$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/9d9939e1-e7c3-3ea6-a720-303f759b790e.roa File: 9d9939e1-e7c3-3ea6-a720-303f759b790e.roa (raw, json) Hash identifier: /qHxk90EYlqyb1qPq/EY7Yi6C77EBhEeXwnPZK0TA4I= Subject key identifier: 40:CA:D0:D2:4B:C6:5A:7D:0A:8E:38:5D:62:1E:56:07:D1:B4:66:A8 Certificate issuer: /CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Certificate serial: 010D0C9F4328584D19B4D2B3475162CD6EB8C880 Authority key identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/9d9939e1-e7c3-3ea6-a720-303f759b790e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 376 IP address blocks: 199.180.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d2:b3:47:51:62:cd:6e:b8:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=1971bc31-fbdd-43ee-a7f0-9208745c9a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:27:c4:e0:05:8c:da:d8:6b:43:43:0a:e2: 05:7f:51:1e:2a:f3:8e:28:3b:12:2c:6a:44:11:b9: 0d:48:42:ed:ab:9c:96:a2:b4:5c:c9:9d:6b:14:da: 20:94:50:eb:5c:00:b5:e7:39:ba:14:64:99:80:d2: 58:71:4c:d1:e8:42:11:e9:24:57:38:da:10:87:a5: c5:b8:8e:9b:60:c0:08:53:e1:ff:e6:aa:4e:54:60: 74:29:2c:3d:73:44:c6:85:3b:45:21:80:f5:4d:05: 0f:5a:7e:bd:71:e9:7e:cc:ad:db:10:b0:d1:58:af: 66:3c:5a:18:2a:6b:a1:90:c4:cc:25:41:d6:f6:7f: 65:04:40:54:b4:db:48:c8:b8:fe:26:de:db:74:dd: 60:8a:46:c2:60:7d:94:2f:a2:d6:1f:99:b2:66:b5: b3:9f:45:45:ab:8b:fb:b2:b6:c9:ef:bb:6b:bc:67: 46:f8:06:26:d4:bd:ab:7f:21:f9:32:4f:66:7a:2b: fa:37:42:ac:22:91:2f:92:5a:5b:cb:26:18:46:b5: da:af:e6:92:6a:a6:95:db:f2:d9:aa:bd:e4:ee:f6: ca:67:8a:1f:77:de:4b:fa:e6:55:70:6e:62:bb:c8: da:fd:5d:59:a0:d7:24:c3:d2:23:a9:39:c0:9b:eb: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:D0:D2:4B:C6:5A:7D:0A:8E:38:5D:62:1E:56:07:D1:B4:66:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/9d9939e1-e7c3-3ea6-a720-303f759b790e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl X509v3 Authority Key Identifier: keyid:7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer sbgp-ipAddrBlock: critical IPv4: 199.180.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6c:cd:75:99:89:4c:70:1c:96:d1:9f:e5:68:17:e5:c7:1a: 81:20:cb:76:99:82:1b:9e:11:0a:a1:55:2e:59:ba:51:f9:b5: cd:c7:fb:60:56:7a:39:db:f1:ee:90:d8:04:76:5a:cb:5d:3c: d9:54:48:0f:bb:35:10:0c:e7:ea:c0:37:cf:eb:53:db:56:dd: c1:c7:e9:32:59:36:2f:6e:05:5e:52:47:7e:e0:ea:6e:7f:b5: ea:9a:dd:57:2a:75:2d:19:5f:ac:a9:ac:93:c5:8b:1f:39:74: 93:56:95:8a:db:70:1f:a8:a2:06:b8:5d:25:aa:c0:2e:78:95: 1e:a1:93:ac:ad:93:7d:3a:6d:44:b0:e3:e4:6b:85:aa:be:42: 11:4e:db:90:e1:63:22:78:b4:fc:e7:b4:f8:9e:6a:b1:99:91: 01:33:c3:84:c5:9c:f2:3c:27:8e:60:f0:17:28:1c:f5:ff:32: fe:17:70:e0:3e:42:30:b6:53:b2:81:f7:82:84:ce:7f:e8:2a: 97:c4:e0:ae:8b:69:41:53:72:12:34:0d:9b:1c:6d:84:dc:f4: b8:7c:ee:1d:b3:38:3a:0d:00:b4:e6:59:0c:fd:ec:45:4f:86: cf:ff:46:4b:14:37:b1:a6:89:11:30:5f:bd:2a:f8:e7:5b:78: 80:f2:88:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNKzR1FizW64yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4MzQtNTc0ZTliYjJl ODJkMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MTk3MWJjMzEtZmJkZC00M2VlLWE3ZjAtOTIwODc0NWM5YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbknxOAFjNrYa0NDCuIFf1EeKvOOKDsSLGpE EbkNSELtq5yWorRcyZ1rFNoglFDrXAC15zm6FGSZgNJYcUzR6EIR6SRXONoQh6XF uI6bYMAIU+H/5qpOVGB0KSw9c0TGhTtFIYD1TQUPWn69cel+zK3bELDRWK9mPFoY KmuhkMTMJUHW9n9lBEBUtNtIyLj+Jt7bdN1gikbCYH2UL6LWH5myZrWzn0VFq4v7 srbJ77trvGdG+AYm1L2rfyH5Mk9meiv6N0KsIpEvklpbyyYYRrXar+aSaqaV2/LZ qr3k7vbKZ4ofd95L+uZVcG5iu8ja/V1ZoNckw9IjqTnAm+uxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDK0NJLxlp9Co44XWIeVgfRtGaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZTFi YzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJiMmU4MmQvOWQ5OTM5ZTEtZTdjMy0z ZWE2LWE3MjAtMzAzZjc1OWI3OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4 MzQtNTc0ZTliYjJlODJkL2RlMWJjODBmLTVkNTctNGI5Ni04ODM0LTU3NGU5YmIy ZTgyZC5jcmwwHwYDVR0jBBgwFoAUe28mCpExx7ylAoEKwNq9qG9EUbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRl OWJiMmU4MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7Q0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFszXWZiUxwHJbRn+VoF+XHGoEgy3aZghueEQqhVS5ZulH5tc3H+2BW ejnb8e6Q2AR2WstdPNlUSA+7NRAM5+rAN8/rU9tW3cHH6TJZNi9uBV5SR37g6m5/ teqa3VcqdS0ZX6yprJPFix85dJNWlYrbcB+ooga4XSWqwC54lR6hk6ytk306bUSw 4+Rrhaq+QhFO25DhYyJ4tPzntPiearGZkQEzw4TFnPI8J45g8BcoHPX/Mv4XcOA+ QjC2U7KB94KEzn/oKpfE4K6LaUFTchI0DZscbYTc9Lh87h2zODoNALTmWQz97EVP hs//RksUN7GmiREwX70q+OdbeIDyiBg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:24 2026 by rpki-client