$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa File: fbcea25a-49e3-304b-9a4f-e111e76c3329.roa (raw, json) Hash identifier: Y3D7oDIN38fK4pl9gIs+KaaDnrJI8Y1gO1d2NrpFydQ= Subject key identifier: 74:E8:FB:2D:C5:9E:64:56:A8:62:E9:F6:27:15:08:25:5B:11:B9:BC Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584D3B34DFCCBD58AFE664D89040 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 395807 IP address blocks: 199.60.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:df:cc:bd:58:af:e6:64:d8:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=8588fea2-8621-4930-b68a-6423848810ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:90:1b:57:e3:b7:cd:3c:a0:8e:20:03:fa: af:64:ee:54:ab:d7:6d:93:9d:53:30:a4:a1:3f:a6: 36:d1:3f:ad:b0:a3:c6:8d:05:27:e8:20:17:6c:46: e7:30:a1:35:b7:6e:8b:63:1e:9c:6e:2d:ed:38:67: b6:dc:cf:a9:dd:30:cb:1e:b6:10:36:af:73:bf:20: 05:5e:d9:86:07:b6:79:51:dc:fc:43:4f:d0:59:e7: e8:6e:ac:ee:4e:1f:45:c8:18:5d:c5:2b:97:47:f7: d4:27:a5:13:18:ef:a5:75:07:f9:c0:5e:81:72:08: 00:1f:1d:4e:6c:3e:3a:81:a6:e9:83:9f:c6:57:86: 1f:0f:e0:91:49:02:3b:38:ac:e3:79:0c:fb:a4:c8: 71:c3:b4:77:55:05:60:3c:f4:41:0e:b3:fc:c5:a1: 81:df:6b:44:af:88:6c:38:2c:34:97:c9:1c:47:05: 24:a0:b6:a7:b2:0c:28:cd:15:22:2a:17:ed:f0:d9: ff:48:b5:10:9e:df:f3:bc:91:25:1b:ba:21:53:b9: db:6a:bb:dd:06:bf:87:38:c4:d6:49:ad:57:31:7d: 20:67:b5:15:fc:2b:44:05:1f:bc:3f:90:46:a0:c4: b7:da:fa:3a:6f:82:3b:71:cc:00:d2:c9:a3:ab:2a: 2b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E8:FB:2D:C5:9E:64:56:A8:62:E9:F6:27:15:08:25:5B:11:B9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:26:aa:59:7c:ed:82:f2:83:5c:1c:4f:33:89:c6:4d:63:2c: 8c:55:1a:14:43:ab:c9:f4:17:7d:f9:1d:7f:43:4f:89:d6:27: 79:25:27:74:80:cd:42:1d:e7:79:33:67:ef:27:07:7b:98:d6: 47:c2:df:1f:17:85:c6:ef:6b:4b:cd:93:89:05:e3:37:58:98: 58:c4:17:8b:73:fb:e7:86:55:47:7a:63:7c:d8:0d:56:72:7a: 70:1a:9c:14:af:9e:61:8b:85:58:05:e0:a5:dd:ad:fd:5b:5d: 78:9f:b0:e9:59:3f:0b:4e:18:fc:9e:6e:32:a3:f9:52:b0:bc: 79:b7:8a:fe:3c:86:8d:78:75:b0:db:78:27:6b:c4:f5:5c:c2: f5:de:51:57:bf:79:80:cb:2c:c6:2e:95:55:df:0c:57:75:a6: 55:52:b6:0e:82:28:d1:ec:c8:ab:68:1b:86:2d:84:5a:44:ef: e4:4e:16:15:15:a0:e9:1d:c3:8f:18:2c:3f:41:10:9c:ec:13: 63:56:95:57:44:c1:9e:78:39:f9:df:30:0e:c0:27:ff:8d:97: 7b:1f:3b:f7:4a:0c:37:3f:12:8a:05:80:0f:e1:03:9f:06:ae: f4:4d:e9:f5:27:b3:73:27:b6:05:d2:96:04:d9:44:27:c5:96: 51:93:69:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NN/MvViv5mTYkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk ODU4OGZlYTItODYyMS00OTMwLWI2OGEtNjQyMzg0ODgxMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn2QG1fjt808oI4gA/qvZO5Uq9dtk51TMKSh P6Y20T+tsKPGjQUn6CAXbEbnMKE1t26LYx6cbi3tOGe23M+p3TDLHrYQNq9zvyAF XtmGB7Z5Udz8Q0/QWefobqzuTh9FyBhdxSuXR/fUJ6UTGO+ldQf5wF6BcggAHx1O bD46gabpg5/GV4YfD+CRSQI7OKzjeQz7pMhxw7R3VQVgPPRBDrP8xaGB32tEr4hs OCw0l8kcRwUkoLansgwozRUiKhft8Nn/SLUQnt/zvJElG7ohU7nbarvdBr+HOMTW Sa1XMX0gZ7UV/CtEBR+8P5BGoMS32vo6b4I7ccwA0smjqyorHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTo+y3FnmRWqGLp9icVCCVbEbm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvZmJjZWEyNWEtNDllMy0z MDRiLTlhNGYtZTExMWU3NmMzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADImqll87YLyg1wcTzOJxk1jLIxVGhRDq8n0F335HX9DT4nWJ3klJ3SA zUId53kzZ+8nB3uY1kfC3x8Xhcbva0vNk4kF4zdYmFjEF4tz++eGVUd6Y3zYDVZy enAanBSvnmGLhVgF4KXdrf1bXXifsOlZPwtOGPyebjKj+VKwvHm3iv48ho14dbDb eCdrxPVcwvXeUVe/eYDLLMYulVXfDFd1plVStg6CKNHsyKtoG4YthFpE7+ROFhUV oOkdw48YLD9BEJzsE2NWlVdEwZ54OfnfMA7AJ/+Nl3sfO/dKDDc/EooFgA/hA58G rvRN6fUns3MntgXSlgTZRCfFllGTaYk= -----END CERTIFICATE-----Generated at Thu Mar 26 20:07:29 2026 by rpki-client