$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa File: 87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa (raw, json) Hash identifier: HdmKKImNTSHR15seeJbsV5aQRgANwVl27/q5+98IswY= Subject key identifier: 00:B8:85:61:40:F3:14:F6:5B:ED:A9:D6:23:EE:8D:FF:A1:CB:AB:DD Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584D492A7607EF3BD82F89947780 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 4226 IP address blocks: 199.192.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:76:07:ef:3b:d8:2f:89:94:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=94909d1c-998e-495a-ae35-cc5d0928e9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:2b:7f:d3:7c:53:36:1e:94:82:9c:47:92: 99:2e:1a:f0:de:e6:6b:f4:8a:5b:46:c9:6b:e2:65: 2d:6a:f1:a6:65:a0:ca:14:52:5f:5a:3d:5d:e0:98: de:c8:6e:7c:72:a2:68:a5:05:29:96:94:cf:af:1a: a5:5a:01:7c:f3:6f:27:a7:f1:9c:cf:9a:e8:4f:b1: 15:33:bd:63:12:13:c3:a8:fa:40:93:21:51:0f:32: 9a:a9:a3:d1:87:47:87:63:95:9a:1c:4d:05:36:92: 5c:00:51:a9:26:d5:33:97:b2:f7:82:4d:a5:e4:a3: a9:63:98:41:15:0c:a5:f7:54:48:b1:4f:0d:9b:32: 56:04:6a:98:c0:64:27:90:ac:f7:0b:ef:45:a8:3b: 52:c8:61:f5:45:0e:0c:b4:1a:e5:d7:63:01:43:b8: 60:50:54:7a:a8:29:b4:0c:0f:78:06:85:51:72:f6: 11:2d:72:ff:48:8b:9d:49:6c:12:4c:c1:83:19:2e: 5b:42:ba:15:b0:db:e4:26:a1:61:e6:87:74:06:a4: 5d:7e:67:d5:50:e6:5b:41:c4:46:67:e4:8a:38:9c: d0:e3:a6:43:d8:fe:e5:71:ba:66:bb:bc:7b:29:52: 5a:4b:50:21:95:d4:88:55:df:6a:5a:f4:b7:d2:20: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:85:61:40:F3:14:F6:5B:ED:A9:D6:23:EE:8D:FF:A1:CB:AB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv4: 199.192.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:55:89:a0:0b:cb:69:5e:39:15:51:56:d1:a2:3a:af:4e:49: a2:1c:bd:7c:86:cb:b7:08:2c:cc:e6:6f:db:67:80:eb:42:d1: a0:fd:3a:12:12:46:d7:67:25:33:22:d5:4f:66:39:3d:61:87: 75:70:ee:a4:b4:ba:41:74:b5:53:97:20:09:dc:a5:fa:b6:c0: df:a4:b1:36:81:b6:d5:66:a1:e4:39:eb:54:ec:50:bc:16:44: b5:f9:b5:ed:85:59:2f:b4:5a:eb:cd:75:42:4c:38:a1:5e:4e: 6f:a3:4e:e7:b6:4a:4f:ba:3c:43:86:f0:fc:45:8d:36:ac:e8: 1c:7d:07:cc:e0:95:e1:fa:66:b4:0c:6f:08:d3:0f:96:80:34: 39:07:7f:ed:c1:13:a9:5d:18:28:18:4c:cf:dc:36:1f:70:19: 9c:13:3b:fb:4a:86:03:4d:eb:96:f6:9b:f4:d9:49:97:b9:89: ca:51:42:81:1c:24:83:71:91:6a:de:5c:04:ec:b3:99:5a:9c: 3f:7f:f9:c4:61:8f:81:d7:5d:80:58:07:ca:33:cf:fd:d6:f2: 05:84:f3:cc:ba:cc:cd:14:cc:1a:f4:80:c9:4d:9c:45:6b:78: ff:cf:b5:5e:bf:fd:99:78:0e:70:d1:2b:0f:ce:df:14:51:7a: 01:63:18:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnYH7zvYL4mUd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OTQ5MDlkMWMtOTk4ZS00OTVhLWFlMzUtY2M1ZDA5MjhlOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmskrf9N8UzYelIKcR5KZLhrw3uZr9IpbRslr 4mUtavGmZaDKFFJfWj1d4JjeyG58cqJopQUplpTPrxqlWgF8828np/Gcz5roT7EV M71jEhPDqPpAkyFRDzKaqaPRh0eHY5WaHE0FNpJcAFGpJtUzl7L3gk2l5KOpY5hB FQyl91RIsU8NmzJWBGqYwGQnkKz3C+9FqDtSyGH1RQ4MtBrl12MBQ7hgUFR6qCm0 DA94BoVRcvYRLXL/SIudSWwSTMGDGS5bQroVsNvkJqFh5od0BqRdfmfVUOZbQcRG Z+SKOJzQ46ZD2P7lcbpmu7x7KVJaS1AhldSIVd9qWvS30iDfJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC4hWFA8xT2W+2p1iPujf+hy6vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODdjOWM4NjYtZmFhMi0z ZDJiLThjNmEtOTQ3ZmJiYjU3NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8BgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxViaALy2leORVRVtGiOq9OSaIcvXyGy7cILMzmb9tngOtC0aD9OhIS RtdnJTMi1U9mOT1hh3Vw7qS0ukF0tVOXIAncpfq2wN+ksTaBttVmoeQ561TsULwW RLX5te2FWS+0WuvNdUJMOKFeTm+jTue2Sk+6PEOG8PxFjTas6Bx9B8zgleH6ZrQM bwjTD5aANDkHf+3BE6ldGCgYTM/cNh9wGZwTO/tKhgNN65b2m/TZSZe5icpRQoEc JINxkWreXATss5lanD9/+cRhj4HXXYBYB8ozz/3W8gWE88y6zM0UzBr0gMlNnEVr eP/PtV6//Zl4DnDRKw/O3xRRegFjGAw= -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:56 2026 by rpki-client