$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa File: b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa (raw, json) Hash identifier: AnRb24q3q2fdNAaL2JMPFq4D1jUPOOjxdEXaIuaZmLA= Subject key identifier: 4A:0A:53:D7:33:84:A4:F7:BB:2C:DD:B2:C9:C5:0D:21:D7:AB:B6:D3 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584D40CA380792B4E4EBE6CFA0F0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 398395 IP address blocks: 199.253.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:38:07:92:b4:e4:eb:e6:cf:a0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=61e20b0f-b923-4ee0-a275-6607394c9db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:b5:a1:3c:f1:e8:10:ac:b5:0c:c4:07:82: 14:64:27:5f:2d:b7:cf:dd:ba:2b:75:ba:62:a9:16: 98:4c:6e:a1:a2:d2:6b:77:0b:c3:3a:62:ef:13:83: 4b:c6:46:56:a9:59:7a:ad:c6:a7:5c:b1:b8:f5:08: 65:de:10:c9:57:b5:4d:b4:29:a2:96:77:08:88:4d: 7e:c7:36:97:2c:9c:42:70:5e:86:a7:7e:3f:f2:bf: a8:15:66:ee:8a:0d:ef:12:f5:45:34:a1:84:49:62: 85:14:9a:fa:05:78:8f:cd:95:99:53:64:50:9e:27: bd:31:ed:ac:a8:cc:35:96:62:cb:23:d5:3c:88:ff: 8b:56:2a:62:5e:15:a3:82:6d:a1:af:1f:c4:ac:e6: e4:ea:4f:f1:02:2d:78:8b:79:b0:73:7c:dd:57:9b: 71:e4:fb:ea:50:93:33:bf:3d:94:04:4e:f9:9c:6b: 67:0d:7b:fb:5f:7a:4b:a1:ca:56:fa:1f:60:07:1a: e6:b7:40:d0:73:01:1d:d8:83:b5:78:75:46:1e:46: b7:ad:83:32:03:29:73:01:5b:39:a5:9a:dd:8c:d4: f5:e6:db:4d:63:83:67:30:04:da:37:f7:57:c0:07: 60:2f:cb:a9:c2:e8:46:07:8d:21:8d:ea:94:8d:3f: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0A:53:D7:33:84:A4:F7:BB:2C:DD:B2:C9:C5:0D:21:D7:AB:B6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b438ae95-00c7-3707-b6bf-9d6fb741a6d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:96:ca:6a:2b:7f:ab:17:ea:e4:5a:6d:03:58:25:54:a6:a8: 6b:ee:9b:e8:a9:e7:46:90:9b:17:ed:25:6d:8f:bd:87:bf:f4: d3:7e:b4:be:65:02:4f:f4:f6:72:08:4a:68:c8:53:05:6f:9b: 73:b7:00:55:61:ad:0c:44:38:20:9f:1c:88:39:99:19:9f:f3: c7:de:d5:c3:0e:20:91:87:66:c1:f5:5b:ed:83:ce:7e:d5:ab: bb:30:57:79:f7:3f:b4:2d:27:82:6e:af:25:1a:8c:6b:24:66: bb:2c:ca:56:52:e7:0b:9c:b2:e4:33:83:84:52:88:c1:45:d8: 23:e3:70:60:e3:97:de:70:6d:95:17:35:63:22:55:ab:ad:a6: af:6d:f0:0e:8d:b0:ea:3a:86:d0:52:0e:aa:c7:88:66:14:d0: 71:51:e4:a5:43:2a:3d:13:c5:4c:c9:38:26:88:4d:74:8b:c7: ba:75:b9:8d:7a:d6:1b:c9:25:99:d3:f2:2c:8b:39:13:c0:7a: ad:92:44:f0:9f:7b:48:55:83:4c:e6:fa:73:c2:93:10:e5:d7: b8:06:d9:85:8b:8f:1a:57:4d:17:32:09:b4:bb:0b:fc:5b:ce: 82:41:2b:a9:43:dd:23:18:07:07:3d:e1:01:a7:0d:2d:b8:bd: 17:a7:91:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyjgHkrTk6+bPoPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjFlMjBiMGYtYjkyMy00ZWUwLWEyNzUtNjYwNzM5NGM5ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoO1oTzx6BCstQzEB4IUZCdfLbfP3bordbpi qRaYTG6hotJrdwvDOmLvE4NLxkZWqVl6rcanXLG49Qhl3hDJV7VNtCmilncIiE1+ xzaXLJxCcF6Gp34/8r+oFWbuig3vEvVFNKGESWKFFJr6BXiPzZWZU2RQnie9Me2s qMw1lmLLI9U8iP+LVipiXhWjgm2hrx/ErObk6k/xAi14i3mwc3zdV5tx5PvqUJMz vz2UBE75nGtnDXv7X3pLocpW+h9gBxrmt0DQcwEd2IO1eHVGHka3rYMyAylzAVs5 pZrdjNT15ttNY4NnMATaN/dXwAdgL8upwuhGB40hjeqUjT/c2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoKU9czhKT3uyzdssnFDSHXq7bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjQzOGFlOTUtMDBjNy0z NzA3LWI2YmYtOWQ2ZmI3NDFhNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOWymorf6sX6uRabQNYJVSmqGvum+ip50aQmxftJW2PvYe/9NN+tL5l Ak/09nIISmjIUwVvm3O3AFVhrQxEOCCfHIg5mRmf88fe1cMOIJGHZsH1W+2Dzn7V q7swV3n3P7QtJ4JuryUajGskZrssylZS5wucsuQzg4RSiMFF2CPjcGDjl95wbZUX NWMiVautpq9t8A6NsOo6htBSDqrHiGYU0HFR5KVDKj0TxUzJOCaITXSLx7p1uY16 1hvJJZnT8iyLORPAeq2SRPCfe0hVg0zm+nPCkxDl17gG2YWLjxpXTRcyCbS7C/xb zoJBK6lD3SMYBwc94QGnDS24vRenkbk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:26:04 2026 by rpki-client