$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa File: ce91baa4-4505-349d-a0fb-18653fe49913.roa (raw, json) Hash identifier: 307tmPREsuZgXPVcDMJXGn4UluvGVcpL5ZXwwrAhqDY= Subject key identifier: 0D:C8:74:35:3F:67:C9:9C:19:9A:2D:CF:63:76:1D:1A:28:E0:69:47 Certificate issuer: /CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Certificate serial: 010D0C9F4328584D359FAAA6598E9B79E81A7580 Authority key identifier: C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 8075 IP address blocks: 199.88.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:aa:a6:59:8e:9b:79:e8:1a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=59f323a5-eeb9-43b6-b5df-fd8cc2236fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:42:f6:47:45:f9:dd:f6:63:e1:55:da:4a: d1:8b:96:a2:86:c9:e4:8d:63:b6:52:76:f1:57:1c: 36:10:2a:01:3f:34:ba:de:73:cd:8f:03:df:ba:84: f5:61:93:11:22:be:5a:5c:c9:bc:d9:e3:aa:ac:92: e6:78:1f:06:b4:cd:22:73:04:c9:6e:7c:a5:f8:ef: 5c:41:aa:85:9b:d4:da:ec:08:da:a8:e1:8a:35:d3: 45:48:16:73:36:a9:5a:a5:7b:6d:6d:da:3c:2e:77: de:f9:5a:ab:1b:7c:98:ad:e7:ee:7a:95:85:ed:be: 9a:e1:64:e5:3c:a1:b2:fd:9a:a4:05:11:38:ef:85: 4a:99:2c:7d:10:c5:40:6b:0c:05:49:21:3f:4d:4d: 7e:7b:a3:c8:1f:d8:f1:8a:cc:5c:8a:2a:a4:6e:e3: dc:c4:e7:68:38:14:9c:9d:96:5e:0d:b7:71:7e:69: 89:92:a7:51:cd:35:21:b3:c3:a4:42:2d:b2:29:6e: 2b:19:c1:c8:10:96:99:5d:e4:72:ca:b2:e0:cd:7c: 5b:49:04:f7:59:c0:b2:f8:d9:dc:cb:fe:26:14:26: a6:b6:41:66:2f:cf:23:42:e1:80:b1:50:f1:0c:f2: 2a:6f:0b:90:dd:3b:6a:94:d2:59:ed:16:a4:cb:bf: 6e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:74:35:3F:67:C9:9C:19:9A:2D:CF:63:76:1D:1A:28:E0:69:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl X509v3 Authority Key Identifier: keyid:C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer sbgp-ipAddrBlock: critical IPv4: 199.88.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:87:62:6b:2b:97:00:d0:1c:40:b7:74:8f:11:2c:fe:93:89: 99:c4:b7:0e:e4:63:98:f6:d3:c1:66:e4:1c:f3:7e:9a:7e:9c: 44:8a:35:4e:03:b7:15:ec:bc:6d:a5:8a:57:24:9f:7d:16:e6: 9b:2d:d3:45:dd:9d:6b:11:2b:9f:3b:4f:f7:4b:50:15:fe:66: 5a:20:0b:1a:c9:f2:aa:83:ac:15:3d:60:41:a7:ac:96:9b:21: 0b:99:1d:a2:20:27:4d:51:0c:5d:15:6d:7c:eb:4b:bd:a6:87: 30:b7:73:18:9e:87:cb:d8:37:25:89:1e:e4:af:ca:68:e9:fb: 60:9e:a4:36:e9:ee:42:79:aa:48:48:8d:7e:2a:0f:a1:ba:8b: 2f:06:65:00:a2:26:7f:12:02:42:9b:99:ea:f6:c3:e7:af:0e: a0:4a:71:37:b6:04:d6:5d:4c:01:aa:35:a5:b2:ef:6e:4d:6c: ea:2f:70:57:ac:ee:1b:9a:d7:9c:4c:a6:7d:0f:a1:5e:c8:2a: c8:e0:6a:0c:34:4f:8f:6e:e0:92:6d:02:07:51:ec:31:00:f3: 81:af:66:c7:93:5d:bc:75:83:47:d0:31:51:25:33:1b:c5:e4: b7:16:a8:6e:7f:1a:71:93:92:b0:31:37:36:ef:ec:aa:ad:33: e2:9c:cf:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6qmWY6beegadYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4MzlmZjktMmYzMi00YzZiLWFkMDEtYzBiNWJkYTli MGRlMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTlmMzIzYTUtZWViOS00M2I2LWI1ZGYtZmQ4Y2MyMjM2ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqtC9kdF+d32Y+FV2krRi5aihsnkjWO2Unbx Vxw2ECoBPzS63nPNjwPfuoT1YZMRIr5aXMm82eOqrJLmeB8GtM0icwTJbnyl+O9c QaqFm9Ta7AjaqOGKNdNFSBZzNqlapXttbdo8Lnfe+VqrG3yYrefuepWF7b6a4WTl PKGy/ZqkBRE474VKmSx9EMVAawwFSSE/TU1+e6PIH9jxisxciiqkbuPcxOdoOBSc nZZeDbdxfmmJkqdRzTUhs8OkQi2yKW4rGcHIEJaZXeRyyrLgzXxbSQT3WcCy+Nnc y/4mFCamtkFmL88jQuGAsVDxDPIqbwuQ3TtqlNJZ7Raky79u9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3IdDU/Z8mcGZotz2N2HRoo4GlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYTgz OWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1YmRhOWIwZGUvY2U5MWJhYTQtNDUwNS0z NDlkLWEwZmItMTg2NTNmZTQ5OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGE4MzlmZjktMmYzMi00YzZiLWFk MDEtYzBiNWJkYTliMGRlL2RhODM5ZmY5LTJmMzItNGM2Yi1hZDAxLWMwYjViZGE5 YjBkZS5jcmwwHwYDVR0jBBgwFoAUxsk3XDfgBQ+TXkubYZJnTer9dQIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYTgzOWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1 YmRhOWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmHYmsrlwDQHEC3dI8RLP6TiZnEtw7kY5j208Fm5Bzzfpp+nESKNU4D txXsvG2lilckn30W5pst00XdnWsRK587T/dLUBX+ZlogCxrJ8qqDrBU9YEGnrJab IQuZHaIgJ01RDF0VbXzrS72mhzC3cxieh8vYNyWJHuSvymjp+2CepDbp7kJ5qkhI jX4qD6G6iy8GZQCiJn8SAkKbmer2w+evDqBKcTe2BNZdTAGqNaWy725NbOovcFes 7hua15xMpn0PoV7IKsjgagw0T49u4JJtAgdR7DEA84GvZseTXbx1g0fQMVElMxvF 5LcWqG5/GnGTkrAxNzbv7KqtM+Kcz9A= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:35 2026 by rpki-client