$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa File: ba884675-a4bc-3586-8ccc-a30e17668325.roa (raw, json) Hash identifier: v0bcFzZwePGHYdYFMQzNIT9xu+FbBKRY6IM7RkNZcw4= Subject key identifier: 92:BD:EB:D4:BE:EB:27:7C:4B:B1:12:EE:19:F1:8E:CE:BD:14:EA:16 Certificate issuer: /CN=cce65795-3b77-4225-98f0-89e8bfcf275c Certificate serial: 010D0C9F4328584D44FA3DB8D45DE16B6C607700 Authority key identifier: 3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8070 IP address blocks: 199.15.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3d:b8:d4:5d:e1:6b:6c:60:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce65795-3b77-4225-98f0-89e8bfcf275c Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=f226f5a0-2efa-4a29-b383-81c383b31825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:37:98:1b:d9:ad:12:3d:49:0a:48:af:ed: 92:0b:d6:8d:3a:98:a2:27:38:09:70:af:5f:ea:8d: 12:fa:9b:98:71:b1:d0:ad:4b:f9:4f:ba:7d:d8:eb: f9:3e:2e:e0:aa:43:ce:f3:fc:d5:3f:8a:f4:f9:8c: 0c:34:7c:b8:da:a4:17:b9:ef:da:df:dc:de:89:92: 16:db:7e:d8:a8:af:05:d3:21:27:f4:21:cf:c4:ce: d7:f5:ce:0e:d7:22:30:96:51:37:f9:6d:5c:f9:c2: 1d:b5:3f:b5:9a:30:c6:81:62:23:31:47:31:94:e0: cc:61:69:69:63:57:b4:f0:ff:d6:6b:1c:e2:09:49: 15:4a:0c:84:c7:83:f2:ec:36:f7:6c:a4:50:cd:48: b0:61:b3:ed:6c:5f:c0:a5:08:fe:dc:06:c6:9a:17: 86:70:e7:46:26:d8:5d:c8:57:b9:1d:d8:9f:df:a4: 22:1d:b2:03:24:92:6c:51:a3:c8:17:60:38:ee:1f: f6:e6:a1:89:06:9d:4b:9d:0d:8b:e4:38:5d:a2:a6: 88:9f:2e:2a:12:ca:17:76:08:6b:69:dc:6e:36:fb: af:f0:4b:21:e7:0c:75:d2:6f:29:8c:4d:1c:59:9c: 36:eb:f1:9c:95:36:bf:1d:b2:69:cb:9b:7a:23:77: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BD:EB:D4:BE:EB:27:7C:4B:B1:12:EE:19:F1:8E:CE:BD:14:EA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/ba884675-a4bc-3586-8ccc-a30e17668325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl X509v3 Authority Key Identifier: keyid:3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer sbgp-ipAddrBlock: critical IPv4: 199.15.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:40:e5:68:cd:21:dd:34:69:1b:55:93:fd:18:87:b9:e5:9a: bd:c0:86:a6:d2:db:e8:2a:b0:ec:2b:35:fb:e4:34:cb:63:ed: d5:73:47:a8:2d:ea:b8:2f:d4:fc:a1:ee:1c:0e:7d:62:11:d7: 1d:a8:53:ae:f1:15:92:0e:8f:0e:32:5f:ad:cf:4a:67:4f:29: d1:44:39:5b:e2:99:bf:56:91:d5:75:f5:c0:60:b8:c0:47:39: 86:92:03:a0:70:bf:eb:76:20:0a:d5:79:c9:87:97:76:a0:33: 9c:5e:99:9f:ac:9b:99:0f:6d:bb:75:bd:21:df:e5:05:a1:62: 94:32:0d:1e:7b:f9:68:ff:ea:cb:48:9d:6b:77:e3:a7:e3:18: 5c:69:15:86:a6:25:47:b5:a9:71:64:98:ab:c2:72:c3:91:8d: 14:13:a2:ea:41:c8:a7:09:13:74:e4:5e:bf:b1:c2:a6:7f:d0: 7c:c6:e2:b3:50:ee:f3:5b:27:8b:e5:09:90:96:d0:60:2e:7d: f5:ed:46:cf:92:19:8e:25:23:02:9b:90:5c:9d:48:b4:5e:e2: 4a:ca:9d:31:89:29:28:51:a0:1b:23:8d:4a:64:7c:43:bb:52: 9b:5f:cf:38:fc:9c:27:71:3f:a9:6f:87:a3:d1:ec:8a:f8:66: b3:13:97:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j241F3ha2xgdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NlNjU3OTUtM2I3Ny00MjI1LTk4ZjAtODllOGJmY2Yy NzVjMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZjIyNmY1YTAtMmVmYS00YTI5LWIzODMtODFjMzgzYjMxODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMc3mBvZrRI9SQpIr+2SC9aNOpiiJzgJcK9f 6o0S+puYcbHQrUv5T7p92Ov5Pi7gqkPO8/zVP4r0+YwMNHy42qQXue/a39zeiZIW 237YqK8F0yEn9CHPxM7X9c4O1yIwllE3+W1c+cIdtT+1mjDGgWIjMUcxlODMYWlp Y1e08P/WaxziCUkVSgyEx4Py7Db3bKRQzUiwYbPtbF/ApQj+3AbGmheGcOdGJthd yFe5Hdif36QiHbIDJJJsUaPIF2A47h/25qGJBp1LnQ2L5DhdoqaIny4qEsoXdghr adxuNvuv8Esh5wx10m8pjE0cWZw26/GclTa/HbJpy5t6I3dqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK969S+6yd8S7ES7hnxjs69FOoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2 NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4YmZjZjI3NWMvYmE4ODQ2NzUtYTRiYy0z NTg2LThjY2MtYTMwZTE3NjY4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NlNjU3OTUtM2I3Ny00MjI1LTk4 ZjAtODllOGJmY2YyNzVjL2NjZTY1Nzk1LTNiNzctNDIyNS05OGYwLTg5ZThiZmNm Mjc1Yy5jcmwwHwYDVR0jBBgwFoAUPcZcrflEVZKVwKVsknQ/AGpyi4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2U2NTc5NS0zYjc3LTQyMjUtOThmMC04OWU4 YmZjZjI3NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxw+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZA5WjNId00aRtVk/0Yh7nlmr3AhqbS2+gqsOwrNfvkNMtj7dVzR6gt 6rgv1Pyh7hwOfWIR1x2oU67xFZIOjw4yX63PSmdPKdFEOVvimb9WkdV19cBguMBH OYaSA6Bwv+t2IArVecmHl3agM5xemZ+sm5kPbbt1vSHf5QWhYpQyDR57+Wj/6stI nWt346fjGFxpFYamJUe1qXFkmKvCcsORjRQToupByKcJE3TkXr+xwqZ/0HzG4rNQ 7vNbJ4vlCZCW0GAuffXtRs+SGY4lIwKbkFydSLRe4krKnTGJKShRoBsjjUpkfEO7 Uptfzzj8nCdxP6lvh6PR7Ir4ZrMTlxY= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:30 2026 by rpki-client