$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa File: 72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa (raw, json) Hash identifier: Vw8E263tyLI/FnS5soBzre6PT/xKA+fHpSKQrvr8u1g= Subject key identifier: F9:4E:EE:EF:0E:19:C0:A7:75:B0:37:44:4B:05:B4:C4:56:8C:8B:2F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D2A74C5AAED0F3386CC347BC0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 199.36.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c5:aa:ed:0f:33:86:cc:34:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=ce4f5092-5a87-4046-a2a8-91a09b7271ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:7e:b8:9c:7a:63:36:80:28:1a:4c:08:d2: 79:27:b8:f8:75:37:51:6f:d7:3d:44:03:c9:60:3b: 85:d7:cb:d8:5a:b8:52:f2:7e:bc:51:e9:5c:2b:cc: 09:0b:92:71:ab:ae:0a:50:08:71:33:e9:b0:c0:66: 44:8b:ed:76:6f:4a:86:e4:d2:d0:98:fa:cd:e5:cc: 08:00:f3:28:18:03:06:7d:aa:c6:b7:9e:a0:ff:00: 99:46:11:76:1c:3f:8d:ac:2c:97:23:5b:a7:bc:3c: 67:1e:b6:23:0b:39:8d:44:16:b4:0e:16:51:a2:50: 73:f2:0b:9d:03:3f:52:f4:35:4d:8c:52:51:08:64: 5c:68:76:ed:c8:15:08:45:cb:8d:d7:98:56:3c:6c: 83:f9:fa:1c:c8:a6:52:d9:46:d3:88:31:ff:4a:33: 9b:dc:75:51:a6:ed:eb:ad:1d:18:81:a1:3a:36:57: 9f:0e:ec:1c:12:2f:f8:39:d8:5a:4e:fb:0d:97:06: 8e:20:38:03:07:d0:53:e2:57:0f:8c:64:06:24:5c: ab:39:49:2d:b2:ed:20:0e:97:e9:a6:a3:51:da:25: a8:1a:77:ec:54:42:41:6d:9e:40:d3:85:b0:4f:15: ff:ae:bc:d3:34:3c:70:e0:46:ab:b8:39:78:a4:02: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4E:EE:EF:0E:19:C0:A7:75:B0:37:44:4B:05:B4:C4:56:8C:8B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2a:84:3e:2b:f1:40:bc:ab:37:f7:4d:6a:22:dc:05:96:a6: 58:bf:9b:5e:99:45:6b:6b:00:57:20:d4:98:e3:92:cc:fe:50: ed:ae:72:72:d2:ad:5d:55:90:53:09:30:e2:3d:b7:70:fe:35: 3a:f5:88:aa:c5:eb:8c:a5:38:3c:79:0e:1a:ff:23:b9:b9:79: 7b:54:ff:6d:ae:f5:87:60:27:92:73:2d:3a:78:c2:71:41:50: 78:02:4e:93:d5:70:bd:67:4d:0f:6d:c6:96:6e:78:7e:85:90: e8:70:a8:90:e4:e5:43:60:ca:e9:48:05:56:e9:d5:0b:7f:31: 42:8b:aa:a8:4d:b4:c6:e3:2c:c8:5c:d9:c7:6a:d6:90:df:02: 77:f8:e2:0d:d2:1f:58:43:50:d0:d0:0c:4e:0b:6c:ea:d0:5a: 8f:18:f1:ff:d7:39:32:e9:90:6f:69:67:83:17:49:f5:e6:b0: f6:20:10:74:77:5b:fc:e6:45:92:2f:95:f9:cb:fd:44:cb:42: a8:b6:49:05:af:b1:10:6f:5d:aa:4e:72:61:af:00:0b:84:38: d8:5b:92:0b:aa:54:fd:77:fb:4e:42:54:10:bc:ec:8a:54:f6: 47:58:a4:ef:91:67:4e:29:5e:27:27:12:86:0b:8c:a7:03:7a: 3b:80:f3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMWq7Q8zhsw0e8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk Y2U0ZjUwOTItNWE4Ny00MDQ2LWEyYTgtOTFhMDliNzI3MWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvJ+uJx6YzaAKBpMCNJ5J7j4dTdRb9c9RAPJ YDuF18vYWrhS8n68UelcK8wJC5Jxq64KUAhxM+mwwGZEi+12b0qG5NLQmPrN5cwI APMoGAMGfarGt56g/wCZRhF2HD+NrCyXI1unvDxnHrYjCzmNRBa0DhZRolBz8gud Az9S9DVNjFJRCGRcaHbtyBUIRcuN15hWPGyD+focyKZS2UbTiDH/SjOb3HVRpu3r rR0YgaE6NlefDuwcEi/4OdhaTvsNlwaOIDgDB9BT4lcPjGQGJFyrOUktsu0gDpfp pqNR2iWoGnfsVEJBbZ5A04WwTxX/rrzTNDxw4EaruDl4pAIOMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlO7u8OGcCndbA3REsFtMRWjIsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzJlOGM5YjMtODgyOS0z OWQwLWJlMDEtZDg1MGZkZmU3ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0qhD4r8UC8qzf3TWoi3AWWpli/m16ZRWtrAFcg1Jjjksz+UO2ucnLS rV1VkFMJMOI9t3D+NTr1iKrF64ylODx5Dhr/I7m5eXtU/22u9YdgJ5JzLTp4wnFB UHgCTpPVcL1nTQ9txpZueH6FkOhwqJDk5UNgyulIBVbp1Qt/MUKLqqhNtMbjLMhc 2cdq1pDfAnf44g3SH1hDUNDQDE4LbOrQWo8Y8f/XOTLpkG9pZ4MXSfXmsPYgEHR3 W/zmRZIvlfnL/UTLQqi2SQWvsRBvXapOcmGvAAuEONhbkguqVP13+05CVBC87IpU 9kdYpO+RZ04pXicnEoYLjKcDejuA8+4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:56:23 2026 by rpki-client