$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa File: dc4b07de-971f-380d-8210-c351918b260b.roa (raw, json) Hash identifier: OE+ZhKsI+gELtxs7UOuqFpJHBMqAphjvvI1VDxiMamY= Subject key identifier: 7A:E4:15:A4:EF:BD:BD:E3:D5:5D:2D:68:2F:4E:71:BE:FE:9A:79:93 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584D09126881F813434EEC8BB140 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 26512 IP address blocks: 199.119.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:68:81:f8:13:43:4e:ec:8b:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=4655d956-6cb2-4c30-bf56-8d8ba31a557e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:76:b7:61:db:7f:ed:30:12:f8:5e:9d:d2: 2e:8b:78:62:e7:84:ba:f1:90:b9:46:a6:05:77:42: 8c:c4:f1:ff:9f:5a:c6:58:78:99:07:60:30:67:5a: 90:c6:5a:46:c2:34:88:71:a0:4e:d1:b7:b8:65:c3: 6c:31:9d:10:77:17:95:47:43:89:2e:b8:7c:9f:33: 0f:37:f2:1f:54:a2:0e:e1:20:c5:dc:3d:bf:ec:2a: 84:3a:ae:10:69:3e:3e:54:7e:39:0b:e4:7b:4e:a7: 5e:98:01:4a:90:c9:01:96:67:c0:f4:14:e8:15:ec: b3:e1:69:ea:85:45:73:cb:2b:b1:aa:e3:ac:13:f3: d8:f4:50:cd:55:9e:94:48:58:7a:98:c9:05:0e:bf: 4c:ef:80:eb:a1:f9:63:1c:ab:0f:ed:08:08:05:9d: da:23:90:79:e9:a6:5a:1e:af:e9:09:cf:fc:48:17: 9c:b5:f9:bc:11:12:0d:bd:54:3f:d9:73:ce:0b:eb: 79:3a:a5:bc:30:b3:62:5b:ad:34:b5:ef:b8:3b:be: a5:45:d5:8a:b8:bb:1d:4b:96:23:b5:82:1c:12:36: c3:5b:52:98:6b:99:ee:0a:2b:c0:70:d6:56:b4:3f: 10:85:f1:09:63:aa:9e:d3:d1:6a:f5:6c:88:6e:36: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E4:15:A4:EF:BD:BD:E3:D5:5D:2D:68:2F:4E:71:BE:FE:9A:79:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/dc4b07de-971f-380d-8210-c351918b260b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 199.119.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:16:5f:e0:a9:15:ce:a5:40:91:7e:c4:29:ef:f9:77:39:d1: 07:1c:39:76:e2:1a:76:13:eb:57:db:55:81:92:bb:e7:05:0b: c4:bc:1d:c4:ce:1a:13:bc:9c:5b:b6:fa:a0:70:52:91:28:a8: 2e:1f:3c:af:46:01:c0:f8:ad:ae:d3:98:68:13:86:9a:89:60: 0c:0d:51:0e:7b:f4:db:8f:84:0a:34:4d:77:52:2f:dd:cc:80: a9:ba:b4:59:f2:41:11:fd:77:d3:66:34:06:2e:1d:07:ad:e7: bd:13:08:f8:84:93:17:95:ec:51:59:75:27:23:79:2c:98:c6: 24:cd:63:ba:ce:03:82:c5:e0:30:52:fd:7c:99:ef:e5:b2:22: 6e:a4:c1:5d:f5:52:87:67:0d:e3:24:e0:7a:27:51:de:e1:e5: 6e:88:96:05:f5:a1:16:0c:b9:86:77:36:ed:1d:b3:2f:fc:32: a3:3b:67:89:32:ed:02:8b:8e:a9:33:a1:c3:af:18:f6:06:00: 40:4b:65:17:a5:42:42:01:86:74:28:ca:21:45:79:92:f1:a8: c7:60:fa:80:b1:be:cc:75:59:2b:43:d0:40:9d:5d:fe:9e:a6: 53:79:d0:c8:59:a5:9c:b7:dd:8a:c5:a8:2d:d4:0f:95:84:1c: c6:07:ba:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmiB+BNDTuyLsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDY1NWQ5NTYtNmNiMi00YzMwLWJmNTYtOGQ4YmEzMWE1NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiF2t2Hbf+0wEvhendIui3hi54S68ZC5RqYF d0KMxPH/n1rGWHiZB2AwZ1qQxlpGwjSIcaBO0be4ZcNsMZ0QdxeVR0OJLrh8nzMP N/IfVKIO4SDF3D2/7CqEOq4QaT4+VH45C+R7TqdemAFKkMkBlmfA9BToFeyz4Wnq hUVzyyuxquOsE/PY9FDNVZ6USFh6mMkFDr9M74DrofljHKsP7QgIBZ3aI5B56aZa Hq/pCc/8SBectfm8ERINvVQ/2XPOC+t5OqW8MLNiW600te+4O76lRdWKuLsdS5Yj tYIcEjbDW1KYa5nuCivAcNZWtD8QhfEJY6qe09Fq9WyIbjabPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrkFaTvvb3j1V0taC9Ocb7+mnmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvZGM0YjA3ZGUtOTcxZi0z ODBkLTgyMTAtYzM1MTkxOGIyNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUWX+CpFc6lQJF+xCnv+Xc50QccOXbiGnYT61fbVYGSu+cFC8S8HcTO GhO8nFu2+qBwUpEoqC4fPK9GAcD4ra7TmGgThpqJYAwNUQ579NuPhAo0TXdSL93M gKm6tFnyQRH9d9NmNAYuHQet570TCPiEkxeV7FFZdScjeSyYxiTNY7rOA4LF4DBS /XyZ7+WyIm6kwV31UodnDeMk4HonUd7h5W6IlgX1oRYMuYZ3Nu0dsy/8MqM7Z4ky 7QKLjqkzocOvGPYGAEBLZRelQkIBhnQoyiFFeZLxqMdg+oCxvsx1WStD0ECdXf6e plN50MhZpZy33YrFqC3UD5WEHMYHuvY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:02 2026 by rpki-client