$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa File: ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa (raw, json) Hash identifier: Wef7fgQRXejjuD3eu88RvIC/E5hOWp9Z7Vq+7C7iW9s= Subject key identifier: 1A:3B:54:79:B6:8D:35:8F:39:11:F1:AD:07:09:99:9E:11:2F:6D:57 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D2A74C5590AB3B04CF87C9808 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 199.87.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c5:59:0a:b3:b0:4c:f8:7c:98:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=96a92e34-7dd7-41d6-a908-c0609bd50a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:36:b2:9e:ac:8a:58:64:bf:05:14:97:2f:a1: 02:34:85:c0:9f:2a:2b:49:f3:54:2b:63:62:ca:6b: ce:5c:7b:02:5f:c7:5e:27:b0:ad:c1:31:db:8a:96: f7:29:32:76:8a:c6:5e:4c:f6:7f:29:2d:1c:a8:7b: ed:54:b2:c3:38:58:ca:43:38:b3:08:67:7b:2e:75: 15:5e:06:9b:35:5e:11:6e:fb:fb:2b:f3:2e:fd:8f: 2d:68:0f:27:0a:77:f2:60:0e:39:20:19:f3:17:93: 43:5f:9a:f2:5a:a6:58:08:8e:de:6d:f3:54:f7:27: 84:cd:e7:3b:45:d0:4e:ec:e6:b3:79:0b:91:47:2c: e2:8e:bd:1b:1f:d5:4e:fd:52:8e:ad:17:27:1e:82: 02:9c:49:27:c9:53:87:17:a7:b8:48:c3:87:39:58: 14:81:fc:4f:81:3f:da:2d:a0:a1:10:28:e5:55:19: b1:08:05:ce:ca:f8:4c:65:f0:f6:5b:79:cd:42:4b: 8f:49:d1:4d:65:07:98:11:af:3e:9d:be:0b:31:03: 27:3f:b1:6b:52:49:7d:fc:68:2c:0b:91:c0:2c:80: ce:64:db:a7:c8:3c:50:4e:6a:76:ad:d7:78:fc:4d: dd:54:2b:64:18:1f:05:d0:7a:00:5c:12:5f:14:c6: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3B:54:79:B6:8D:35:8F:39:11:F1:AD:07:09:99:9E:11:2F:6D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ad105cfe-de86-3cf7-aa82-01c4c3003f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ef:aa:0f:43:86:0f:91:39:38:2d:8a:f3:0c:7e:de:14:2f: 4f:7e:90:79:26:64:86:92:5c:b7:4e:38:a3:8c:c0:89:85:aa: 4b:e4:d3:60:d8:49:62:43:1c:3d:9a:aa:32:a7:8d:c7:2f:23: 72:f7:a8:4f:d8:be:7b:4a:28:ed:46:26:fd:68:2d:fc:58:7c: 4b:d5:35:47:c6:19:de:8c:b8:52:0c:17:dd:bb:e0:6b:e8:b0: e3:9d:79:6b:1f:3c:c1:d1:31:da:75:00:9e:f4:2a:d0:7a:32: 75:68:14:c0:ca:29:2c:b0:4b:55:af:dc:49:2b:93:ac:eb:d3: e4:0c:fa:64:f0:87:ff:9e:85:67:ba:0b:74:bb:d6:59:1f:6f: 27:f9:cd:ca:65:95:99:21:dc:80:22:b4:e2:e1:39:4c:9d:63: 2d:df:20:84:cd:0b:7d:be:36:d2:32:64:f2:1b:e4:a8:10:85: c9:41:34:a3:0f:60:66:44:7f:8e:6e:e1:f5:3c:bb:f5:26:33: cc:ed:f7:2d:bc:e5:85:92:09:2c:d3:33:ac:b7:4e:45:98:38: 2b:d7:89:c9:6a:ca:1c:c0:13:f3:eb:cd:27:fa:60:f6:fd:ff: 5b:8f:c0:d3:9c:3e:81:51:a7:16:5a:74:c0:01:b3:59:e4:9a: a2:d8:45:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMVZCrOwTPh8mAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OTZhOTJlMzQtN2RkNy00MWQ2LWE5MDgtYzA2MDliZDUwYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TaynqyKWGS/BRSXL6ECNIXAnyorSfNUK2Ni ymvOXHsCX8deJ7CtwTHbipb3KTJ2isZeTPZ/KS0cqHvtVLLDOFjKQzizCGd7LnUV XgabNV4Rbvv7K/Mu/Y8taA8nCnfyYA45IBnzF5NDX5ryWqZYCI7ebfNU9yeEzec7 RdBO7OazeQuRRyzijr0bH9VO/VKOrRcnHoICnEknyVOHF6e4SMOHOVgUgfxPgT/a LaChECjlVRmxCAXOyvhMZfD2W3nNQkuPSdFNZQeYEa8+nb4LMQMnP7FrUkl9/Ggs C5HALIDOZNunyDxQTmp2rdd4/E3dVCtkGB8F0HoAXBJfFMavpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo7VHm2jTWPORHxrQcJmZ4RL21XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWQxMDVjZmUtZGU4Ni0z Y2Y3LWFhODItMDFjNGMzMDAzZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvvqg9Dhg+ROTgtivMMft4UL09+kHkmZIaSXLdOOKOMwImFqkvk02DY SWJDHD2aqjKnjccvI3L3qE/YvntKKO1GJv1oLfxYfEvVNUfGGd6MuFIMF9274Gvo sOOdeWsfPMHRMdp1AJ70KtB6MnVoFMDKKSywS1Wv3Ekrk6zr0+QM+mTwh/+ehWe6 C3S71lkfbyf5zcpllZkh3IAitOLhOUydYy3fIITNC32+NtIyZPIb5KgQhclBNKMP YGZEf45u4fU8u/UmM8zt9y285YWSCSzTM6y3TkWYOCvXiclqyhzAE/PrzSf6YPb9 /1uPwNOcPoFRpxZadMABs1nkmqLYRRQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:46 2026 by rpki-client