$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa File: 1dc127da-370d-3c62-a526-2572cf53a784.roa (raw, json) Hash identifier: o/mgQnDLHDra1duE3OcXTnA/rOIME+QfHg5Ohyk8ev0= Subject key identifier: A0:3F:F3:CB:CC:62:DB:60:1B:EF:98:E6:45:A5:94:69:7F:6B:C0:AB Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584D3B34DFDF317CCDD8B6B35080 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 395807 IP address blocks: 199.60.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:df:df:31:7c:cd:d8:b6:b3:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=2586814b-22d3-4485-bd71-aa00ef502df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:eb:f5:e5:97:a7:c1:d9:bf:63:bf:ad:58: e8:6e:36:88:20:b6:b4:07:23:ec:9c:f9:b6:30:c3: fd:fb:ce:f8:6b:ea:14:7d:45:e8:30:40:58:2b:ea: c2:cf:09:7d:e2:aa:73:81:99:98:b9:06:9a:fe:12: 3a:b3:de:68:dc:de:a3:49:31:e5:5c:d7:81:43:9d: 14:3a:9e:af:bf:4b:cb:b1:59:e7:8a:7f:db:20:ab: f4:d2:f6:5d:93:52:85:18:a2:bb:9f:88:83:44:d3: c6:d9:cf:95:3c:8c:86:55:26:42:ed:a9:b3:ea:a2: 57:08:4c:f5:db:7c:0b:ad:67:25:09:1c:a5:39:3a: 35:b9:33:42:31:5e:0c:cf:f9:5a:03:e9:25:b1:44: ed:35:a3:76:71:51:ea:0c:43:7e:f9:d4:50:99:be: d3:c4:8d:03:77:e5:81:48:5a:89:9c:f1:e9:76:cd: 5c:55:26:43:14:e0:4f:80:ac:2d:87:4e:55:37:c8: 36:55:aa:02:85:5a:bc:aa:d8:f5:9c:0f:f6:53:37: ee:0b:da:b7:d2:16:57:c5:16:2e:0a:6e:4a:df:21: 44:4d:2f:25:a1:a8:52:f6:6f:b6:48:ab:bd:12:9a: 68:03:92:60:d1:d4:f9:44:8e:10:6d:7d:15:99:54: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3F:F3:CB:CC:62:DB:60:1B:EF:98:E6:45:A5:94:69:7F:6B:C0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c6:6b:af:0a:04:eb:c0:76:67:91:0d:db:0b:f3:5b:5d:f4: dd:5f:87:7e:c2:e2:88:ba:04:46:02:ad:79:9d:7d:25:f8:52: 73:2a:80:be:a9:d7:11:07:47:e5:69:49:0b:92:f5:d4:b2:19: e5:08:1f:ff:bd:9b:54:2d:f8:a2:09:de:83:84:25:23:82:a9: c4:5a:29:0f:70:30:46:b4:62:0d:09:3f:a0:f4:9c:0c:1a:67: 01:ea:d9:f8:7e:19:85:d9:fe:9c:30:bc:d9:b6:8b:90:3f:73: 1a:53:cb:b5:93:bc:f6:da:4d:75:b5:b6:f3:57:04:e9:b3:40: 85:59:89:21:fc:b1:ce:e3:05:38:b8:63:cf:9a:64:29:22:10: cb:2b:2b:3a:58:a0:ac:f8:2d:bd:6f:4b:7e:3e:f2:88:14:6e: c1:e6:c7:95:ee:bc:b5:18:70:cb:8e:1c:33:e7:ed:c6:f6:2d: 25:24:d2:21:61:79:e4:66:93:60:ba:fb:86:db:51:76:b2:06: 7a:52:6f:f8:ac:da:07:66:22:93:53:71:d5:20:f3:11:d0:3d: 8c:6e:5e:d6:e1:47:6a:18:47:8b:e5:e7:13:6e:60:9e:93:95: ed:1b:dc:60:0a:d8:4d:4c:0a:40:ec:52:00:5e:c3:01:15:ce: 3c:d0:2a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NN/fMXzN2LazUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk MjU4NjgxNGItMjJkMy00NDg1LWJkNzEtYWEwMGVmNTAyZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotfr9eWXp8HZv2O/rVjobjaIILa0ByPsnPm2 MMP9+874a+oUfUXoMEBYK+rCzwl94qpzgZmYuQaa/hI6s95o3N6jSTHlXNeBQ50U Op6vv0vLsVnnin/bIKv00vZdk1KFGKK7n4iDRNPG2c+VPIyGVSZC7amz6qJXCEz1 23wLrWclCRylOTo1uTNCMV4Mz/laA+klsUTtNaN2cVHqDEN++dRQmb7TxI0Dd+WB SFqJnPHpds1cVSZDFOBPgKwth05VN8g2VaoChVq8qtj1nA/2UzfuC9q30hZXxRYu Cm5K3yFETS8loahS9m+2SKu9EppoA5Jg0dT5RI4QbX0VmVTmCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA/88vMYttgG++Y5kWllGl/a8CrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvMWRjMTI3ZGEtMzcwZC0z YzYyLWE1MjYtMjU3MmNmNTNhNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzGa68KBOvAdmeRDdsL81td9N1fh37C4oi6BEYCrXmdfSX4UnMqgL6p 1xEHR+VpSQuS9dSyGeUIH/+9m1Qt+KIJ3oOEJSOCqcRaKQ9wMEa0Yg0JP6D0nAwa ZwHq2fh+GYXZ/pwwvNm2i5A/cxpTy7WTvPbaTXW1tvNXBOmzQIVZiSH8sc7jBTi4 Y8+aZCkiEMsrKzpYoKz4Lb1vS34+8ogUbsHmx5XuvLUYcMuOHDPn7cb2LSUk0iFh eeRmk2C6+4bbUXayBnpSb/is2gdmIpNTcdUg8xHQPYxuXtbhR2oYR4vl5xNuYJ6T le0b3GAK2E1MCkDsUgBewwEVzjzQKlA= -----END CERTIFICATE-----Generated at Thu Mar 26 23:04:03 2026 by rpki-client