$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa File: d0fcc039-2f32-343e-aa66-e2094066ddfc.roa (raw, json) Hash identifier: QIVtbISZ+4s79PvoSZSglTZvrdCSN0mOPu1WC4Lemno= Subject key identifier: 66:DA:E9:9E:D5:CB:86:7C:71:F9:CA:5E:37:20:4F:60:B4:A5:2F:03 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584D4A8F9FC78F0E8F5916CF2E60 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 394353 IP address blocks: 199.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9f:c7:8f:0e:8f:59:16:cf:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=eadd15ad-77da-4a53-9cd6-4bc64c2b0f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:62:7f:bc:ab:45:e4:6f:b6:9e:92:a0:9b: aa:5a:7f:0d:21:79:39:97:d7:dd:17:a0:67:c6:34: a4:a3:36:14:3c:54:d4:17:6d:23:a8:74:a9:3d:cf: c4:69:d8:19:77:f8:73:dd:aa:d0:85:b1:d5:0d:7a: 5d:9f:f2:63:1d:ca:36:ff:a1:23:98:89:cb:0a:00: e6:9f:eb:02:32:cd:61:98:6e:1f:37:65:d5:76:b7: 97:51:b2:03:ec:70:7b:71:34:c5:b6:4e:bd:c3:4b: 31:5b:f7:ab:ac:b9:ab:47:93:64:1e:63:b9:dc:9c: ac:26:e8:1f:44:e1:f7:6b:8f:23:25:39:96:e8:c6: 86:4e:7f:71:67:1d:b1:fe:f5:03:2a:4d:54:dd:61: 7d:82:35:fd:59:9a:25:d8:4a:57:69:c0:65:ae:ae: 9d:a3:22:19:a2:b7:fe:d0:57:e9:46:d9:b2:ca:c4: a7:60:e4:66:0c:6c:d1:6a:1c:78:fe:5a:67:fc:58: 31:ac:7d:5e:8d:05:9b:6a:4b:45:b6:4c:56:d7:d9: 6d:60:68:54:fd:a7:9c:b0:67:2e:b5:ad:25:e0:ed: e1:b9:aa:76:ef:77:1c:8e:79:27:d0:c5:83:51:ac: 39:49:68:0d:da:38:2e:f4:5f:4d:4e:38:fc:d3:85: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DA:E9:9E:D5:CB:86:7C:71:F9:CA:5E:37:20:4F:60:B4:A5:2F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv4: 199.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:33:b2:fa:da:29:bd:04:f7:4e:c5:2b:8b:27:1a:31:63:ac: 00:9d:b2:34:2d:25:13:2d:19:a1:ca:f3:bc:88:f7:0d:e4:63: e9:25:ef:a7:37:ca:2b:32:44:e8:76:ec:e8:14:42:87:a9:2b: c3:88:96:44:5c:fb:63:e0:03:02:56:b8:41:c9:d0:73:6c:77: bb:b1:83:e4:6c:43:a5:21:8d:a2:38:23:ae:32:7f:ee:39:90: 63:31:67:11:f7:0e:e8:57:e9:ce:a7:82:44:a5:4a:a9:e5:f4: 14:76:60:a3:f7:98:60:31:cb:9a:c0:dc:51:33:0a:27:a5:f5: d1:ae:06:39:9f:20:6c:cb:a8:26:fc:6d:db:6a:e9:28:e3:27: 0c:c4:58:b1:47:d4:06:ef:4e:4a:fd:1e:ad:22:df:d3:86:cd: 68:bf:82:d8:03:19:10:24:ff:b5:09:65:db:2d:b3:d2:23:4c: 5f:3a:82:35:77:21:6a:18:e1:b4:ca:38:f5:ec:20:4f:d9:c0: 00:5a:bd:24:77:42:16:c9:a9:35:ac:2d:39:99:66:29:e0:ae: 4e:a0:fb:d6:1d:e0:e9:dc:fa:1e:02:e4:4a:6d:38:a8:1a:0c: be:3a:cc:bb:12:bb:1f:cb:97:27:ec:3f:72:74:fd:67:f0:b2: 43:4c:43:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5/Hjw6PWRbPLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZWFkZDE1YWQtNzdkYS00YTUzLTljZDYtNGJjNjRjMmIwZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGJif7yrReRvtp6SoJuqWn8NIXk5l9fdF6Bn xjSkozYUPFTUF20jqHSpPc/EadgZd/hz3arQhbHVDXpdn/JjHco2/6EjmInLCgDm n+sCMs1hmG4fN2XVdreXUbID7HB7cTTFtk69w0sxW/errLmrR5NkHmO53JysJugf ROH3a48jJTmW6MaGTn9xZx2x/vUDKk1U3WF9gjX9WZol2EpXacBlrq6doyIZorf+ 0FfpRtmyysSnYORmDGzRahx4/lpn/FgxrH1ejQWbaktFtkxW19ltYGhU/aecsGcu ta0l4O3huap273ccjnkn0MWDUaw5SWgN2jgu9F9NTjj804UFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGba6Z7Vy4Z8cfnKXjcgT2C0pS8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZDBmY2MwMzktMmYzMi0z NDNlLWFhNjYtZTIwOTQwNjZkZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8zsvraKb0E907FK4snGjFjrACdsjQtJRMtGaHK87yI9w3kY+kl76c3 yisyROh27OgUQoepK8OIlkRc+2PgAwJWuEHJ0HNsd7uxg+RsQ6UhjaI4I64yf+45 kGMxZxH3DuhX6c6ngkSlSqnl9BR2YKP3mGAxy5rA3FEzCiel9dGuBjmfIGzLqCb8 bdtq6SjjJwzEWLFH1AbvTkr9Hq0i39OGzWi/gtgDGRAk/7UJZdsts9IjTF86gjV3 IWoY4bTKOPXsIE/ZwABavSR3QhbJqTWsLTmZZingrk6g+9Yd4Onc+h4C5EptOKga DL46zLsSux/LlyfsP3J0/WfwskNMQ/E= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:11 2026 by rpki-client