$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa File: 9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa (raw, json) Hash identifier: Gdssurbu99W6tgerNleI6RsvRMNTE+okKeQfYp9h+v8= Subject key identifier: 2A:92:ED:F5:39:11:ED:B5:05:E9:F5:B2:FA:60:28:FE:0A:CD:B9:38 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584D3B34DF9717935778839E1300 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 395807 IP address blocks: 199.60.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:df:97:17:93:57:78:83:9e:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=cc17d672-7aac-476c-a22e-bdf6c1cf8f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:7a:75:a5:40:34:d5:ea:7c:91:f7:b7:16: c7:e6:74:c0:68:72:ae:13:e8:6a:10:d1:16:21:2d: 4d:e3:f6:4b:e8:b6:0a:3a:86:4f:88:b0:ad:02:21: 71:8e:88:19:ab:0b:aa:3f:1c:e8:c3:1a:1b:51:3f: 50:b6:0a:0f:da:0c:41:b9:bc:9f:b6:53:19:13:89: b1:7e:e8:fb:ff:1b:c6:61:92:56:f8:4b:02:96:94: 60:b5:bd:bc:f2:f6:17:bb:66:16:c4:20:a2:e2:b9: 0a:e2:7e:56:a8:5b:bb:ac:e3:df:2c:7c:96:8f:b5: 63:52:71:43:28:6b:23:68:89:e0:2e:36:f7:9f:86: 06:12:68:a3:12:44:95:f4:92:dd:ea:f3:c3:05:dc: e7:bf:94:41:e3:57:7e:ed:21:8e:bb:a4:6b:73:2b: 8a:91:71:38:f1:dd:07:97:8a:33:3a:37:e0:cd:97: 34:12:8b:f1:3d:b5:fb:21:e6:12:bb:eb:e0:d2:a7: 8f:3d:b7:ac:6a:73:af:72:ee:96:a2:e0:c0:3e:b1: 51:a9:c8:b8:f4:be:0c:39:00:76:12:ca:42:cb:ca: 21:3a:b8:e5:b3:1b:7d:a3:e5:c1:91:0e:0f:ca:f2: ad:21:f0:84:e5:d1:ed:2f:79:ca:b2:16:8c:c1:11: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:ED:F5:39:11:ED:B5:05:E9:F5:B2:FA:60:28:FE:0A:CD:B9:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:dc:5f:a9:28:fe:0e:cb:f2:e5:4d:0d:ba:dc:ac:30:88:0e: 20:31:bc:53:97:c0:e9:e4:e0:e4:5d:f9:e4:e1:d2:4b:f1:6b: ba:87:17:f9:5a:50:3b:fd:06:c5:48:e5:f5:73:b5:6d:23:51: e8:8a:06:ff:e6:ba:45:a4:9c:7b:18:d9:1c:c9:c7:16:3b:a5: ce:1b:66:b2:75:84:69:24:a7:c6:63:cc:57:38:07:e4:2b:fa: f0:8f:36:fc:8a:b3:ae:ed:0e:e2:49:dd:e4:4f:0b:66:a0:3f: d1:c5:12:18:7d:42:5a:ef:02:65:77:b4:45:3a:07:0e:0e:dc: 26:63:aa:f6:86:ab:3c:78:a5:26:9b:b7:f5:66:3d:6e:45:b0: a8:e2:e1:4a:c9:7c:22:c6:e2:ab:16:3d:37:50:c0:48:85:a9: 01:58:f0:b3:ab:70:d4:60:86:92:63:25:86:78:20:f0:ac:4b: 5a:b1:2a:dd:95:cc:b0:20:c6:b0:98:0a:91:45:49:95:9f:bf: 59:c4:ae:fb:16:aa:5f:5d:cd:31:12:89:a8:67:c2:49:ca:09: 36:4b:23:f2:f5:97:72:1d:41:46:1d:77:74:f2:f8:0b:41:45: a8:94:3c:18:df:77:9f:76:c1:d4:ca:75:15:46:e8:de:1b:55: 91:8d:67:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NN+XF5NXeIOeEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk Y2MxN2Q2NzItN2FhYy00NzZjLWEyMmUtYmRmNmMxY2Y4Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpZ6daVANNXqfJH3txbH5nTAaHKuE+hqENEW IS1N4/ZL6LYKOoZPiLCtAiFxjogZqwuqPxzowxobUT9QtgoP2gxBubyftlMZE4mx fuj7/xvGYZJW+EsClpRgtb288vYXu2YWxCCi4rkK4n5WqFu7rOPfLHyWj7VjUnFD KGsjaIngLjb3n4YGEmijEkSV9JLd6vPDBdznv5RB41d+7SGOu6RrcyuKkXE48d0H l4ozOjfgzZc0EovxPbX7IeYSu+vg0qePPbesanOvcu6WouDAPrFRqci49L4MOQB2 EspCy8ohOrjlsxt9o+XBkQ4PyvKtIfCE5dHtL3nKshaMwRGgGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqS7fU5Ee21Ben1svpgKP4Kzbk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvOWVkODhlZjItY2E4Zi0z ZGE5LTlhOGYtNmNjY2E2NzRhNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7cX6ko/g7L8uVNDbrcrDCIDiAxvFOXwOnk4ORd+eTh0kvxa7qHF/la UDv9BsVI5fVztW0jUeiKBv/mukWknHsY2RzJxxY7pc4bZrJ1hGkkp8ZjzFc4B+Qr +vCPNvyKs67tDuJJ3eRPC2agP9HFEhh9QlrvAmV3tEU6Bw4O3CZjqvaGqzx4pSab t/VmPW5FsKji4UrJfCLG4qsWPTdQwEiFqQFY8LOrcNRghpJjJYZ4IPCsS1qxKt2V zLAgxrCYCpFFSZWfv1nErvsWql9dzTESiahnwknKCTZLI/L1l3IdQUYdd3Ty+AtB RaiUPBjfd592wdTKdRVG6N4bVZGNZ7w= -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:23 2026 by rpki-client