$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa File: aa17f969-ed94-3d77-a18a-b485416a12af.roa (raw, json) Hash identifier: neozs+Oqvmuf2CcU23Jk0WEAp4XpZlt9i0w1E5HGXbs= Subject key identifier: 1D:67:DC:68:C7:CB:6F:87:EB:65:6F:48:3F:06:67:CD:BA:3F:5A:68 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584D143D7AA2FB133DE881D7D180 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 40676 IP address blocks: 199.89.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7a:a2:fb:13:3d:e8:81:d7:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a7c005d0-ac43-4a76-adc9-ab7bf787056e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:91:ce:2b:3a:59:84:3e:4c:01:d0:53:70:4a: ba:2b:3c:b9:c4:1d:ad:16:35:1a:f7:df:73:cc:c6: d1:c3:c8:e9:36:e4:fc:0b:3d:a2:85:96:e4:ef:27: d8:b5:62:2e:67:91:0f:bc:1b:09:f9:2c:aa:db:bf: ec:44:67:b2:6b:ef:dc:06:43:dd:90:33:17:4b:7b: b0:97:d4:67:ea:ec:ec:2c:c8:4f:43:70:0e:80:04: 36:00:48:ef:2e:51:b6:7e:ba:17:07:fd:7b:f5:da: a7:6d:4e:46:86:de:40:a0:39:34:33:ae:51:67:73: d4:1f:9a:29:d3:be:95:ff:59:aa:f6:63:5f:17:82: b8:0e:c8:a0:4e:9a:7e:e1:6f:d6:56:e3:de:65:0a: 65:c8:60:39:a9:4c:97:fb:a7:3f:d3:05:37:e4:3c: 20:30:6f:57:ed:9f:95:37:73:87:db:d6:51:84:94: 27:09:af:72:68:a2:8e:ac:d0:eb:24:00:ef:3a:c6: 9d:20:cd:26:74:05:05:57:46:5a:3e:4c:3f:ad:3c: 79:21:52:d8:33:33:0b:a1:96:f1:1c:ef:b2:61:88: 06:8b:3c:0a:f5:08:96:5a:7c:dc:54:07:af:96:24: 45:d5:0d:24:eb:5b:e3:e6:10:0d:d9:f8:dc:6d:b2: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:DC:68:C7:CB:6F:87:EB:65:6F:48:3F:06:67:CD:BA:3F:5A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:44:90:e8:17:fc:a0:8b:21:70:7e:83:92:d1:cf:94:62:9a: 94:3e:a5:9f:e1:38:2a:5e:45:f2:55:6a:f9:75:e6:6a:6f:86: 50:be:0b:c9:95:09:70:e5:42:d0:82:39:34:3b:c9:73:3e:00: 3a:7c:a6:00:aa:40:26:20:6a:78:0f:37:33:46:1c:f3:76:c4: fc:af:9a:c2:a2:22:02:22:94:14:2d:fb:91:f5:c2:cf:97:d9: 47:70:3f:3d:f2:2a:3b:ed:47:ff:a9:55:69:d0:d7:29:e3:5d: e2:1a:b3:16:c7:b8:77:52:12:c7:84:39:07:c7:5b:f9:12:d8: e5:2e:a1:08:a1:47:5f:02:10:13:d1:03:01:ba:c8:44:d7:7b: 3d:3c:3c:6e:93:c0:c5:09:87:55:13:e6:e9:fa:60:2b:07:f6: b6:8e:f8:f3:a9:82:67:de:a5:65:30:0c:6a:00:87:6e:1f:e1: bf:5b:7b:46:8a:4d:b4:20:2f:c7:7c:d4:03:fb:94:c8:60:e8: b3:b4:a1:83:fc:28:9d:47:64:62:60:f5:2a:23:30:8f:0b:98: cc:20:4a:b0:c1:e4:08:6c:50:2f:67:ff:d3:69:69:d6:c9:63: 7e:14:f0:a6:d6:38:4d:d5:95:5f:cd:ed:ed:26:52:13:0f:8a: 2c:4e:83:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXqi+xM96IHX0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTdjMDA1ZDAtYWM0My00YTc2LWFkYzktYWI3YmY3ODcwNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpHOKzpZhD5MAdBTcEq6Kzy5xB2tFjUa999z zMbRw8jpNuT8Cz2ihZbk7yfYtWIuZ5EPvBsJ+Syq27/sRGeya+/cBkPdkDMXS3uw l9Rn6uzsLMhPQ3AOgAQ2AEjvLlG2froXB/179dqnbU5Ght5AoDk0M65RZ3PUH5op 076V/1mq9mNfF4K4DsigTpp+4W/WVuPeZQplyGA5qUyX+6c/0wU35DwgMG9X7Z+V N3OH29ZRhJQnCa9yaKKOrNDrJADvOsadIM0mdAUFV0ZaPkw/rTx5IVLYMzMLoZbx HO+yYYgGizwK9QiWWnzcVAevliRF1Q0k61vj5hAN2fjcbbLVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1n3GjHy2+H62VvSD8GZ826P1poMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYWExN2Y5NjktZWQ5NC0z ZDc3LWExOGEtYjQ4NTQxNmExMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9EkOgX/KCLIXB+g5LRz5RimpQ+pZ/hOCpeRfJVavl15mpvhlC+C8mV CXDlQtCCOTQ7yXM+ADp8pgCqQCYgangPNzNGHPN2xPyvmsKiIgIilBQt+5H1ws+X 2UdwPz3yKjvtR/+pVWnQ1ynjXeIasxbHuHdSEseEOQfHW/kS2OUuoQihR18CEBPR AwG6yETXez08PG6TwMUJh1UT5un6YCsH9raO+POpgmfepWUwDGoAh24f4b9be0aK TbQgL8d81AP7lMhg6LO0oYP8KJ1HZGJg9SojMI8LmMwgSrDB5AhsUC9n/9NpadbJ Y34U8KbWOE3VlV/N7e0mUhMPiixOg4M= -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:38 2026 by rpki-client