$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa File: 6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa (raw, json) Hash identifier: E9YR40/GdYcinFhDoFmzAAL1teawyu3cAvxMqRLasZs= Subject key identifier: 42:8A:8D:0E:A9:4C:29:2C:18:BB:0C:E9:F3:D3:D5:F8:29:54:56:20 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584D3B34DFA7E791F4CAFCB18F00 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 395807 IP address blocks: 199.60.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:df:a7:e7:91:f4:ca:fc:b1:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=7a0355dc-287b-41ac-aa97-8970fdfe39e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:f8:af:03:bf:0f:29:b8:5a:db:05:99:28: a1:5f:9d:cc:e0:82:97:db:6a:82:03:5d:39:dd:2e: 4f:94:24:d1:3c:fd:03:b6:57:8d:f5:be:43:09:d8: e2:34:28:6b:c0:9a:90:6c:06:cb:7e:85:82:10:ce: f5:18:54:c6:a0:3c:c2:3f:79:6c:61:79:7c:7c:8c: ad:eb:79:39:a6:3d:65:a0:cf:32:d2:7f:0a:09:46: 50:c3:1a:d2:99:d6:8a:32:92:d4:a1:02:e0:8e:f7: 9f:fa:8c:f0:42:ef:2c:9d:f1:ff:f2:a5:a4:45:79: f1:e5:69:f1:d4:fa:10:4a:55:f8:d4:c9:f6:1f:63: 5d:f1:75:da:83:4e:9d:7b:6b:e5:8d:0b:0a:a8:4d: 78:92:08:74:e6:ef:59:bc:25:03:1d:b6:14:d3:ce: 36:24:98:a2:c7:44:41:c8:6e:53:e5:98:5a:64:c7: 98:8b:d9:3a:03:3e:56:06:be:bc:8b:f3:98:84:ff: 1e:97:5a:84:f1:cf:67:61:57:c7:2b:43:5d:1b:fa: ce:30:ef:7b:19:13:3d:30:78:6f:b5:fb:70:bc:8b: 72:f8:b2:b7:08:bc:dc:3f:00:d3:c2:3f:ed:53:fc: 7e:05:c6:f0:20:f1:a0:b4:da:df:43:66:6e:37:20: 0a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8A:8D:0E:A9:4C:29:2C:18:BB:0C:E9:F3:D3:D5:F8:29:54:56:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/6adfbf1b-339a-377d-8dda-1c0fcc4304e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:63:7d:ba:36:70:3c:42:84:c1:8a:6a:ba:fd:36:95:1d:d1: 74:6a:78:8c:ad:d8:92:15:58:e1:63:80:87:43:e7:76:16:c5: d0:8e:74:6f:68:6c:cf:24:a1:66:a2:be:1c:65:33:49:c6:71: 58:ae:50:8a:77:ef:db:19:b4:b6:3b:96:c7:25:f0:36:88:d7: d6:a2:ab:20:78:30:b3:db:95:d1:46:75:4a:68:63:d5:c8:83: fe:05:0b:4b:63:42:50:bc:36:30:af:69:b4:99:cc:70:6b:c6: b4:2f:ac:ee:80:ab:58:46:f6:4b:10:94:da:43:04:2d:53:14: a7:10:43:c5:06:d3:ac:4a:7e:d1:ac:a9:cc:57:24:fa:aa:7d: fb:b7:05:db:88:a8:0e:9d:78:00:98:42:23:b0:98:f6:59:c7: 58:5c:e2:ba:6d:9c:0f:5b:03:03:ba:2c:e5:3b:29:1e:78:f6: 53:67:5a:be:63:ea:ac:d0:61:3d:ca:33:0c:53:30:cd:2e:43: a6:15:0d:5e:50:fe:5d:7d:0a:32:c2:3c:5b:a8:d7:44:ed:c5: d7:47:ad:9e:e9:fd:8d:09:53:db:0e:21:f5:23:ec:ad:6b:97: f2:66:82:e2:12:f6:bf:24:dd:02:24:df:4e:1a:ab:12:bf:da: b4:ae:6f:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NN+n55H0yvyxjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk N2EwMzU1ZGMtMjg3Yi00MWFjLWFhOTctODk3MGZkZmUzOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuln4rwO/Dym4WtsFmSihX53M4IKX22qCA105 3S5PlCTRPP0DtleN9b5DCdjiNChrwJqQbAbLfoWCEM71GFTGoDzCP3lsYXl8fIyt 63k5pj1loM8y0n8KCUZQwxrSmdaKMpLUoQLgjvef+ozwQu8snfH/8qWkRXnx5Wnx 1PoQSlX41Mn2H2Nd8XXag06de2vljQsKqE14kgh05u9ZvCUDHbYU0842JJiix0RB yG5T5ZhaZMeYi9k6Az5WBr68i/OYhP8el1qE8c9nYVfHK0NdG/rOMO97GRM9MHhv tftwvIty+LK3CLzcPwDTwj/tU/x+BcbwIPGgtNrfQ2ZuNyAKAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKKjQ6pTCksGLsM6fPT1fgpVFYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvNmFkZmJmMWItMzM5YS0z NzdkLThkZGEtMWMwZmNjNDMwNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhjfbo2cDxChMGKarr9NpUd0XRqeIyt2JIVWOFjgIdD53YWxdCOdG9o bM8koWaivhxlM0nGcViuUIp379sZtLY7lscl8DaI19aiqyB4MLPbldFGdUpoY9XI g/4FC0tjQlC8NjCvabSZzHBrxrQvrO6Aq1hG9ksQlNpDBC1TFKcQQ8UG06xKftGs qcxXJPqqffu3BduIqA6deACYQiOwmPZZx1hc4rptnA9bAwO6LOU7KR549lNnWr5j 6qzQYT3KMwxTMM0uQ6YVDV5Q/l19CjLCPFuo10TtxddHrZ7p/Y0JU9sOIfUj7K1r l/JmguIS9r8k3QIk304aqxK/2rSub30= -----END CERTIFICATE-----Generated at Thu Mar 26 21:35:56 2026 by rpki-client