$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa File: a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa (raw, json) Hash identifier: tkdQJiU/uertajbwdBfrBkgKxlM17x/gYfI6Wr2s5JQ= Subject key identifier: 72:70:24:0E:44:41:FE:59:AC:E9:64:EE:65:CC:2F:08:5E:89:8C:B9 Certificate issuer: /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0 Certificate serial: 010D0C9F4328584D27FE85844BB5C54D06950BA0 Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa Signing time: Fri 13 Mar 2026 15:50:56 +0000 ROA not before: Fri 13 Mar 2026 15:50:56 +0000 ROA not after: Thu 11 Jun 2026 15:50:56 +0000 asID: 19366 IP address blocks: 199.101.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:fe:85:84:4b:b5:c5:4d:06:95:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0 Validity Not Before: Mar 13 15:50:56 2026 GMT Not After : Jun 11 15:50:56 2026 GMT Subject: CN=356ed167-9916-4059-8b9a-2cb4e04eb066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:9b:61:e7:58:0d:74:8a:51:8b:74:f0:27: 9c:de:bd:06:0c:59:55:21:d5:14:1f:3f:99:0d:66: ab:79:6b:e1:19:f3:b5:15:fd:9f:04:b3:8a:73:d9: 06:53:75:4c:f2:05:b1:e8:aa:77:7b:7b:86:24:40: 92:d1:2e:28:d2:1a:59:a7:4c:82:84:90:01:12:90: 7a:9b:88:14:36:db:e7:83:ed:66:c4:7a:43:a6:d8: dd:59:f1:d5:25:26:ee:0f:47:b9:90:b5:e4:6a:8b: 33:bd:7d:4f:3c:55:4f:db:37:9c:aa:be:36:f1:59: d1:03:0a:00:8c:9a:ea:54:43:6e:2b:61:08:80:a4: f1:af:99:b0:df:8a:40:d7:42:7c:6a:4a:9d:d7:36: 68:6e:0a:37:cf:f6:d7:58:12:69:b2:92:e4:73:a9: 18:aa:c3:ea:81:65:c6:2d:02:25:1b:62:29:96:0c: 98:79:a7:af:ab:e1:ec:98:94:af:6c:4b:72:6b:3f: eb:21:1f:61:75:b4:0f:85:67:ce:56:2b:bf:93:bd: 1a:76:ea:84:12:01:9e:be:0d:11:4b:d5:56:ce:3c: 99:00:b0:e2:24:af:0d:e1:3b:82:29:84:46:cb:ad: 0d:c0:d0:cd:5b:20:fb:46:58:45:c3:3b:41:23:85: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:70:24:0E:44:41:FE:59:AC:E9:64:EE:65:CC:2F:08:5E:89:8C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/a9125f24-a2e6-31cb-b0f0-be714acbd21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl X509v3 Authority Key Identifier: keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer sbgp-ipAddrBlock: critical IPv4: 199.101.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:eb:d5:06:ec:d3:77:c4:00:1a:e1:cb:bd:58:51:1f:7b:dd: 00:3a:eb:52:a3:fa:7c:31:13:25:2f:3d:96:2b:dd:44:82:70: 1d:73:26:87:57:53:f8:23:da:f8:3d:3e:5e:ae:92:9e:72:ca: 57:c2:f6:e5:df:5f:cd:3b:91:5a:33:2a:ae:a9:67:72:41:25: 58:b1:a9:f0:43:4d:cf:30:cc:a4:18:1b:5d:07:9a:c1:be:d3: 9c:19:c4:a4:70:6e:db:1f:e0:7a:39:1a:82:bc:9f:69:fb:b9: 97:60:51:22:4e:36:64:82:68:93:49:1f:d2:7f:c2:ea:25:97: 3f:45:31:37:d6:69:cb:07:1d:8b:aa:29:67:a6:af:95:76:32: 69:0b:cb:c7:05:68:53:cc:c1:8c:cc:f9:9c:21:55:c5:b4:bb: a1:1e:06:ae:0c:11:c9:6a:2d:7f:e3:79:70:6f:94:7c:b6:3e: 35:11:1d:69:c6:c2:06:75:33:d2:9b:a4:d0:9c:02:13:94:a0: 74:f3:cb:d9:04:95:05:24:89:dc:e3:7e:54:ad:29:5f:76:ec: 97:ad:1d:35:ad:41:ef:90:ff:47:74:74:8b:a1:61:79:41:35: 44:a7:e9:e7:8e:2d:83:ba:3c:cd:4e:c8:47:ce:94:9f:4d:35: db:b7:40:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0n/oWES7XFTQaVC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM1ZjdlNzYtYjJjNS00ZjIwLWI1M2UtMjQzNGNkZWRj MmMwMB4XDTI2MDMxMzE1NTA1NloXDTI2MDYxMTE1NTA1NlowLzEtMCsGA1UEAxMk MzU2ZWQxNjctOTkxNi00MDU5LThiOWEtMmNiNGUwNGViMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IqbYedYDXSKUYt08Cec3r0GDFlVIdUUHz+Z DWareWvhGfO1Ff2fBLOKc9kGU3VM8gWx6Kp3e3uGJECS0S4o0hpZp0yChJABEpB6 m4gUNtvng+1mxHpDptjdWfHVJSbuD0e5kLXkaoszvX1PPFVP2zecqr428VnRAwoA jJrqVENuK2EIgKTxr5mw34pA10J8akqd1zZobgo3z/bXWBJpspLkc6kYqsPqgWXG LQIlG2IplgyYeaevq+HsmJSvbEtyaz/rIR9hdbQPhWfOViu/k70aduqEEgGevg0R S9VWzjyZALDiJK8N4TuCKYRGy60NwNDNWyD7RlhFwztBI4VgmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJwJA5EQf5ZrOlk7mXMLwheiYy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YzVm N2U3Ni1iMmM1LTRmMjAtYjUzZS0yNDM0Y2RlZGMyYzAvYTkxMjVmMjQtYTJlNi0z MWNiLWIwZjAtYmU3MTRhY2JkMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGM1ZjdlNzYtYjJjNS00ZjIwLWI1 M2UtMjQzNGNkZWRjMmMwLzhjNWY3ZTc2LWIyYzUtNGYyMC1iNTNlLTI0MzRjZGVk YzJjMC5jcmwwHwYDVR0jBBgwFoAU+yDD2WHD3BHpXpEcASQ0LwtHlcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YzVmN2U3Ni1iMmM1LTRmMjAtYjUzZS0yNDM0 Y2RlZGMyYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2XwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbr1Qbs03fEABrhy71YUR973QA661Kj+nwxEyUvPZYr3USCcB1zJodX U/gj2vg9Pl6ukp5yylfC9uXfX807kVozKq6pZ3JBJVixqfBDTc8wzKQYG10HmsG+ 05wZxKRwbtsf4Ho5GoK8n2n7uZdgUSJONmSCaJNJH9J/wuollz9FMTfWacsHHYuq KWemr5V2MmkLy8cFaFPMwYzM+ZwhVcW0u6EeBq4MEclqLX/jeXBvlHy2PjURHWnG wgZ1M9KbpNCcAhOUoHTzy9kElQUkidzjflStKV927JetHTWtQe+Q/0d0dIuhYXlB NUSn6eeOLYO6PM1OyEfOlJ9NNdu3QEs= -----END CERTIFICATE-----Generated at Thu Mar 26 03:23:36 2026 by rpki-client