$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa File: 8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa (raw, json) Hash identifier: S73UgtgjYunYUt2Yn9ivWN3BLSwo7g/VrJ+yoLMcdGw= Subject key identifier: D1:92:4B:1A:98:4B:19:74:3E:DA:65:9D:0C:13:73:E1:01:38:38:13 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584D091268A421791FC20D186680 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 26512 IP address blocks: 199.119.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:68:a4:21:79:1f:c2:0d:18:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=c76a5552-86df-41e2-82ae-3509e56b5861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:42:1b:be:36:3f:16:6b:89:a8:f2:69:c6: 03:2f:4b:02:15:74:d0:4b:6a:ff:54:1c:b7:99:19: cb:06:41:d6:25:65:9c:c7:f3:8b:22:05:96:7b:c5: 7a:ee:70:70:a4:44:17:77:fc:fc:f1:72:de:91:6e: 33:ad:59:03:05:4f:7c:bb:77:b1:b8:30:06:66:82: a8:50:61:6c:6f:fe:c6:1c:79:46:d9:62:40:9b:25: ad:a2:f2:cd:e4:72:5a:80:4d:b0:af:b7:58:42:84: fd:e7:73:51:2c:0d:90:b9:16:d2:70:9e:ee:85:f1: b2:f6:7d:b9:63:61:37:d5:ff:82:83:15:cc:f2:f3: 3c:2c:1c:d3:4a:73:d3:d3:69:08:0f:2d:2d:f6:24: 9f:1e:43:81:4c:21:ec:ba:d5:01:34:36:46:d1:75: cd:59:82:04:82:5c:b1:eb:c3:69:91:df:ba:40:35: 8c:5f:01:ed:fc:fc:1e:d1:d1:01:5a:e8:db:04:db: c6:90:8c:e0:86:e2:2f:3f:f4:eb:93:99:4b:fb:1f: e2:82:b3:65:79:92:fc:17:c3:69:0f:27:e9:92:5a: ab:3d:9e:a5:23:10:7c:d5:84:73:bf:be:6b:41:1f: d5:63:b7:81:71:58:6b:61:56:ae:b1:04:66:fd:85: 66:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:92:4B:1A:98:4B:19:74:3E:DA:65:9D:0C:13:73:E1:01:38:38:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:43:a9:26:15:d9:da:94:07:f2:3a:d9:82:a7:f8:79:3d:80: aa:19:ab:b0:8b:4c:13:7e:e9:3e:b8:09:f2:0e:c4:50:5f:4c: 00:86:c8:26:ad:fe:01:22:5e:8e:d1:87:e5:0b:f4:a0:28:32: 06:db:41:7d:bf:58:73:91:00:44:fe:44:72:fd:cf:26:f4:66: 09:53:f1:a6:d7:45:79:f8:45:86:d6:a7:69:ca:cd:f6:b6:90: 38:99:63:08:cb:af:e0:90:a7:d2:dd:1a:2d:c8:f9:9a:cc:c1: 64:76:4b:56:da:a4:f6:ae:b9:9f:33:3c:35:d7:b2:d8:f8:75: d5:b6:23:11:57:ba:7b:1d:19:01:47:fd:4c:e8:b9:6f:57:38: 8b:69:f0:60:08:23:ff:8f:2f:2d:37:c4:89:18:c6:b7:43:44: c3:82:e6:99:22:f0:3d:f6:6b:ce:e6:a9:6c:02:05:d0:e4:f7: 82:23:84:9d:18:c7:06:62:b8:b8:59:f7:85:40:7b:d5:22:29: d7:81:9e:5b:7c:5a:0b:44:34:38:b0:9c:dc:83:c1:f8:c6:b3: 99:9a:33:1c:31:e6:1f:74:a7:1d:c5:9e:d2:c4:60:d8:5a:1b: 9d:12:57:8f:e8:a0:45:82:8d:44:97:8f:63:53:2c:90:8f:6e: 3e:81:86:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmikIXkfwg0YZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Yzc2YTU1NTItODZkZi00MWUyLTgyYWUtMzUwOWU1NmI1ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV5CG742PxZriajyacYDL0sCFXTQS2r/VBy3 mRnLBkHWJWWcx/OLIgWWe8V67nBwpEQXd/z88XLekW4zrVkDBU98u3exuDAGZoKo UGFsb/7GHHlG2WJAmyWtovLN5HJagE2wr7dYQoT953NRLA2QuRbScJ7uhfGy9n25 Y2E31f+CgxXM8vM8LBzTSnPT02kIDy0t9iSfHkOBTCHsutUBNDZG0XXNWYIEglyx 68Npkd+6QDWMXwHt/Pwe0dEBWujbBNvGkIzghuIvP/Trk5lL+x/igrNleZL8F8Np DyfpklqrPZ6lIxB81YRzv75rQR/VY7eBcVhrYVausQRm/YVmNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGSSxqYSxl0PtplnQwTc+EBODgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvOGQ0OTU4NWMtMDc4YS0z ZWFlLWExZDctN2M0NzliZjM1YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZDqSYV2dqUB/I62YKn+Hk9gKoZq7CLTBN+6T64CfIOxFBfTACGyCat /gEiXo7Rh+UL9KAoMgbbQX2/WHORAET+RHL9zyb0ZglT8abXRXn4RYbWp2nKzfa2 kDiZYwjLr+CQp9LdGi3I+ZrMwWR2S1bapPauuZ8zPDXXstj4ddW2IxFXunsdGQFH /UzouW9XOItp8GAII/+PLy03xIkYxrdDRMOC5pki8D32a87mqWwCBdDk94IjhJ0Y xwZiuLhZ94VAe9UiKdeBnlt8WgtENDiwnNyDwfjGs5maMxwx5h90px3FntLEYNha G50SV4/ooEWCjUSXj2NTLJCPbj6Bhv4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:24 2026 by rpki-client