$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa File: 50a98511-3c5a-3722-9533-7e6dc0d97e76.roa (raw, json) Hash identifier: QjPXEfBt2kgOI+aQl/QUMpyWQ/58hWrW0TYPkYOZJC0= Subject key identifier: 55:23:A7:FC:A7:7E:6F:78:32:26:63:7D:75:C3:1C:80:83:86:FD:A5 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584D091268B68CA3810E84CCF640 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 26512 IP address blocks: 199.119.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:68:b6:8c:a3:81:0e:84:cc:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=0dc80302-2da6-45bd-9ce2-7ef30ececac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:af:7c:26:0d:0e:cf:ce:8e:65:cb:ba:4d: aa:a7:d6:2a:22:0b:4e:a9:0a:20:3b:5d:20:27:af: 09:0c:44:ae:94:40:a1:70:ce:94:7c:b3:5a:f3:52: ba:07:66:12:f4:61:c8:96:e6:01:7c:86:c7:44:98: d0:42:09:2f:e2:3e:8f:46:93:e2:1c:e0:3e:75:aa: 7c:f2:c1:a0:58:fd:79:46:c4:17:aa:47:e0:6b:6d: 2c:ed:dc:33:2c:fb:b0:9e:83:20:88:d5:e5:35:1c: b7:7a:52:05:a3:0f:cb:f5:6b:30:ce:9c:8d:61:05: 44:4e:e4:23:3f:57:f9:9c:91:31:1d:af:f8:d7:c0: 88:d9:5a:6a:77:af:d0:00:ff:19:6c:38:30:8e:d7: bb:45:fd:bd:15:5a:a1:e7:ce:18:b4:87:62:17:fd: 7d:a5:b3:9b:3b:05:b7:64:15:e4:5d:b5:46:87:27: fe:ce:ab:d2:a1:32:70:c3:44:ae:a9:ca:65:96:b5: ef:39:4d:01:49:fa:4a:10:1f:37:81:23:7e:2b:23: 5d:a0:50:d7:e1:92:11:28:6a:d7:14:7c:cd:28:ba: 42:b9:f2:86:58:eb:72:5f:90:98:47:d3:4d:89:48: 00:9f:f0:45:3c:3e:7c:ec:d2:ac:df:f8:2e:f1:f7: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:23:A7:FC:A7:7E:6F:78:32:26:63:7D:75:C3:1C:80:83:86:FD:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/50a98511-3c5a-3722-9533-7e6dc0d97e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8d:2a:60:56:de:48:37:14:f2:c5:ce:29:e7:f7:3f:eb:e4: a4:06:4b:ea:db:7a:a1:27:a1:76:8f:46:30:1c:77:28:54:8f: f9:03:e0:6e:f6:0a:18:7e:40:4b:a9:35:c3:76:50:78:51:fd: f5:32:3c:b2:43:e7:24:7a:e2:96:0d:86:3f:95:e6:b4:ff:d7: 26:14:20:39:bf:57:b4:fc:93:39:54:2b:47:4f:78:7e:53:eb: 19:4d:e3:e5:29:48:1b:5f:ca:dc:c2:aa:1e:b4:c9:7e:d1:93: d5:e0:7c:52:5b:43:c6:6c:46:f3:b7:86:96:d1:13:13:d1:a5: 65:30:3d:db:4e:0c:df:d0:23:15:3e:2b:9e:7d:24:9f:c8:5e: 1c:21:1b:63:88:8a:80:ec:53:02:3d:84:56:3b:16:24:a7:21: 32:b4:b2:08:a5:43:c5:72:7b:4d:08:68:7d:46:fd:5b:90:86: 5f:3b:d2:64:2b:ec:49:b6:e0:9a:a1:21:2f:b1:96:8f:12:d0: 5f:ad:a0:7f:2f:63:54:cd:fd:55:1e:a1:5b:e1:a6:ad:dd:dd: 52:49:df:9e:00:dc:19:13:24:cb:ce:45:97:de:66:01:31:24: 55:4e:8b:a5:b7:57:58:31:35:2a:0a:d1:e7:88:3e:96:86:17: 18:ae:e3:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmi2jKOBDoTM9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGRjODAzMDItMmRhNi00NWJkLTljZTItN2VmMzBlY2VjYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16uvfCYNDs/OjmXLuk2qp9YqIgtOqQogO10g J68JDESulEChcM6UfLNa81K6B2YS9GHIluYBfIbHRJjQQgkv4j6PRpPiHOA+dap8 8sGgWP15RsQXqkfga20s7dwzLPuwnoMgiNXlNRy3elIFow/L9WswzpyNYQVETuQj P1f5nJExHa/418CI2Vpqd6/QAP8ZbDgwjte7Rf29FVqh584YtIdiF/19pbObOwW3 ZBXkXbVGhyf+zqvSoTJww0SuqcpllrXvOU0BSfpKEB83gSN+KyNdoFDX4ZIRKGrX FHzNKLpCufKGWOtyX5CYR9NNiUgAn/BFPD587NKs3/gu8femrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUjp/ynfm94MiZjfXXDHICDhv2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvNTBhOTg1MTEtM2M1YS0z NzIyLTk1MzMtN2U2ZGMwZDk3ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6NKmBW3kg3FPLFzinn9z/r5KQGS+rbeqEnoXaPRjAcdyhUj/kD4G72 Chh+QEupNcN2UHhR/fUyPLJD5yR64pYNhj+V5rT/1yYUIDm/V7T8kzlUK0dPeH5T 6xlN4+UpSBtfytzCqh60yX7Rk9XgfFJbQ8ZsRvO3hpbRExPRpWUwPdtODN/QIxU+ K559JJ/IXhwhG2OIioDsUwI9hFY7FiSnITK0sgilQ8Vye00IaH1G/VuQhl870mQr 7Em24JqhIS+xlo8S0F+toH8vY1TN/VUeoVvhpq3d3VJJ354A3BkTJMvORZfeZgEx JFVOi6W3V1gxNSoK0eeIPpaGFxiu45M= -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:15 2026 by rpki-client