$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa File: c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa (raw, json) Hash identifier: WScgD0POJJ3LcNu80rzFaSwnGCxwypdwsnFxMJROl8g= Subject key identifier: DD:6B:01:4D:60:65:94:C5:2C:1B:1A:3F:57:41:25:DD:72:BF:8A:D4 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584D143D7AC151FD863C938E8F90 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 174 IP address blocks: 199.89.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7a:c1:51:fd:86:3c:93:8e:8f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=013f02d3-c965-45bf-a7a2-343d8eb270c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:69:57:c9:f0:17:24:60:71:6b:9f:f2:41: 3b:8c:29:aa:93:41:3c:bf:2b:21:48:0d:99:16:ac: de:58:69:23:6b:a7:38:4e:2c:ba:24:e4:11:8f:e1: 55:4a:40:8a:b4:65:e4:b2:42:f4:10:af:e4:83:0a: 55:58:6a:a0:27:1d:bb:f2:e9:00:4d:88:b9:96:d7: 0e:22:88:f5:a2:95:47:76:8f:f1:50:c6:3f:bc:73: 15:2e:33:1a:ff:34:2a:2e:a4:05:de:2d:21:c6:72: 87:7d:c1:34:b6:31:1b:2d:16:a3:36:96:20:92:33: a8:b0:12:25:96:94:0f:b3:39:20:5e:d6:da:e2:96: db:00:c3:0e:4a:67:4a:f4:e9:b9:ea:87:06:11:05: a0:4e:52:14:49:40:fc:c6:1d:54:40:6f:cc:f5:b5: 36:88:fe:fc:d0:37:b2:f3:21:e5:35:b9:5d:e9:52: e8:d4:30:b2:2f:1b:b4:cb:db:eb:cc:9e:d8:6a:5a: c7:69:bf:4f:00:b4:ab:1e:b1:94:1c:37:18:8d:1d: cc:ce:f9:9d:ea:4d:38:e5:bf:f2:5a:63:4a:78:c8: 5a:6a:e9:63:eb:60:02:da:2d:fe:53:61:b2:c8:5c: eb:d7:7b:77:09:12:44:99:6e:01:98:3c:61:fb:e0: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:01:4D:60:65:94:C5:2C:1B:1A:3F:57:41:25:DD:72:BF:8A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f2:06:38:04:b1:59:e0:52:cd:e6:94:11:24:45:6d:f5:11: 1f:54:4e:ec:53:20:2a:2a:3f:54:9c:c3:6c:4e:78:66:32:4c: 9d:2c:9f:07:c1:9c:68:48:d1:6f:b3:6c:95:04:43:2f:82:c3: 18:e0:7e:9f:ac:15:71:18:3b:46:cd:50:cc:37:31:45:db:f2: 68:e8:58:c8:da:8b:6b:ab:e8:0b:50:f6:b8:d4:60:89:90:32: 9c:2b:e2:cc:1e:de:fa:21:97:6a:a7:84:75:0a:62:d1:5f:dd: b4:6a:3d:fb:fb:1e:ed:1e:66:92:89:4d:01:33:c7:36:73:b1: 07:b0:f3:55:cb:f4:6e:3b:5c:d9:c0:ef:89:16:e1:67:b8:0c: 2c:35:c0:95:28:df:75:52:77:e0:8d:08:64:70:3e:fb:97:ae: 0d:1d:25:b7:27:d3:9a:7b:7e:99:72:1a:a8:55:5b:c8:bd:b8: 0d:9e:f6:97:b0:ce:76:5c:15:a8:0e:f6:45:d8:c2:5a:b3:17: ca:e9:a0:f8:fb:49:39:3e:b5:95:ad:b3:b5:9e:3e:49:b3:1a: c0:f0:02:66:5b:63:1e:47:71:cb:ba:ad:1a:a9:51:e7:5f:38: e5:47:b7:9e:31:cd:5f:4c:a7:af:76:05:0d:c9:06:c6:9b:8f: e9:80:87:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXrBUf2GPJOOj5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MDEzZjAyZDMtYzk2NS00NWJmLWE3YTItMzQzZDhlYjI3MGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqVpV8nwFyRgcWuf8kE7jCmqk0E8vyshSA2Z FqzeWGkja6c4Tiy6JOQRj+FVSkCKtGXkskL0EK/kgwpVWGqgJx278ukATYi5ltcO Ioj1opVHdo/xUMY/vHMVLjMa/zQqLqQF3i0hxnKHfcE0tjEbLRajNpYgkjOosBIl lpQPszkgXtba4pbbAMMOSmdK9Om56ocGEQWgTlIUSUD8xh1UQG/M9bU2iP780Dey 8yHlNbld6VLo1DCyLxu0y9vrzJ7YalrHab9PALSrHrGUHDcYjR3Mzvmd6k045b/y WmNKeMhaaulj62AC2i3+U2GyyFzr13t3CRJEmW4BmDxh++CjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1rAU1gZZTFLBsaP1dBJd1yv4rUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYzM4YmM5Y2MtM2ExYS0z MjZjLTliNDktZTQ0NjUxMzZmY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfyBjgEsVngUs3mlBEkRW31ER9UTuxTICoqP1Scw2xOeGYyTJ0snwfB nGhI0W+zbJUEQy+Cwxjgfp+sFXEYO0bNUMw3MUXb8mjoWMjai2ur6AtQ9rjUYImQ Mpwr4swe3vohl2qnhHUKYtFf3bRqPfv7Hu0eZpKJTQEzxzZzsQew81XL9G47XNnA 74kW4We4DCw1wJUo33VSd+CNCGRwPvuXrg0dJbcn05p7fplyGqhVW8i9uA2e9pew znZcFagO9kXYwlqzF8rpoPj7STk+tZWts7WePkmzGsDwAmZbYx5Hccu6rRqpUedf OOVHt54xzV9Mp692BQ3JBsabj+mAh54= -----END CERTIFICATE-----Generated at Thu Mar 26 02:25:45 2026 by rpki-client