$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa File: 89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa (raw, json) Hash identifier: xV1GD7mjQ4oFtRh6fp+p7b+6b4ZqdVZUcPJm/ZZv5yk= Subject key identifier: D5:8D:6A:E7:C1:D2:55:B0:EF:F2:4D:94:F0:20:BE:14:36:88:1A:7F Certificate issuer: /CN=7b430551-8bf9-4310-8a7f-b2233e29affd Certificate serial: 010D0C9F4328584D3F64EF24596FA50231C9D4C0 Authority key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 17456 IP address blocks: 199.127.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ef:24:59:6f:a5:02:31:c9:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b430551-8bf9-4310-8a7f-b2233e29affd Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=a24fea85-8c99-43c9-b050-7da87ed7e9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:f6:d1:a7:04:45:33:e3:d9:ce:bf:7c:58: 12:03:4f:1b:82:55:70:a1:fb:79:31:ae:d7:a1:fd: ff:03:f4:0e:c3:72:d8:e0:32:d4:db:38:a7:6a:b1: 3d:a9:e4:ff:17:93:38:dc:1e:b0:cd:63:98:4c:fa: 41:f9:60:36:e8:49:cc:8b:de:b9:81:38:c1:63:73: 07:5d:65:b2:2a:0f:99:5e:36:76:25:f7:1d:af:6e: 21:35:8b:af:db:0c:9f:6b:c4:2f:18:15:87:bb:c9: 29:cf:db:6d:e1:fc:7b:32:f6:fb:23:a1:72:99:90: c6:75:a3:ad:1c:00:64:68:0d:42:84:53:b7:14:53: 6d:60:38:88:da:aa:6f:5f:12:86:b4:b4:f6:24:63: 27:66:d7:4e:3f:92:6d:dd:0e:a2:ac:e2:fb:54:16: d8:8d:f9:86:90:15:1c:38:39:fd:10:91:c7:1a:92: e1:77:bf:fe:a6:90:08:63:e0:e7:ff:59:b1:0b:47: ba:11:20:7a:ba:db:ad:17:68:85:a1:a5:c5:78:b3: 0e:0a:87:55:5f:4b:72:a5:d5:2f:40:77:16:45:e9: f5:59:69:62:63:78:47:55:c0:95:38:8f:2a:f0:a8: f8:ff:47:98:ae:ce:e8:12:f1:04:f7:60:b8:fc:7e: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8D:6A:E7:C1:D2:55:B0:EF:F2:4D:94:F0:20:BE:14:36:88:1A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl X509v3 Authority Key Identifier: keyid:6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer sbgp-ipAddrBlock: critical IPv4: 199.127.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bd:bc:88:7d:75:03:dd:e8:77:98:5f:c2:43:52:b0:40:92: ee:40:51:b1:da:36:bc:06:98:91:68:2d:da:97:3e:3d:38:e8: ce:81:4b:92:71:84:f3:39:19:30:4c:ff:e4:d5:27:08:52:aa: f2:5c:98:17:ed:12:9f:6c:f6:1d:f8:d4:8c:e5:83:43:4b:1f: 56:e3:7e:99:a3:e8:18:6b:dc:96:dc:ec:5a:99:31:07:5f:7b: 3d:8d:77:46:3f:c5:0a:c3:ac:64:51:22:d0:a5:c6:b9:c9:e1: 3e:f2:d2:b2:9b:b1:08:29:e1:34:06:31:37:df:b0:30:f7:47: 94:8f:74:ff:79:32:78:8f:04:d0:ec:7d:d9:50:75:3e:8a:07: d9:f2:97:1c:a3:c6:95:d2:80:85:3c:e3:13:61:be:04:50:e7: bb:49:8d:cb:42:d4:45:24:af:bf:5a:bc:c3:d9:b2:54:38:19: 75:da:ce:67:5d:33:1f:d2:e3:94:7c:68:cf:dc:b9:88:2a:c1: d0:6e:2e:03:c4:5d:e9:f0:e4:ae:21:95:bc:02:fb:ab:4a:4e: 28:57:64:00:e3:32:49:59:ab:0b:68:85:d7:fe:b7:f3:dd:ed: c5:ef:c7:33:85:3c:e0:f2:55:c3:e3:35:fe:f1:e2:73:ed:ee: 76:e6:ee:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZO8kWW+lAjHJ1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I0MzA1NTEtOGJmOS00MzEwLThhN2YtYjIyMzNlMjlh ZmZkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YTI0ZmVhODUtOGM5OS00M2M5LWIwNTAtN2RhODdlZDdlOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tz20acERTPj2c6/fFgSA08bglVwoft5Ma7X of3/A/QOw3LY4DLU2zinarE9qeT/F5M43B6wzWOYTPpB+WA26EnMi965gTjBY3MH XWWyKg+ZXjZ2Jfcdr24hNYuv2wyfa8QvGBWHu8kpz9tt4fx7Mvb7I6FymZDGdaOt HABkaA1ChFO3FFNtYDiI2qpvXxKGtLT2JGMnZtdOP5Jt3Q6irOL7VBbYjfmGkBUc ODn9EJHHGpLhd7/+ppAIY+Dn/1mxC0e6ESB6ututF2iFoaXFeLMOCodVX0typdUv QHcWRen1WWliY3hHVcCVOI8q8Kj4/0eYrs7oEvEE92C4/H5WKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWNaufB0lWw7/JNlPAgvhQ2iBp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQz MDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIzM2UyOWFmZmQvODljZTY4ODYtNWEzYy0z ZTFiLWE4ZTctMjExOTc3MDg5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2I0MzA1NTEtOGJmOS00MzEwLThh N2YtYjIyMzNlMjlhZmZkLzdiNDMwNTUxLThiZjktNDMxMC04YTdmLWIyMjMzZTI5 YWZmZC5jcmwwHwYDVR0jBBgwFoAUbr7Zho9mxgc1b6ez51AXjdgifCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YjQzMDU1MS04YmY5LTQzMTAtOGE3Zi1iMjIz M2UyOWFmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa9vIh9dQPd6HeYX8JDUrBAku5AUbHaNrwGmJFoLdqXPj046M6BS5Jx hPM5GTBM/+TVJwhSqvJcmBftEp9s9h341Izlg0NLH1bjfpmj6Bhr3Jbc7FqZMQdf ez2Nd0Y/xQrDrGRRItClxrnJ4T7y0rKbsQgp4TQGMTffsDD3R5SPdP95MniPBNDs fdlQdT6KB9nylxyjxpXSgIU84xNhvgRQ57tJjctC1EUkr79avMPZslQ4GXXazmdd Mx/S45R8aM/cuYgqwdBuLgPEXenw5K4hlbwC+6tKTihXZADjMklZqwtohdf+t/Pd 7cXvxzOFPODyVcPjNf7x4nPt7nbm7ug= -----END CERTIFICATE-----Generated at Thu Mar 26 21:04:51 2026 by rpki-client