$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa File: e331092c-40d6-3d9f-b461-e6d085e36eaf.roa (raw, json) Hash identifier: vbm2X+ob7Ityng2QV0FAOxSHVICMi9naZ0DeOjBxWp0= Subject key identifier: 99:89:FC:0E:24:3C:0E:A2:71:61:B0:C2:3A:6E:12:89:E3:B4:97:B7 Certificate issuer: /CN=becbd46f-127a-435b-9440-3a213828408a Certificate serial: 010D0C9F4328584D1707B9E713CE6CEDDD27D080 Authority key identifier: 64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30166 IP address blocks: 199.68.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:b9:e7:13:ce:6c:ed:dd:27:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=becbd46f-127a-435b-9440-3a213828408a Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=e5241695-06bb-4774-92a8-b76ae76a1508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b5:da:09:a7:b2:53:6b:99:f3:d4:e6:94:ba: 50:f4:28:0f:a7:91:41:c9:c0:ee:e2:06:7c:4b:3b: 46:6e:05:d7:41:ef:31:0a:d4:8c:47:d7:e8:65:66: 69:00:d0:cc:8a:7d:66:09:96:83:55:2c:d8:81:ad: 57:d5:69:cb:36:a8:95:39:45:14:3e:16:7e:50:e4: 55:72:f8:01:6b:cd:bf:95:6a:77:b6:a4:67:3a:d3: 52:15:48:c0:72:9a:a8:97:b1:0e:9c:f9:3e:52:31: 3f:06:09:a8:5f:ae:61:5d:00:39:60:1d:c0:f3:30: c4:49:b8:44:22:9c:7a:14:7b:79:c0:45:60:14:2a: 3f:f9:5f:3d:63:0d:35:02:35:f3:f2:74:0e:f8:cd: 11:3a:81:7a:56:79:19:0e:18:d9:63:6e:bc:03:35: 26:59:ea:a6:03:8a:f6:6e:60:55:c3:d5:52:ef:e5: 1c:18:eb:ba:3d:34:af:b6:18:71:96:e9:41:b6:10: 01:ed:65:15:9d:b4:45:57:c0:7b:f6:9f:ce:e5:ca: bb:58:55:62:7b:db:d0:22:41:90:b2:c6:36:78:0d: 08:f2:3e:e1:e6:f1:47:32:37:6f:12:2d:74:73:72: ee:5a:e6:96:00:7d:12:8e:65:3e:0a:a5:94:cd:ad: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:FC:0E:24:3C:0E:A2:71:61:B0:C2:3A:6E:12:89:E3:B4:97:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.crl X509v3 Authority Key Identifier: keyid:64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer sbgp-ipAddrBlock: critical IPv4: 199.68.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b9:15:cb:5d:f4:3f:8f:3c:62:4a:93:e6:7b:1c:ec:42:2e: 42:a0:f4:17:ea:e6:71:d5:d1:a9:b6:ae:be:f4:e6:28:53:7e: 9a:da:b8:6c:20:7e:9e:5f:37:66:bf:c0:87:3b:58:77:34:a9: e0:94:df:db:a4:a9:1d:56:57:a0:cb:df:65:42:3a:de:90:0d: 24:1f:19:08:0a:0f:61:c7:7c:a0:a9:36:38:b0:f2:ac:db:96: 82:1c:06:a3:56:43:08:98:7c:58:3a:96:23:cf:2d:d6:79:aa: 00:46:0e:6e:1c:ed:59:d0:c4:d0:2e:0b:aa:09:e3:0e:ed:a3: af:06:8e:e4:8a:09:f8:0c:93:22:f5:cd:85:89:c1:81:68:72: 5c:71:5a:b5:f8:72:d1:76:05:c2:4b:7d:78:98:19:54:8b:ae: 09:b1:6d:43:d8:fd:bc:be:2b:12:c7:9a:05:4e:3f:99:19:05: 9e:5b:f1:11:1b:19:d9:49:9f:de:dd:ae:5c:3b:6d:4c:62:eb: 3d:f9:09:8d:23:a2:23:f7:65:31:b1:9d:a4:57:d5:30:7a:da: a9:48:f5:e0:22:ce:e4:6d:83:ff:87:75:c8:2d:09:e2:67:8f: 35:4f:ab:4b:13:28:66:c2:52:72:5c:72:5e:f8:b8:d0:91:11: fc:bd:9d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB7nnE85s7d0n0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmVjYmQ0NmYtMTI3YS00MzViLTk0NDAtM2EyMTM4Mjg0 MDhhMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZTUyNDE2OTUtMDZiYi00Nzc0LTkyYTgtYjc2YWU3NmExNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rXaCaeyU2uZ89TmlLpQ9CgPp5FBycDu4gZ8 SztGbgXXQe8xCtSMR9foZWZpANDMin1mCZaDVSzYga1X1WnLNqiVOUUUPhZ+UORV cvgBa82/lWp3tqRnOtNSFUjAcpqol7EOnPk+UjE/BgmoX65hXQA5YB3A8zDESbhE Ipx6FHt5wEVgFCo/+V89Yw01AjXz8nQO+M0ROoF6VnkZDhjZY268AzUmWeqmA4r2 bmBVw9VS7+UcGOu6PTSvthhxlulBthAB7WUVnbRFV8B79p/O5cq7WFVie9vQIkGQ ssY2eA0I8j7h5vFHMjdvEi10c3LuWuaWAH0SjmU+CqWUza3XLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmJ/A4kPA6icWGwwjpuEonjtJe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZWNi ZDQ2Zi0xMjdhLTQzNWItOTQ0MC0zYTIxMzgyODQwOGEvZTMzMTA5MmMtNDBkNi0z ZDlmLWI0NjEtZTZkMDg1ZTM2ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmVjYmQ0NmYtMTI3YS00MzViLTk0 NDAtM2EyMTM4Mjg0MDhhL2JlY2JkNDZmLTEyN2EtNDM1Yi05NDQwLTNhMjEzODI4 NDA4YS5jcmwwHwYDVR0jBBgwFoAUZKwaGuWrxfvAtmLklV69dQ2D8JAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZWNiZDQ2Zi0xMjdhLTQzNWItOTQ0MC0zYTIx MzgyODQwOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0QcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS5Fctd9D+PPGJKk+Z7HOxCLkKg9Bfq5nHV0am2rr705ihTfprauGwg fp5fN2a/wIc7WHc0qeCU39ukqR1WV6DL32VCOt6QDSQfGQgKD2HHfKCpNjiw8qzb loIcBqNWQwiYfFg6liPPLdZ5qgBGDm4c7VnQxNAuC6oJ4w7to68GjuSKCfgMkyL1 zYWJwYFoclxxWrX4ctF2BcJLfXiYGVSLrgmxbUPY/by+KxLHmgVOP5kZBZ5b8REb GdlJn97drlw7bUxi6z35CY0joiP3ZTGxnaRX1TB62qlI9eAizuRtg/+HdcgtCeJn jzVPq0sTKGbCUnJccl74uNCREfy9ne8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:24:55 2026 by rpki-client