1e:df:86:c2: 46:29:14:a8:66:9c:1c:bd:30:cb:1e:1b:3b:db:1e:8e:80:46: 76:c0:8f:ac:c2:ab:1d:66:19:55:6c:2a:8e:c6:fb:40:ee:d5: ac:47:98:07:38:c8:a8:ba:57:87:3b:b5:b0:68:bd:4b:b8:67: 5c:f1:20:bb:1c:a2:f9:2a:ad:f6:9b:05:f9:d0:a6:b0:4f:ac: d2:17:ed:12:da:88:b6:0e:33:99:f3:85:54:43:d6:00:f2:48: 22:32:fe:5c:45:07:92:15:48:32:eb:04:e2:ee:ef:d0:a3:02: b2:8b:90:d0:9b:3a:f3:2d:94:00:48:41:a5:fa:a4:44:e5:d9: dc:38:ee:ca:29:e3:c6:f7:4a:69:c8:b0:62:00:3b:bd:fc:bf: e5:57:fe:ed:3b:00:5d:c3:bd:0e:0d:cb:aa:ce:94:30:cb:a2: ee:66:d0:26:e1:de:02:e8:cb:fa:89:14:8f:20:fe:e3:55:cf: 55:56:e2:e8:cb:39:3e:5e:d4:73:5f:16:f9:3c:fc:cc:4a:04: c4:2f:0f:c0:96:e3:53:2d:bd:4d:45:d0:49:d6:49:c7:9e:5f: 2e:bc:0f:d5:21:db:1d:41:ab:ce:56:99:34:16:5b:a0:6b:05: 17:b9:12:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0quVCyPeFXtoJ/nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYTg0ZjMtYjQ5MS00MDI0LTk0YzYtZWQ2ZmY1YTI2 MGYzMB4XDTI2MDMxNDE1MTg1NVoXDTI2MDYxMjE1MTg1NVowLzEtMCsGA1UEAxMk NjM1MWYxMjUtOGVhZi00NDQ2LTgzNjktNjM3MTQ4NGIxNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuss8zxjf02+BF4Fh4YOznMvbdWoblV9L4S6 tXmCt/Blh66sqYST7TjSK11DugLpY5YGpnQpPKmuYRmfws9/vY66RATtILNF17vs PBXtEmyRDYlueH+ohoxLNm0/nE8RlKp+CS/IPd4TpkiDkfDz6SrhSpCAwpjBQU8h A4Vh/hHMINOo+X3WwtyKxI/trSwhfFkEzkVSeF6ZR5m/ekyyZhJqC+ASnhwETXct tleuhFirofSZSBNLx94hu5TQ+TVdL7H/zS1mDaHkniXGaKE3dOjio40eIWPG/mie 6hLbtbStX7OGJ9xnRkTZbCg+BbaIltyrV+MY7J0ovPLJegTIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM95mSqRBU1E0LtNPwvbvV+AyLfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2Zh ODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZmZjVhMjYwZjMvZDkwMWQ0NTAtODU5Yy0z NTNlLTk4NDctODQ3MTczYWUyNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNmYTg0ZjMtYjQ5MS00MDI0LTk0 YzYtZWQ2ZmY1YTI2MGYzLzFjZmE4NGYzLWI0OTEtNDAyNC05NGM2LWVkNmZmNWEy NjBmMy5jcmwwHwYDVR0jBBgwFoAUt46MEx/1vpxcU3ucfFObc4jfx+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2ZhODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZm ZjVhMjYwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxpUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY/1yexnQfClPHysPbjHt+GwkYpFKhmnBy9MMseGzvbHo6ARnbAj6zC qx1mGVVsKo7G+0Du1axHmAc4yKi6V4c7tbBovUu4Z1zxILscovkqrfabBfnQprBP rNIX7RLaiLYOM5nzhVRD1gDySCIy/lxFB5IVSDLrBOLu79CjArKLkNCbOvMtlABI QaX6pETl2dw47sop48b3SmnIsGIAO738v+VX/u07AF3DvQ4Ny6rOlDDLou5m0Cbh 3gLoy/qJFI8g/uNVz1VW4ujLOT5e1HNfFvk8/MxKBMQvD8CW41MtvU1F0EnWScee Xy68D9Uh2x1Bq85WmTQWW6BrBRe5Ev0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:26:57 2026 by rpki-client