$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa File: 22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa (raw, json) Hash identifier: Ud6nAHO66TzAULrd4imxLfwBS3P1PxUt57fMm6jxDgs= Subject key identifier: D7:EA:CA:4A:54:21:70:35:B2:D7:F5:EB:46:E9:EC:1C:81:72:1A:E7 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584D4A8F9C9DB27DB8202E30EA80 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 25623 IP address blocks: 199.114.249.0/24 maxlen: 24 199.114.251.0/24 maxlen: 24 2001:4830:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9c:9d:b2:7d:b8:20:2e:30:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=0362b60c-ddd0-4e71-9624-2fe342a4977a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:44:ec:fe:a0:95:c2:be:54:9b:f9:64:7f: e8:73:bb:ca:6e:46:d9:54:ac:fe:c0:b6:80:43:17: 80:2e:f6:1a:14:7b:16:11:09:bf:a5:9d:e3:39:a5: 56:0a:3f:77:25:ad:27:1e:c2:1d:ab:c4:84:2b:1b: d3:7f:c1:df:1a:79:6b:f4:69:6c:3e:8e:c6:2c:fc: cf:c9:6c:53:32:be:53:40:c2:0c:fb:52:99:4a:b3: 01:4a:2b:2c:5d:c5:6f:f1:cc:d9:6b:84:35:7b:d3: a6:8d:7e:20:bd:c2:21:68:0b:02:f5:98:cb:13:0f: 33:8e:ed:0a:6a:0c:ca:80:36:ee:de:9d:0d:42:72: 1a:b9:c7:27:3e:fe:d1:b1:d2:67:c6:40:4c:fe:e1: 8d:a0:1e:10:ee:d6:3a:8b:a1:fa:c2:80:27:3c:c5: 10:0e:bc:82:f2:81:b0:56:68:60:a1:aa:ca:03:af: f5:db:0c:27:03:da:b8:73:9b:02:25:eb:70:f3:97: b2:2d:8d:25:f9:86:fc:a8:56:5b:4e:fa:1a:04:33: 14:5a:a0:d7:82:d8:03:21:e7:73:dc:09:d3:8d:2c: fc:63:f3:dc:8b:d2:f9:42:f5:1e:e3:bb:e8:d6:91: 15:78:07:74:d6:91:5a:d4:d5:4e:81:34:28:7f:cf: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:CA:4A:54:21:70:35:B2:D7:F5:EB:46:E9:EC:1C:81:72:1A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 199.114.249.0/24 199.114.251.0/24 IPv6: 2001:4830:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ac:1e:84:69:ed:a6:2f:b4:72:60:47:d0:bb:4a:48:e6:bd: 73:a0:6f:e1:d3:00:36:3f:4b:8c:4a:e6:4d:04:2e:d2:77:32: 38:cb:f8:d8:5a:14:a3:ad:e4:6e:5c:18:d2:e4:fe:e0:be:ae: e2:9c:16:81:05:63:6c:99:b4:31:3b:e5:46:38:1e:19:16:ed: 34:00:3e:32:55:ed:e9:ca:c6:5e:a4:2d:f4:38:56:21:0e:55: 33:b1:08:85:d4:74:7c:66:1a:17:a0:0d:75:38:b8:3e:bd:73: a5:c0:fe:6a:3a:bc:fe:81:01:89:a7:7f:36:fc:1b:e8:d3:69: a2:ec:dc:b2:a4:a9:3d:f9:1a:e5:6c:99:ad:23:74:64:68:35: ba:8b:98:0c:25:dc:ca:db:ce:ad:05:f2:cd:64:eb:85:ff:65: 01:49:63:71:43:6e:18:6d:63:cc:50:a5:66:d8:c9:74:fa:8d: d3:ed:c4:55:8b:16:0c:9d:30:90:da:25:13:d0:44:4e:92:b2: e3:f6:82:58:42:5b:b6:c6:1d:6f:c6:65:11:96:44:33:e5:56: c1:00:71:1b:6b:91:a3:eb:e9:ea:48:90:be:f9:9e:66:98:1f: 67:76:ac:e8:b8:42:5f:34:17:2a:5e:b8:b9:f5:85:7c:24:d4: 82:dd:4e:25 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1Kj5ydsn24IC4w6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MDM2MmI2MGMtZGRkMC00ZTcxLTk2MjQtMmZlMzQyYTQ5NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2tE7P6glcK+VJv5ZH/oc7vKbkbZVKz+wLaA QxeALvYaFHsWEQm/pZ3jOaVWCj93Ja0nHsIdq8SEKxvTf8HfGnlr9GlsPo7GLPzP yWxTMr5TQMIM+1KZSrMBSissXcVv8czZa4Q1e9OmjX4gvcIhaAsC9ZjLEw8zju0K agzKgDbu3p0NQnIauccnPv7RsdJnxkBM/uGNoB4Q7tY6i6H6woAnPMUQDryC8oGw VmhgoarKA6/12wwnA9q4c5sCJetw85eyLY0l+Yb8qFZbTvoaBDMUWqDXgtgDIedz 3AnTjSz8Y/Pci9L5QvUe47vo1pEVeAd01pFa1NVOgTQof89ujQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNfqykpUIXA1stf160bp7ByBchrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMjJkMGNkMmQtOTlkYS0z NjJkLWJiYmQtNTMzM2UzZjBhNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAx3L5AwQA x3L7MA4EAgACMAgDBgAgAUgwAjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgrB6Eae2mL7RyYEfQu0pI5r1z oG/h0wA2P0uMSuZNBC7SdzI4y/jYWhSjreRuXBjS5P7gvq7inBaBBWNsmbQxO+VG OB4ZFu00AD4yVe3pysZepC30OFYhDlUzsQiF1HR8ZhoXoA11OLg+vXOlwP5qOrz+ gQGJp382/Bvo02mi7NyypKk9+RrlbJmtI3RkaDW6i5gMJdzK286tBfLNZOuF/2UB SWNxQ24YbWPMUKVm2Ml0+o3T7cRVixYMnTCQ2iUT0EROkrLj9oJYQlu2xh1vxmUR lkQz5VbBAHEba5Gj6+nqSJC++Z5mmB9ndqzouEJfNBcqXri59YV8JNSC3U4l -----END CERTIFICATE-----Generated at Thu Mar 26 18:28:30 2026 by rpki-client