$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/968d55c1-3d47-3687-9745-1a682aaf935d.roa File: 968d55c1-3d47-3687-9745-1a682aaf935d.roa (raw, json) Hash identifier: 438YDIvQAlb6S7+EG5OWEPkQc27DqwY30qVeBawxnwo= Subject key identifier: 16:F4:59:2C:FE:2D:E4:18:52:E3:C9:1E:DA:E2:1F:5A:C4:86:D7:C7 Certificate issuer: /CN=39901aa6-e826-47dc-9f16-612ab05bfcfd Certificate serial: 010D0C9F4328584D44FA4549C05D124FF859B1C0 Authority key identifier: 56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/968d55c1-3d47-3687-9745-1a682aaf935d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 54539 IP address blocks: 199.182.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:45:49:c0:5d:12:4f:f8:59:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39901aa6-e826-47dc-9f16-612ab05bfcfd Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a2b69499-e09b-41bf-bf7f-2d875f0b2a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d9:b9:2c:0c:b6:c2:2c:74:24:0f:01:b8:10: 66:73:89:29:fa:6c:6b:ea:07:0f:13:18:95:f7:5e: 6f:db:74:ee:3a:79:0d:d1:04:a1:95:89:b7:6c:01: ab:7b:4f:84:bf:6c:68:57:68:8e:ca:c5:db:2c:49: 19:94:50:c9:50:c1:16:b4:03:31:2c:0f:5c:bc:28: 0b:65:4f:c7:aa:8b:55:eb:1e:ac:b1:27:5c:a5:a1: 6c:49:77:0d:b8:28:ac:14:6b:8c:ee:07:e7:97:74: 78:09:7a:3b:f1:02:92:71:cd:cd:58:d4:73:c3:ea: 49:ae:6d:cb:bc:16:8e:62:28:88:80:2e:bf:af:3f: 62:48:67:31:bf:4c:b3:18:17:25:d7:66:40:26:1a: 91:e5:87:b1:58:10:7d:d7:34:81:92:c9:84:ab:bf: 7a:73:b7:fa:fd:81:2d:74:42:a9:0a:aa:63:f1:fa: f7:77:90:fb:45:f0:87:60:b0:c5:a4:e6:82:a3:bd: a7:25:ce:61:98:92:0c:bb:a9:25:f2:1a:0b:a3:ec: e9:8a:9a:1d:a1:9a:3b:50:d1:9e:1f:57:d4:bf:22: dc:e6:e2:ae:7d:4b:8f:0a:5b:25:14:c6:b1:09:2b: 5b:99:1d:d4:5e:f5:16:04:19:a9:08:09:ec:56:d2: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F4:59:2C:FE:2D:E4:18:52:E3:C9:1E:DA:E2:1F:5A:C4:86:D7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/968d55c1-3d47-3687-9745-1a682aaf935d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.crl X509v3 Authority Key Identifier: keyid:56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer sbgp-ipAddrBlock: critical IPv4: 199.182.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:12:dc:14:c2:b4:5c:02:81:07:dc:c1:25:ed:ce:98:b8:b1: fa:28:d1:e2:b0:44:bb:d6:fd:4e:ab:d7:36:d4:fa:0f:5d:c6: b2:8d:7f:f9:78:2d:3c:22:75:76:66:a0:3b:1b:94:44:9c:ec: 0e:4e:98:e7:2e:df:67:75:68:01:bd:2e:80:54:b7:6b:ce:81: d4:cc:13:49:dc:e7:2d:47:07:c8:2c:a9:d7:ea:0c:96:e4:a1: 67:13:4c:68:ef:8a:59:86:5c:44:3f:3a:ae:23:c9:90:fc:12: d4:5a:14:fa:76:30:bf:dc:e6:a1:1c:c0:55:c1:92:af:44:b1: f7:b9:62:f7:c6:47:c9:3d:11:b2:20:cb:14:73:fe:a6:73:79: 86:c2:ed:55:52:24:3a:a4:5d:00:f9:2e:3d:1b:87:ae:15:e1: f8:38:54:b8:9f:83:94:49:b1:a4:79:4b:48:14:bb:9e:a9:0e: f4:8e:94:b0:1c:29:66:54:ef:0e:f3:29:b7:b2:47:eb:23:58: 5b:99:4e:fb:ea:ee:f9:b5:49:0b:c9:1e:be:5e:7d:b5:bb:9e: 08:be:17:b3:d2:76:85:9c:6e:71:e5:6a:09:71:d6:39:a7:43: 0e:87:50:56:ad:db:4c:ab:fd:e3:7c:1a:9a:c3:3a:ea:ff:80: cd:83:08:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kVJwF0ST/hZscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MDFhYTYtZTgyNi00N2RjLTlmMTYtNjEyYWIwNWJm Y2ZkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTJiNjk0OTktZTA5Yi00MWJmLWJmN2YtMmQ4NzVmMGIyYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltm5LAy2wix0JA8BuBBmc4kp+mxr6gcPExiV 915v23TuOnkN0QShlYm3bAGre0+Ev2xoV2iOysXbLEkZlFDJUMEWtAMxLA9cvCgL ZU/HqotV6x6ssSdcpaFsSXcNuCisFGuM7gfnl3R4CXo78QKScc3NWNRzw+pJrm3L vBaOYiiIgC6/rz9iSGcxv0yzGBcl12ZAJhqR5YexWBB91zSBksmEq796c7f6/YEt dEKpCqpj8fr3d5D7RfCHYLDFpOaCo72nJc5hmJIMu6kl8hoLo+zpipodoZo7UNGe H1fUvyLc5uKufUuPClslFMaxCStbmR3UXvUWBBmpCAnsVtLMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb0WSz+LeQYUuPJHtriH1rEhtfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOTkw MWFhNi1lODI2LTQ3ZGMtOWYxNi02MTJhYjA1YmZjZmQvOTY4ZDU1YzEtM2Q0Ny0z Njg3LTk3NDUtMWE2ODJhYWY5MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzk5MDFhYTYtZTgyNi00N2RjLTlm MTYtNjEyYWIwNWJmY2ZkLzM5OTAxYWE2LWU4MjYtNDdkYy05ZjE2LTYxMmFiMDVi ZmNmZC5jcmwwHwYDVR0jBBgwFoAUVuZGGjvLeMiA5abbqJH/8zitm1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOTkwMWFhNi1lODI2LTQ3ZGMtOWYxNi02MTJh YjA1YmZjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8S3BTCtFwCgQfcwSXtzpi4sfoo0eKwRLvW/U6r1zbU+g9dxrKNf/l4 LTwidXZmoDsblESc7A5OmOcu32d1aAG9LoBUt2vOgdTME0nc5y1HB8gsqdfqDJbk oWcTTGjvilmGXEQ/Oq4jyZD8EtRaFPp2ML/c5qEcwFXBkq9Esfe5YvfGR8k9EbIg yxRz/qZzeYbC7VVSJDqkXQD5Lj0bh64V4fg4VLifg5RJsaR5S0gUu56pDvSOlLAc KWZU7w7zKbeyR+sjWFuZTvvq7vm1SQvJHr5efbW7ngi+F7PSdoWcbnHlaglx1jmn Qw6HUFat20yr/eN8GprDOur/gM2DCPg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:23 2026 by rpki-client