$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa File: 8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa (raw, json) Hash identifier: 4MtXXD5wx4ox6jTRpa1aL38oyqg2hsaIPFKCG3rqxac= Subject key identifier: FA:94:D9:5C:2B:61:D1:54:E8:EC:E5:9F:D7:03:AA:BE:7A:C7:CE:09 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584D40CB9D885A9A13FCA58B1C80 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 398395 IP address blocks: 199.253.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9d:88:5a:9a:13:fc:a5:8b:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=f84f975c-9940-4eff-bf1b-d419edaa4b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:71:c9:bc:df:5c:b2:81:a3:2c:d4:37:c8: 55:1e:a2:a4:a9:80:4f:e4:0f:41:18:38:18:94:9f: dd:f5:ad:99:27:da:f9:31:6c:24:22:2e:ce:7b:bd: 18:bd:ad:77:60:38:9a:e5:06:dd:72:22:99:6c:f0: 79:13:fd:d3:91:40:bc:99:c1:c0:ac:87:7b:da:67: a0:c6:04:ad:6a:3c:ef:71:c8:85:56:8e:da:26:4d: a9:4d:a3:7d:22:c8:fc:47:68:ae:b1:fc:79:3c:6b: 16:0d:7c:a1:28:d5:93:e4:1c:9e:be:2f:67:f0:8c: 96:b1:65:35:dc:1a:2d:dd:87:c7:1c:fa:24:8e:27: 74:c6:d8:50:98:f5:35:22:4e:4b:c8:08:a1:5e:b6: 21:81:ff:b8:0a:ae:5f:6d:45:35:3b:a9:4b:89:8f: 6c:38:02:dc:81:e5:90:10:c0:8e:46:bc:da:17:b4: 2c:89:4d:61:c4:eb:47:fd:d2:29:cc:d0:ce:e5:b0: b4:8c:ca:82:f0:b4:d0:19:00:2e:8d:b0:14:2b:12: ed:b6:ae:57:29:13:8d:df:43:36:d2:ef:f6:aa:65: 34:b3:1d:0f:b4:60:5d:01:2f:f4:ec:e6:18:fb:8e: 95:32:e1:b0:85:60:18:66:3f:97:31:4e:60:67:2b: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:94:D9:5C:2B:61:D1:54:E8:EC:E5:9F:D7:03:AA:BE:7A:C7:CE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c2:6b:68:37:24:ec:c1:50:9e:17:52:e7:25:19:83:f8:ce: 1b:db:be:c4:d1:76:d3:8b:2a:68:7c:b6:b7:d2:a0:38:fb:29: ce:51:01:42:12:77:56:38:58:f5:89:62:91:47:2d:d1:1f:c9: f2:78:0e:3c:0d:e7:78:91:64:c4:bd:30:65:c6:24:f5:96:91: f3:eb:67:fb:ce:a0:3e:4e:47:53:eb:32:d9:99:46:c9:67:0d: fe:bb:fe:04:e8:d8:34:55:5c:4e:7d:22:a0:c2:2a:0b:99:89: f1:d8:b3:05:39:22:8a:2d:22:b3:45:c3:a1:49:d0:6f:fd:d7: e7:70:a2:b6:90:e5:1a:fb:92:4f:63:0b:48:37:44:10:c0:df: 33:04:dd:c5:b7:33:be:56:f1:d7:8f:f0:1d:ab:4c:92:e3:30: 16:e4:d5:95:30:22:3b:10:aa:b1:97:11:89:6e:3f:f4:d3:45: df:c4:54:50:53:56:9b:23:41:b9:1f:e9:aa:9a:cc:88:05:12: 51:7c:97:63:ea:5e:e9:6e:15:f0:9c:d1:dc:3d:27:84:d1:67: 78:e8:81:c5:66:87:9a:f0:ac:b2:58:1d:88:68:a5:57:5f:cb: 8f:36:d4:96:7a:07:bd:37:03:35:db:b2:4e:2a:ea:50:a7:24: aa:37:92:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay52IWpoT/KWLHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Zjg0Zjk3NWMtOTk0MC00ZWZmLWJmMWItZDQxOWVkYWE0YjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLZxybzfXLKBoyzUN8hVHqKkqYBP5A9BGDgY lJ/d9a2ZJ9r5MWwkIi7Oe70Yva13YDia5QbdciKZbPB5E/3TkUC8mcHArId72meg xgStajzvcciFVo7aJk2pTaN9Isj8R2iusfx5PGsWDXyhKNWT5Byevi9n8IyWsWU1 3Bot3YfHHPokjid0xthQmPU1Ik5LyAihXrYhgf+4Cq5fbUU1O6lLiY9sOALcgeWQ EMCORrzaF7QsiU1hxOtH/dIpzNDO5bC0jMqC8LTQGQAujbAUKxLttq5XKRON30M2 0u/2qmU0sx0PtGBdAS/07OYY+46VMuGwhWAYZj+XMU5gZytGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqU2VwrYdFU6Ozln9cDqr56x84JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGQzNmEzY2EtNjYwYy0z N2I4LTkzMGItMDRiZDNiMjY3NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHCa2g3JOzBUJ4XUuclGYP4zhvbvsTRdtOLKmh8trfSoDj7Kc5RAUIS d1Y4WPWJYpFHLdEfyfJ4DjwN53iRZMS9MGXGJPWWkfPrZ/vOoD5OR1PrMtmZRsln Df67/gTo2DRVXE59IqDCKguZifHYswU5IootIrNFw6FJ0G/91+dworaQ5Rr7kk9j C0g3RBDA3zME3cW3M75W8deP8B2rTJLjMBbk1ZUwIjsQqrGXEYluP/TTRd/EVFBT VpsjQbkf6aqazIgFElF8l2PqXuluFfCc0dw9J4TRZ3jogcVmh5rwrLJYHYhopVdf y4821JZ6B703AzXbsk4q6lCnJKo3kjU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:23 2026 by rpki-client