$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa File: aa5922ce-6574-311d-bc01-e66125efb577.roa (raw, json) Hash identifier: Q+at8bYldevlFeJ2vbDl7+8M7vcb1lCQXdyL6kH9s/I= Subject key identifier: E8:1A:BA:9D:2B:4D:74:26:14:54:D6:72:46:70:1E:61:3D:4D:B7:C5 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D2A74ED277A3C82513A41A6C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 199.87.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ed:27:7a:3c:82:51:3a:41:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=e227f3b9-93fd-4191-9f3c-67cf833933c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:c7:8b:4d:0c:3b:f1:c8:23:bb:af:46:33: 84:8a:60:93:f4:ff:9f:fc:07:05:db:33:09:3a:20: 73:1e:fa:42:5b:ac:63:7a:75:15:0c:a4:eb:e8:cd: 57:c4:d7:24:97:a8:28:b6:db:b7:e3:3b:7b:88:0c: ce:2d:dd:4d:d9:bf:d4:3b:67:93:a3:2b:30:ec:ab: 37:2f:eb:e9:d8:75:cf:e8:7d:4a:23:2a:91:2e:c1: 4d:85:0f:56:81:a3:d6:6d:f3:3f:6b:c5:e4:2f:0d: 7b:40:68:f6:45:60:5c:5a:85:7c:89:cd:c8:f8:38: 81:61:4d:87:91:8d:7b:65:5e:60:a6:b7:08:93:c4: 45:f9:4f:48:b4:27:f7:1b:50:cf:79:ed:27:f4:b7: 5f:9b:96:a5:8a:e7:55:59:02:93:9b:ee:14:86:cf: ff:2d:28:a6:71:6d:6d:82:bf:f6:fc:e3:91:46:ec: 1a:72:6f:68:20:7c:d0:52:0d:29:46:0d:97:82:f6: a6:65:e4:88:b9:05:68:9c:3c:0a:3f:aa:7a:96:63: bd:42:17:5c:3b:30:d3:19:fd:9a:f9:de:61:8a:88: a5:34:62:09:cd:c4:05:d1:5e:86:49:d1:c3:e7:03: a6:26:12:bc:bc:c4:07:b1:cb:ad:6d:00:0a:91:39: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1A:BA:9D:2B:4D:74:26:14:54:D6:72:46:70:1E:61:3D:4D:B7:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/aa5922ce-6574-311d-bc01-e66125efb577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e7:e2:28:6f:b3:58:c1:99:8f:c7:93:05:b1:27:0a:a9:27: 6c:c6:8f:3c:3a:4d:55:46:1e:0c:8c:b5:7d:88:22:18:57:6e: 82:6f:64:bc:df:a9:be:f1:88:88:ff:b2:98:63:f4:7a:65:b4: ea:c5:78:61:f5:da:27:10:d3:42:5e:d9:fa:54:b5:81:27:65: 6f:72:91:13:64:db:8c:72:5f:ad:e0:46:50:2d:5c:6e:de:fe: 6d:b0:2f:8f:0c:e1:cf:dd:56:0a:1d:37:1e:05:ff:70:33:76: 54:66:1f:91:6c:47:3f:27:50:b0:91:38:f1:56:73:c3:6c:d8: 33:06:c8:da:92:60:de:1c:65:8a:82:af:75:e2:7a:3d:ff:9e: 73:66:1d:51:78:da:6a:6b:19:6c:a2:9e:a6:2b:59:be:44:d2: 86:9b:0e:f5:73:a9:43:4e:7e:56:7b:85:03:16:a9:9a:dc:4c: b1:42:f7:03:5c:21:23:19:9f:1a:3e:29:e7:c3:a9:25:97:e4: 32:b3:df:32:fd:bc:36:8f:a6:c6:fa:fa:0d:3e:f3:18:bd:12: 7f:22:27:b9:31:fc:68:33:59:cf:ba:4f:52:ea:af:72:ea:bb: 43:a1:fb:9e:e8:43:2f:9e:6b:4d:2e:8b:3b:ab:35:04:e4:5a: 68:6e:71:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO0nejyCUTpBpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZTIyN2YzYjktOTNmZC00MTkxLTlmM2MtNjdjZjgzMzkzM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrrHi00MO/HII7uvRjOEimCT9P+f/AcF2zMJ OiBzHvpCW6xjenUVDKTr6M1XxNckl6gottu34zt7iAzOLd1N2b/UO2eToysw7Ks3 L+vp2HXP6H1KIyqRLsFNhQ9WgaPWbfM/a8XkLw17QGj2RWBcWoV8ic3I+DiBYU2H kY17ZV5gprcIk8RF+U9ItCf3G1DPee0n9Ldfm5aliudVWQKTm+4Uhs//LSimcW1t gr/2/OORRuwacm9oIHzQUg0pRg2XgvamZeSIuQVonDwKP6p6lmO9QhdcOzDTGf2a +d5hioilNGIJzcQF0V6GSdHD5wOmJhK8vMQHscutbQAKkTkKSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgaup0rTXQmFFTWckZwHmE9TbfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWE1OTIyY2UtNjU3NC0z MTFkLWJjMDEtZTY2MTI1ZWZiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDn4ihvs1jBmY/HkwWxJwqpJ2zGjzw6TVVGHgyMtX2IIhhXboJvZLzf qb7xiIj/sphj9HpltOrFeGH12icQ00Je2fpUtYEnZW9ykRNk24xyX63gRlAtXG7e /m2wL48M4c/dVgodNx4F/3AzdlRmH5FsRz8nULCROPFWc8Ns2DMGyNqSYN4cZYqC r3Xiej3/nnNmHVF42mprGWyinqYrWb5E0oabDvVzqUNOflZ7hQMWqZrcTLFC9wNc ISMZnxo+KefDqSWX5DKz3zL9vDaPpsb6+g0+8xi9En8iJ7kx/GgzWc+6T1Lqr3Lq u0Oh+57oQy+ea00uizurNQTkWmhucbU= -----END CERTIFICATE-----Generated at Thu Mar 26 03:49:30 2026 by rpki-client