$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/d9063ed5-a4fe-3a87-abfd-d66ec8881c94.roa File: d9063ed5-a4fe-3a87-abfd-d66ec8881c94.roa (raw, json) Hash identifier: NC9CIfhYphjm87IKnNNYInsqNDALY9siiJViIzc5r4I= Subject key identifier: A4:DB:85:7B:B8:BC:28:03:4A:28:0A:9A:AC:14:07:58:D4:24:BD:05 Certificate issuer: /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Certificate serial: 010D0C9F4328584D4B27EF5AEFD1E78234CD6B40 Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/d9063ed5-a4fe-3a87-abfd-d66ec8881c94.roa Signing time: Thu 26 Mar 2026 06:07:40 +0000 ROA not before: Thu 26 Mar 2026 06:07:40 +0000 ROA not after: Wed 24 Jun 2026 06:07:40 +0000 asID: 9304 IP address blocks: 199.188.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:27:ef:5a:ef:d1:e7:82:34:cd:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd Validity Not Before: Mar 26 06:07:40 2026 GMT Not After : Jun 24 06:07:40 2026 GMT Subject: CN=c0353f92-228a-442d-a00e-24a30de58604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:c6:4a:7c:a3:c7:93:8a:7f:cf:21:20:4c: e4:94:41:13:c1:d7:a4:f0:b3:2c:50:a9:53:c1:e7: d8:08:34:41:99:d0:f5:38:09:fb:15:3d:eb:ff:8b: 7c:a0:20:81:9e:b9:76:6f:06:51:ae:97:b1:44:de: 4c:ff:e4:65:cd:b8:98:ad:41:07:a6:66:f9:e7:9b: 7a:8e:68:93:c0:a7:43:83:06:03:b9:fc:a5:76:b9: 6b:28:33:73:11:24:f1:9e:85:10:af:d4:ba:d1:6d: ea:41:66:56:a5:b7:5d:5b:8f:f6:18:c1:25:aa:5a: 01:70:0f:af:30:7f:94:44:78:b5:d2:3a:cd:f2:b0: ee:0a:63:0e:dd:eb:80:cd:0f:3a:49:c2:0a:70:61: 4f:48:cf:83:2b:3c:93:be:df:80:94:f2:99:9f:ab: 20:4e:ba:1c:2d:d4:dc:99:22:8a:3c:b2:2d:8c:fc: 2d:62:63:57:6e:8a:25:31:4c:3b:31:a4:9f:c3:e6: 38:46:03:13:b6:78:3f:82:7c:85:03:e3:9d:06:8f: e8:19:d2:f3:17:39:cc:6d:2a:ca:1c:73:fa:db:4b: 7c:a9:e1:8b:c3:31:93:22:13:b8:a6:d1:27:a0:1e: 7d:e7:40:eb:17:07:00:9b:cd:d5:36:62:12:cf:29: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DB:85:7B:B8:BC:28:03:4A:28:0A:9A:AC:14:07:58:D4:24:BD:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/d9063ed5-a4fe-3a87-abfd-d66ec8881c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl X509v3 Authority Key Identifier: keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer sbgp-ipAddrBlock: critical IPv4: 199.188.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d4:60:6c:f0:87:4e:e1:97:3a:8b:f3:b9:f5:6e:d2:9f:78: 91:1c:2f:8f:7a:18:20:52:82:28:ab:8a:af:65:03:4d:8d:57: a8:5d:95:0d:cc:ca:ed:0a:e4:e7:5e:08:63:24:cc:1b:4a:d7: 49:5c:36:5a:07:0f:92:13:fb:7c:6d:b5:57:fa:4b:e0:7d:a6: b2:20:4a:95:4f:86:4a:08:0e:0d:35:57:d9:d9:51:d8:a8:4c: b1:e0:5a:02:6a:56:00:73:90:9e:4f:5d:0f:ec:99:f3:fb:5c: f2:15:45:59:8d:b6:34:c2:c6:49:5f:14:b0:6f:7d:1e:5f:b1: 92:df:52:16:96:e5:11:37:b4:a3:e6:6d:a1:1a:b6:f3:d8:87: ea:a0:89:a9:51:4e:b9:dc:5d:c0:2c:16:05:e6:6c:d9:98:59: f9:ef:fb:bc:bb:a8:14:c1:bd:9e:ad:d9:c9:5c:d2:08:9d:cb: 1d:da:5c:f8:e2:60:c2:90:33:74:41:a4:86:c5:b1:11:d3:e3: b3:e5:91:df:cd:12:7b:c7:b3:df:ca:cc:b5:8d:28:be:fa:41: 1f:80:90:ef:62:81:17:1a:7e:c8:17:44:e5:dc:00:12:02:d0: 7a:e8:91:04:26:41:32:7c:16:e2:9c:b4:98:c9:17:2c:07:ae: 42:bb:b2:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1LJ+9a79HngjTNa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi YmRkMB4XDTI2MDMyNjA2MDc0MFoXDTI2MDYyNDA2MDc0MFowLzEtMCsGA1UEAxMk YzAzNTNmOTItMjI4YS00NDJkLWEwMGUtMjRhMzBkZTU4NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOLGSnyjx5OKf88hIEzklEETwdek8LMsUKlT wefYCDRBmdD1OAn7FT3r/4t8oCCBnrl2bwZRrpexRN5M/+RlzbiYrUEHpmb555t6 jmiTwKdDgwYDufyldrlrKDNzESTxnoUQr9S60W3qQWZWpbddW4/2GMElqloBcA+v MH+URHi10jrN8rDuCmMO3euAzQ86ScIKcGFPSM+DKzyTvt+AlPKZn6sgTrocLdTc mSKKPLItjPwtYmNXboolMUw7MaSfw+Y4RgMTtng/gnyFA+OdBo/oGdLzFznMbSrK HHP620t8qeGLwzGTIhO4ptEnoB5950DrFwcAm83VNmISzymeUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTbhXu4vCgDSigKmqwUB1jUJL0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2 ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvZDkwNjNlZDUtYTRmZS0z YTg3LWFiZmQtZDY2ZWM4ODgxYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzUYGzwh07hlzqL87n1btKfeJEcL496GCBSgiiriq9lA02NV6hdlQ3M yu0K5OdeCGMkzBtK10lcNloHD5IT+3xttVf6S+B9prIgSpVPhkoIDg01V9nZUdio TLHgWgJqVgBzkJ5PXQ/smfP7XPIVRVmNtjTCxklfFLBvfR5fsZLfUhaW5RE3tKPm baEatvPYh+qgialRTrncXcAsFgXmbNmYWfnv+7y7qBTBvZ6t2clc0gidyx3aXPji YMKQM3RBpIbFsRHT47Plkd/NEnvHs9/KzLWNKL76QR+AkO9igRcafsgXROXcABIC 0HrokQQmQTJ8FuKctJjJFywHrkK7svQ= -----END CERTIFICATE-----Generated at Thu Mar 26 23:33:58 2026 by rpki-client