$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa File: a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa (raw, json) Hash identifier: zxfimNy0diUlw8ll6ohC4wj+ZKecsx7pfJ1EFSKFrqs= Subject key identifier: 4E:E1:BF:72:BF:45:6D:97:B1:EF:70:49:F9:56:FF:4A:90:FB:C2:03 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D2A74C56B82F8EC58D34B4400 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 199.36.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c5:6b:82:f8:ec:58:d3:4b:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=8340ae8d-211f-4b46-bbf8-0f07d0649ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:d6:46:43:bb:9c:93:64:7c:d4:0b:bd:94: 6e:d0:aa:d6:d2:fc:8e:e0:3a:db:03:2a:c9:92:82: 08:81:47:df:ac:b6:d7:4e:35:0c:a7:56:60:c3:ec: 31:b0:7f:82:7d:6d:b3:ce:04:f9:62:15:b7:b7:d7: d2:36:55:a6:69:e5:95:15:21:d0:cd:d6:70:3b:5b: 1f:46:76:12:c6:e1:dd:14:31:92:13:ab:18:f3:e5: c5:e6:49:9e:28:2b:eb:04:cc:17:49:d2:45:13:97: 12:62:bd:dc:fe:e6:c6:95:39:0b:79:33:98:ac:c5: 31:98:23:f6:43:a8:19:e4:09:8d:89:31:3b:da:aa: 99:f3:84:4e:55:1e:6a:82:35:69:5d:82:2b:9b:cf: c8:55:97:bb:1c:ce:7e:06:f6:dd:ab:9f:69:12:69: e8:90:67:fb:69:3a:22:4f:d5:17:6a:14:37:5f:ea: 2a:e0:82:7c:07:f5:ff:3b:08:cf:fc:b5:4c:28:c9: d4:a6:87:28:95:57:d7:a8:96:4a:d8:63:c4:50:17: f5:16:7f:96:b6:6a:ea:8c:f7:c2:6f:a1:28:e5:99: 4a:f4:a2:69:fb:f2:05:61:20:32:3b:b5:05:13:2c: c6:46:1f:88:d1:10:10:1c:77:d0:3a:9c:ba:8f:16: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E1:BF:72:BF:45:6D:97:B1:EF:70:49:F9:56:FF:4A:90:FB:C2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a2a7cbf6-8905-3efe-a97a-54c8980dcfa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.36.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:fa:c5:32:44:a1:e1:5d:2c:b4:45:2a:d2:1d:fc:75:c3:fa: 60:03:73:16:f2:a1:91:48:3d:23:68:5f:3d:93:64:0e:21:bb: bf:58:64:d4:db:64:64:58:1b:86:fe:de:dd:f9:2f:40:32:d8: 61:8e:01:01:ea:c8:5d:94:12:25:68:fb:b2:7a:bc:a7:7c:a8: a6:e0:b1:c1:2b:8c:34:07:5e:5b:f7:ff:37:7e:1f:0c:30:9f: 68:8d:56:d7:1c:84:5c:ae:d5:77:e9:47:0a:e5:44:84:06:96: fa:2c:0b:51:a3:60:88:67:4a:27:d2:66:4a:a4:a4:91:82:d3: 79:73:67:ac:88:6f:e3:fc:f1:04:2a:61:ae:5e:93:b5:f6:b7: 82:80:b7:81:14:1e:bc:a4:6f:81:f8:1d:d6:ff:43:33:61:6f: 93:5a:47:7c:d9:7a:ef:e0:62:e2:42:d5:f8:f2:0b:86:c2:a5: c0:9d:e0:a0:d9:5e:56:8e:84:ee:6a:df:c9:19:1e:9d:1f:33: e6:06:b5:d5:44:60:12:fd:9e:77:6f:1d:a4:09:1e:b4:f2:e1: 74:43:e0:90:32:fd:2e:f0:03:65:c4:d7:49:53:5c:00:f0:bb: f8:81:8d:25:a2:5c:b7:ba:18:9d:d8:a9:bc:df:a3:23:e2:9e: 20:d2:b6:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMVrgvjsWNNLRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODM0MGFlOGQtMjExZi00YjQ2LWJiZjgtMGYwN2QwNjQ5YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFPWRkO7nJNkfNQLvZRu0KrW0vyO4DrbAyrJ koIIgUffrLbXTjUMp1Zgw+wxsH+CfW2zzgT5YhW3t9fSNlWmaeWVFSHQzdZwO1sf RnYSxuHdFDGSE6sY8+XF5kmeKCvrBMwXSdJFE5cSYr3c/ubGlTkLeTOYrMUxmCP2 Q6gZ5AmNiTE72qqZ84ROVR5qgjVpXYIrm8/IVZe7HM5+Bvbdq59pEmnokGf7aToi T9UXahQ3X+oq4IJ8B/X/OwjP/LVMKMnUpocolVfXqJZK2GPEUBf1Fn+WtmrqjPfC b6Eo5ZlK9KJp+/IFYSAyO7UFEyzGRh+I0RAQHHfQOpy6jxbmrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7hv3K/RW2Xse9wSflW/0qQ+8IDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTJhN2NiZjYtODkwNS0z ZWZlLWE5N2EtNTRjODk4MGRjZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyT5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH6xTJEoeFdLLRFKtId/HXD+mADcxbyoZFIPSNoXz2TZA4hu79YZNTb ZGRYG4b+3t35L0Ay2GGOAQHqyF2UEiVo+7J6vKd8qKbgscErjDQHXlv3/zd+Hwww n2iNVtcchFyu1XfpRwrlRIQGlvosC1GjYIhnSifSZkqkpJGC03lzZ6yIb+P88QQq Ya5ek7X2t4KAt4EUHrykb4H4Hdb/QzNhb5NaR3zZeu/gYuJC1fjyC4bCpcCd4KDZ XlaOhO5q38kZHp0fM+YGtdVEYBL9nndvHaQJHrTy4XRD4JAy/S7wA2XE10lTXADw u/iBjSWiXLe6GJ3YqbzfoyPiniDStmM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:02 2026 by rpki-client