$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: DgwGH5uRe8rHPWdncO4oUJdouPor4RQ0R0sDf8fg+1c= Subject key identifier: 2F:BA:6F:8B:1B:AC:D5:34:2A:A7:FA:2D:C5:15:9E:66:FE:2B:48:37 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584D40CA5E022FCB438FC54E7680 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5e:02:2f:cb:43:8f:c5:4e:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=9b0e0dbb-cd31-4f14-9c7d-2d68d6c8b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:bc:58:87:ab:89:00:b0:b3:a5:8c:09:30: 27:d8:2f:38:dd:aa:a1:bd:f8:4b:80:a7:00:3e:79: 26:80:2d:09:99:99:36:69:40:1d:f0:84:79:83:f2: 18:69:5a:67:53:db:78:c2:5f:29:9c:44:b8:b6:8e: c8:b7:c9:8f:50:ad:7f:bb:6a:94:30:e0:6f:01:88: cb:57:76:2f:74:09:d5:70:f5:26:d3:36:e1:03:05: 8e:92:b0:00:30:ff:86:38:0c:b4:e6:a8:59:fe:5e: 7f:56:ab:a9:40:a7:ec:1c:70:62:3c:dd:69:d7:22: 2a:e0:2c:6e:6c:e7:66:d2:f1:a9:4c:77:0e:21:59: 81:e0:ab:3b:ea:15:3a:7f:2b:60:15:40:d7:62:16: 5f:7a:cb:00:9b:59:ff:76:dd:22:d5:64:d7:9d:5f: 55:81:dd:9a:e9:65:e6:64:e8:b3:bc:32:a0:18:6a: 1d:29:2d:23:bf:33:07:d4:06:08:cf:79:9f:4e:bc: 50:77:3c:9e:11:7e:8b:87:e4:f6:af:90:37:4d:4a: 8b:a0:f4:de:cf:10:09:b3:c9:1b:e7:70:59:b7:b3: 29:ce:bf:fd:21:d8:9b:6a:3a:5a:b0:ad:40:29:fd: b9:28:14:3f:76:80:82:f6:6a:ed:33:0b:66:1d:a7: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BA:6F:8B:1B:AC:D5:34:2A:A7:FA:2D:C5:15:9E:66:FE:2B:48:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:15:0c:60:f2:c4:a7:3c:04:85:ad:86:30:7a:4f:0e:62:7c: 4d:90:d8:b4:88:23:fe:6b:22:be:54:51:52:32:bd:d7:03:bb: 96:f0:a5:6d:fb:0e:80:9b:ed:93:6d:d8:78:a7:71:c8:fb:e3: a9:a9:2f:b8:7b:aa:af:68:dd:b4:0c:9a:67:be:13:34:2a:6e: 17:bd:3a:5b:45:59:08:6d:b5:ed:09:35:96:2c:6b:9a:8f:64: e3:97:b1:79:bc:53:b2:39:14:c7:12:77:73:37:ce:69:b8:fd: be:ad:b0:af:d0:86:bc:e2:6a:f1:61:fc:36:c5:fb:d1:ba:ee: 52:3f:a5:a8:4e:7f:f4:82:f5:e5:23:dc:7a:30:a4:84:cd:10: 7e:72:16:29:f7:23:59:d4:e6:73:7b:da:6c:50:0c:34:89:dd: 62:71:4e:12:f0:8e:d3:21:43:2f:39:a7:4a:8c:86:6a:f4:a9: 08:18:30:bd:65:65:c6:c6:4a:c6:7f:a2:e5:3b:aa:c5:1c:21: a1:a0:46:46:b7:c1:d0:3f:be:20:d2:c5:a7:d6:0b:4c:b5:3e: 87:03:2d:67:3b:b3:46:59:6d:8c:59:ef:3d:3a:1d:41:2d:ee: 81:5f:3c:a3:0d:cb:f7:d6:5c:2a:b8:c3:53:51:19:7f:6e:d5: 4c:df:ee:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayl4CL8tDj8VOdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OWIwZTBkYmItY2QzMS00ZjE0LTljN2QtMmQ2OGQ2YzhiNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8+8WIeriQCws6WMCTAn2C843aqhvfhLgKcA PnkmgC0JmZk2aUAd8IR5g/IYaVpnU9t4wl8pnES4to7It8mPUK1/u2qUMOBvAYjL V3YvdAnVcPUm0zbhAwWOkrAAMP+GOAy05qhZ/l5/VqupQKfsHHBiPN1p1yIq4Cxu bOdm0vGpTHcOIVmB4Ks76hU6fytgFUDXYhZfessAm1n/dt0i1WTXnV9Vgd2a6WXm ZOizvDKgGGodKS0jvzMH1AYIz3mfTrxQdzyeEX6Lh+T2r5A3TUqLoPTezxAJs8kb 53BZt7Mpzr/9IdibajpasK1AKf25KBQ/doCC9mrtMwtmHafP6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+6b4sbrNU0Kqf6LcUVnmb+K0g3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYVDGDyxKc8BIWthjB6Tw5ifE2Q2LSII/5rIr5UUVIyvdcDu5bwpW37 DoCb7ZNt2Hinccj746mpL7h7qq9o3bQMmme+EzQqbhe9OltFWQhtte0JNZYsa5qP ZOOXsXm8U7I5FMcSd3M3zmm4/b6tsK/QhrziavFh/DbF+9G67lI/pahOf/SC9eUj 3HowpITNEH5yFin3I1nU5nN72mxQDDSJ3WJxThLwjtMhQy85p0qMhmr0qQgYML1l ZcbGSsZ/ouU7qsUcIaGgRka3wdA/viDSxafWC0y1PocDLWc7s0ZZbYxZ7z06HUEt 7oFfPKMNy/fWXCq4w1NRGX9u1Uzf7nM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:23 2026 by rpki-client