$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa File: f55978ed-0a94-33e2-ad68-45b7734b3677.roa (raw, json) Hash identifier: DTO35HwrQAMGzL4tIj4Ewr2qFDhbb1Nhd416eL+hwfw= Subject key identifier: 99:6F:1E:AF:B2:FB:81:23:89:DC:44:0F:0C:49:32:C2:D2:5D:38:F6 Certificate issuer: /CN=5b326d4d-84cb-4b68-b303-78f3cdef804f Certificate serial: 010D0C9F4328584D492A6303D716919CA4528260 Authority key identifier: A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 199.30.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:63:03:d7:16:91:9c:a4:52:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b326d4d-84cb-4b68-b303-78f3cdef804f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=ab93e64c-0876-44b3-a0be-031eedd8b985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:39:4a:ad:13:10:9b:14:70:83:64:30:e3:1a: 87:e8:21:88:fb:db:10:e2:8f:48:97:98:26:d0:b8: 34:78:f0:52:bf:18:02:d3:ce:3b:7b:d4:8f:f2:21: 5d:51:63:38:8f:a2:f6:21:d3:62:1d:db:b1:51:c6: ca:02:0d:64:e6:e0:30:d3:f8:d3:f0:84:4c:a3:f6: 7d:cd:eb:92:ce:03:6c:87:6e:5f:0a:f2:57:95:23: a8:a5:07:dc:4c:b8:64:c0:c2:eb:f9:5f:26:52:38: 76:88:47:17:50:48:d1:2e:f6:79:e6:76:20:14:b7: 95:58:77:23:fa:f4:1c:5b:a3:4c:e6:0c:58:14:be: ab:8f:63:27:22:0c:24:43:a0:55:95:7f:0b:63:d9: e3:99:9b:b6:8e:26:d7:57:f1:07:c0:b2:75:0e:b9: 1e:40:d4:e4:73:89:67:d6:3e:42:f7:33:43:87:4a: b4:2d:8d:8d:30:c1:7f:50:28:5c:f4:52:98:48:17: 95:28:e1:77:d4:51:c2:9d:d7:72:c9:70:51:45:e4: 8b:ec:bc:80:e3:70:f0:e1:f1:a1:5d:73:62:d7:cd: 15:5a:98:5f:19:11:6c:a7:92:56:3f:6a:a6:2d:00: 29:40:3e:f1:8f:88:66:87:83:b8:7c:9d:83:2f:d1: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6F:1E:AF:B2:FB:81:23:89:DC:44:0F:0C:49:32:C2:D2:5D:38:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/f55978ed-0a94-33e2-ad68-45b7734b3677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f/5b326d4d-84cb-4b68-b303-78f3cdef804f.crl X509v3 Authority Key Identifier: keyid:A7:D0:DE:BF:C4:97:6E:D0:5A:7E:55:A2:44:1F:65:42:97:1F:89:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5b326d4d-84cb-4b68-b303-78f3cdef804f.cer sbgp-ipAddrBlock: critical IPv4: 199.30.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:53:46:b3:0e:c9:9e:c7:ea:9a:4c:b5:ef:09:cd:3a:3c:cb: 0c:bb:d9:31:ba:61:14:c6:2e:e6:19:d0:4c:1c:c0:e3:35:b0: 43:69:94:e5:9c:4e:bd:e3:48:39:20:d1:e5:2e:c0:3e:39:3b: ec:c5:24:48:30:c2:1f:a0:7b:9d:22:67:a4:14:f1:4a:05:cb: fa:5a:ef:63:c2:a5:4f:e6:99:82:3f:fc:51:6e:50:0b:0c:c9: fb:dd:f5:c1:a2:ae:06:07:0c:2e:44:82:22:d4:15:98:14:8d: 2e:df:9e:8c:d1:a4:7c:ea:83:5d:d6:dc:70:df:ef:3b:df:6c: 4e:f7:b2:10:a4:30:5b:03:9b:08:a1:8c:c0:67:c9:14:21:e9: ae:b5:08:fd:c1:a8:40:f8:79:8f:11:83:5a:d4:44:61:7a:6f: f4:1e:ce:ee:6d:19:ec:3f:dd:35:97:26:22:3d:ce:d0:a8:cc: 65:a2:44:e4:50:87:e5:84:90:92:09:84:c3:39:18:83:88:a0: b8:5a:0a:23:04:c9:c2:d3:a1:49:1d:c8:78:63:11:74:17:ac: f5:44:0a:ab:a6:4e:5b:1e:0b:ed:21:c6:e1:55:83:f8:7f:d0: e7:a4:e7:a4:1a:65:02:e2:bf:86:9f:b2:46:b9:12:e5:74:d8: cc:12:d4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmMD1xaRnKRSgmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIzMjZkNGQtODRjYi00YjY4LWIzMDMtNzhmM2NkZWY4 MDRmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YWI5M2U2NGMtMDg3Ni00NGIzLWEwYmUtMDMxZWVkZDhiOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTlKrRMQmxRwg2Qw4xqH6CGI+9sQ4o9Il5gm 0Lg0ePBSvxgC0847e9SP8iFdUWM4j6L2IdNiHduxUcbKAg1k5uAw0/jT8IRMo/Z9 zeuSzgNsh25fCvJXlSOopQfcTLhkwMLr+V8mUjh2iEcXUEjRLvZ55nYgFLeVWHcj +vQcW6NM5gxYFL6rj2MnIgwkQ6BVlX8LY9njmZu2jibXV/EHwLJ1DrkeQNTkc4ln 1j5C9zNDh0q0LY2NMMF/UChc9FKYSBeVKOF31FHCnddyyXBRReSL7LyA43Dw4fGh XXNi180VWphfGRFsp5JWP2qmLQApQD7xj4hmh4O4fJ2DL9HjOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlvHq+y+4EjidxEDwxJMsLSXTj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81YjMy NmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYzY2RlZjgwNGYvZjU1OTc4ZWQtMGE5NC0z M2UyLWFkNjgtNDViNzczNGIzNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWIzMjZkNGQtODRjYi00YjY4LWIz MDMtNzhmM2NkZWY4MDRmLzViMzI2ZDRkLTg0Y2ItNGI2OC1iMzAzLTc4ZjNjZGVm ODA0Zi5jcmwwHwYDVR0jBBgwFoAUp9Dev8SXbtBaflWiRB9lQpcfiXEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81YjMyNmQ0ZC04NGNiLTRiNjgtYjMwMy03OGYz Y2RlZjgwNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxx6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNTRrMOyZ7H6ppMte8JzTo8ywy72TG6YRTGLuYZ0EwcwOM1sENplOWc Tr3jSDkg0eUuwD45O+zFJEgwwh+ge50iZ6QU8UoFy/pa72PCpU/mmYI//FFuUAsM yfvd9cGirgYHDC5EgiLUFZgUjS7fnozRpHzqg13W3HDf7zvfbE73shCkMFsDmwih jMBnyRQh6a61CP3BqED4eY8Rg1rURGF6b/Qezu5tGew/3TWXJiI9ztCozGWiRORQ h+WEkJIJhMM5GIOIoLhaCiMEycLToUkdyHhjEXQXrPVECqumTlseC+0hxuFVg/h/ 0Oek56QaZQLiv4afska5EuV02MwS1J4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:09 2026 by rpki-client