$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4240d433-01e5-3bfc-a858-aa5e95c2552c.roa File: 4240d433-01e5-3bfc-a858-aa5e95c2552c.roa (raw, json) Hash identifier: QikMf/KCe5ft+W+qeZmlGcR1zCgW+Jk5yLyjQ8DF1rM= Subject key identifier: 63:89:2E:A9:DF:65:2A:C3:4D:D6:3F:51:FD:AD:32:54:C2:6D:31:AA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D091286D8A5964FEDCCCB2FC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4240d433-01e5-3bfc-a858-aa5e95c2552c.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397242 IP address blocks: 199.7.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:86:d8:a5:96:4f:ed:cc:cb:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=bd640476-1e72-43fe-b216-73f7af9b5823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5c:e0:3d:40:6b:e8:67:4f:bd:b3:9b:40:70: 66:2a:a0:66:b6:4d:5f:02:e2:4a:c3:c0:b1:a0:5f: 43:dd:7e:e4:b8:c1:f7:fb:ac:41:43:e1:95:a2:a7: 9b:ba:ed:d5:a9:76:4e:73:b7:1a:bd:0c:6f:6f:04: dd:47:a9:70:89:7e:88:96:f6:45:72:1a:7f:c8:44: ff:66:6b:97:ff:2c:fa:54:56:9d:96:52:73:9c:7e: dc:a3:30:80:f7:97:48:3b:0d:d2:4d:76:ef:88:9a: 9f:21:0a:d8:0c:09:18:c9:94:8d:0e:12:12:a4:73: ca:d2:f2:7c:2d:bb:1e:22:ed:8c:e2:5d:28:fd:c6: 60:ba:50:3b:93:a0:33:a8:31:4a:a5:e3:84:af:d0: 0e:d5:09:5a:54:dc:d0:40:1b:cd:a6:1e:1e:9b:66: d9:5e:ec:c7:f0:74:2c:17:88:dc:fb:13:0a:df:0b: 8e:60:f1:2a:44:5e:5a:6e:74:2f:aa:41:27:6a:f1: d9:11:0d:56:f4:0f:fd:ba:bc:6a:56:7f:27:4e:55: 8c:1f:59:1d:6f:b8:e1:c0:15:65:da:1b:78:35:33: aa:68:32:bc:39:67:f9:0d:f0:e0:d5:b0:0a:ae:6c: 92:8c:b8:5c:42:9b:89:b8:70:3f:41:49:2e:72:d4: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:89:2E:A9:DF:65:2A:C3:4D:D6:3F:51:FD:AD:32:54:C2:6D:31:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4240d433-01e5-3bfc-a858-aa5e95c2552c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 199.7.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c3:f6:12:39:2c:6e:49:ee:f7:4e:71:dc:8b:ed:8a:7e:b6: 20:92:d5:d0:8c:17:e3:c3:ed:90:af:5f:df:e1:8f:65:6a:25: b7:31:63:27:04:a7:03:08:ec:1e:51:19:06:c6:83:a6:bb:c3: 8d:06:3b:32:0c:e9:b7:fa:42:f0:16:1c:0a:cf:f6:ff:35:1c: 74:a7:1c:b8:08:84:53:61:35:50:5d:74:74:4c:25:88:0b:5d: 8e:eb:c0:36:53:c7:98:30:a8:f4:fc:fd:96:da:3b:f4:07:83: cd:b4:52:ab:8f:4a:56:95:8c:e6:2b:c9:4f:0b:5c:26:00:5c: 29:4e:44:4b:20:9c:f4:ac:50:94:67:61:de:be:47:96:e7:86: 3a:89:6a:e0:5f:a5:75:d9:f3:d7:70:40:f0:b7:d5:4a:34:37: a4:49:4a:35:e7:0d:05:00:0f:c2:78:54:f3:fa:eb:28:03:83: fb:1a:0e:2f:dd:8b:ab:98:c9:ac:2b:da:65:85:8e:2a:bb:43: 49:96:09:dd:d9:fe:a7:de:8f:3c:6f:60:0f:da:cc:93:e8:c5: b9:d6:77:ec:c1:80:01:95:48:91:dc:89:94:8b:9c:31:e5:af: 9d:52:61:6e:59:60:74:e4:ae:a8:92:e5:53:49:c7:b3:4c:f1: 9f:e8:03:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEobYpZZP7czLL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YmQ2NDA0NzYtMWU3Mi00M2ZlLWIyMTYtNzNmN2FmOWI1ODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVzgPUBr6GdPvbObQHBmKqBmtk1fAuJKw8Cx oF9D3X7kuMH3+6xBQ+GVoqebuu3VqXZOc7cavQxvbwTdR6lwiX6IlvZFchp/yET/ ZmuX/yz6VFadllJznH7cozCA95dIOw3STXbviJqfIQrYDAkYyZSNDhISpHPK0vJ8 LbseIu2M4l0o/cZgulA7k6AzqDFKpeOEr9AO1QlaVNzQQBvNph4em2bZXuzH8HQs F4jc+xMK3wuOYPEqRF5abnQvqkEnavHZEQ1W9A/9urxqVn8nTlWMH1kdb7jhwBVl 2ht4NTOqaDK8OWf5DfDg1bAKrmySjLhcQpuJuHA/QUkuctTl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOJLqnfZSrDTdY/Uf2tMlTCbTGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDI0MGQ0MzMtMDFlNS0z YmZjLWE4NTgtYWE1ZTk1YzI1NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/D9hI5LG5J7vdOcdyL7Yp+tiCS1dCMF+PD7ZCvX9/hj2VqJbcxYycE pwMI7B5RGQbGg6a7w40GOzIM6bf6QvAWHArP9v81HHSnHLgIhFNhNVBddHRMJYgL XY7rwDZTx5gwqPT8/ZbaO/QHg820UquPSlaVjOYryU8LXCYAXClOREsgnPSsUJRn Yd6+R5bnhjqJauBfpXXZ89dwQPC31Uo0N6RJSjXnDQUAD8J4VPP66ygDg/saDi/d i6uYyawr2mWFjiq7Q0mWCd3Z/qfejzxvYA/azJPoxbnWd+zBgAGVSJHciZSLnDHl r51SYW5ZYHTkrqiS5VNJx7NM8Z/oA6Y= -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:19 2026 by rpki-client