$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa File: 8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa (raw, json) Hash identifier: 2cXbJBl54AeQGOz4XYOw6N5vAz9I0N3R7hgwGW1U0S4= Subject key identifier: AA:43:86:16:2A:4E:D7:50:36:19:C5:02:F2:6A:65:2D:9A:3F:45:E1 Certificate issuer: /CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Certificate serial: 010D0C9F4328584D2644BD867575294B6EA66480 Authority key identifier: 8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 394026 IP address blocks: 199.20.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bd:86:75:75:29:4b:6e:a6:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47b922d5-eb8e-4028-aba8-2e282c0b5e76 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=091fbca6-22f1-46a2-96db-7638d55d1759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:39:aa:44:f0:19:86:65:3a:1a:8c:83:03: 3e:99:49:6a:f8:bf:e7:9e:ca:3d:28:6e:d1:b2:9d: 34:40:cb:a5:80:74:bf:81:22:a5:d7:5d:48:9c:e8: ba:0d:22:76:e3:c0:6a:c8:53:02:44:7e:78:9a:43: f5:3f:f5:c9:f5:b4:f9:56:69:07:12:1d:18:7a:a9: 7b:0a:c2:b0:53:87:59:e5:49:2e:06:75:5a:8b:b9: ac:61:ec:1f:03:82:39:10:2a:51:f4:86:e9:e6:59: 3b:39:95:61:35:23:4c:42:82:ea:f6:bd:51:7d:39: e1:0f:40:34:5a:34:a5:bb:5a:61:fb:99:ce:ed:e5: 0c:7f:69:89:05:40:df:1e:b6:b5:82:69:81:08:39: 81:66:48:2a:0e:58:bb:6b:36:a2:82:84:52:0f:a6: 90:a3:43:7a:d3:45:bf:d6:25:01:4d:79:a2:be:aa: b6:1d:69:8c:15:cc:aa:e5:f2:39:5c:c3:bb:c8:fc: d5:42:c4:9e:0a:37:9c:25:f2:e2:d6:85:80:6e:b4: b7:65:5a:f3:f5:81:68:21:3b:19:05:74:e5:fa:c1: 05:68:17:ce:37:c2:c3:68:ef:bf:80:8d:6f:d1:82: 61:c4:7e:53:f7:c0:6c:7e:24:88:32:d4:99:b5:79: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:86:16:2A:4E:D7:50:36:19:C5:02:F2:6A:65:2D:9A:3F:45:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/8c5b25f9-3fb5-366e-a54d-62c0481ec1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76/47b922d5-eb8e-4028-aba8-2e282c0b5e76.crl X509v3 Authority Key Identifier: keyid:8E:AA:E7:64:02:DD:B5:8A:49:AD:9D:83:8F:28:A9:A5:D6:B7:DC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/47b922d5-eb8e-4028-aba8-2e282c0b5e76.cer sbgp-ipAddrBlock: critical IPv4: 199.20.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bf:43:44:9a:95:a2:fb:f3:40:b4:96:28:17:07:a4:4f:ef: e6:b3:65:15:aa:19:73:ce:2f:be:01:3c:4d:f9:62:2c:9b:35: be:fa:5e:88:8b:c7:55:99:7b:f9:24:6e:35:0c:1e:90:e6:93: ec:a2:9e:10:11:52:f5:e3:fa:dc:54:c5:73:c3:c1:ad:6d:be: 3d:1a:25:d9:42:4f:65:c9:56:e7:78:d1:8b:3e:5a:bf:07:aa: fe:a5:ae:d0:03:c7:64:75:be:b6:85:93:25:04:2c:4e:b7:54: 0c:62:42:63:91:4e:02:b1:71:84:fa:ad:6a:d0:8f:e5:67:f8: 0c:a6:32:f4:a7:49:9e:f5:00:bb:e4:b7:a3:2d:32:37:81:f6: 2f:50:30:65:2d:3d:e1:e4:58:0e:ce:50:7c:0b:29:04:d0:4a: a2:38:5e:e7:bb:7c:21:f5:01:9c:e3:e5:ca:c0:d4:e9:d3:85: ae:81:35:fe:7e:fd:7d:60:14:3b:5a:11:c5:12:74:ea:88:8e: 96:87:c1:d0:9c:17:b6:80:6e:63:83:98:cd:54:b3:d5:e3:c9: 33:cd:6d:7e:32:b5:3f:16:86:1f:99:3f:95:bd:fe:c2:7e:b3: 65:02:67:32:f2:07:c8:eb:d4:66:88:1d:be:ee:b0:d8:37:89: 15:d0:95:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRL2GdXUpS26mZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdiOTIyZDUtZWI4ZS00MDI4LWFiYTgtMmUyODJjMGI1 ZTc2MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MDkxZmJjYTYtMjJmMS00NmEyLTk2ZGItNzYzOGQ1NWQxNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDA5qkTwGYZlOhqMgwM+mUlq+L/nnso9KG7R sp00QMulgHS/gSKl111InOi6DSJ248BqyFMCRH54mkP1P/XJ9bT5VmkHEh0Yeql7 CsKwU4dZ5UkuBnVai7msYewfA4I5ECpR9Ibp5lk7OZVhNSNMQoLq9r1RfTnhD0A0 WjSlu1ph+5nO7eUMf2mJBUDfHra1gmmBCDmBZkgqDli7azaigoRSD6aQo0N600W/ 1iUBTXmivqq2HWmMFcyq5fI5XMO7yPzVQsSeCjecJfLi1oWAbrS3ZVrz9YFoITsZ BXTl+sEFaBfON8LDaO+/gI1v0YJhxH5T98BsfiSIMtSZtXnmlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpDhhYqTtdQNhnFAvJqZS2aP0XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80N2I5 MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4MmMwYjVlNzYvOGM1YjI1ZjktM2ZiNS0z NjZlLWE1NGQtNjJjMDQ4MWVjMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDdiOTIyZDUtZWI4ZS00MDI4LWFi YTgtMmUyODJjMGI1ZTc2LzQ3YjkyMmQ1LWViOGUtNDAyOC1hYmE4LTJlMjgyYzBi NWU3Ni5jcmwwHwYDVR0jBBgwFoAUjqrnZALdtYpJrZ2Djyippda33J0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80N2I5MjJkNS1lYjhlLTQwMjgtYWJhOC0yZTI4 MmMwYjVlNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG/Q0SalaL780C0ligXB6RP7+azZRWqGXPOL74BPE35YiybNb76XoiL x1WZe/kkbjUMHpDmk+yinhARUvXj+txUxXPDwa1tvj0aJdlCT2XJVud40Ys+Wr8H qv6lrtADx2R1vraFkyUELE63VAxiQmORTgKxcYT6rWrQj+Vn+AymMvSnSZ71ALvk t6MtMjeB9i9QMGUtPeHkWA7OUHwLKQTQSqI4Xue7fCH1AZzj5crA1OnTha6BNf5+ /X1gFDtaEcUSdOqIjpaHwdCcF7aAbmODmM1Us9XjyTPNbX4ytT8Whh+ZP5W9/sJ+ s2UCZzLyB8jr1GaIHb7usNg3iRXQlWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:33:46 2026 by rpki-client