$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa File: 9464385d-488a-39dc-81c1-88e77971887a.roa (raw, json) Hash identifier: aj7wrGVLWNW5IZmxM2PMDHXYK5ZUdDPKC+jWSjNANM4= Subject key identifier: 27:7A:53:0B:2D:77:AD:90:21:9C:81:8D:1D:E2:62:E0:80:E3:6A:A4 Certificate issuer: /CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Certificate serial: 010D0C9F4328584D2644BCB41E00DA91DD6B4820 Authority key identifier: 66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 32659 IP address blocks: 199.204.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bc:b4:1e:00:da:91:dd:6b:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=ade93ee0-8103-4bc0-b326-46be78681446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:91:7c:81:63:8d:e2:15:61:b8:16:f2:d0: 0c:2b:57:46:51:06:5d:29:6d:8b:02:6c:19:75:f1: c6:38:97:e1:21:e7:40:ee:10:a1:c7:a6:8a:62:db: a8:8c:b0:6b:96:bc:cd:0d:d2:93:c8:23:a4:63:07: 48:30:53:cc:cb:f7:15:ea:6b:a0:bf:eb:fc:11:73: a3:b6:c8:23:12:6f:5e:3d:e5:9d:a2:a0:7b:4c:ac: 62:07:3d:d9:be:73:f7:77:e6:13:20:bb:bb:c7:cc: 54:bc:4f:af:56:be:83:19:c2:61:6c:39:f8:c9:94: ae:23:ca:9d:a5:18:c6:88:8d:26:95:42:75:23:56: 33:ab:76:aa:8e:24:dd:31:58:d0:ef:21:92:3c:ea: 66:94:ac:dd:20:f8:93:69:b2:b2:49:2f:11:c1:ba: 48:3c:c0:33:ad:1d:2b:37:c1:d5:33:4f:99:2d:d9: 4d:6b:46:cd:13:7c:58:a9:e3:e3:e1:41:5c:07:96: 5d:d3:82:0f:a2:8a:ec:cf:fd:40:d5:34:64:3a:50: 18:11:9b:f8:63:73:50:1a:98:db:2e:4b:b4:c8:7e: 9c:bd:6b:1e:3f:43:93:0f:04:70:85:35:ad:52:28: 84:7c:8f:cf:0b:de:91:4b:57:28:8d:af:db:51:40: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7A:53:0B:2D:77:AD:90:21:9C:81:8D:1D:E2:62:E0:80:E3:6A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl X509v3 Authority Key Identifier: keyid:66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer sbgp-ipAddrBlock: critical IPv4: 199.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:26:14:b9:1f:08:f9:76:43:e0:42:5d:8e:06:29:93:e0:3d: a3:7d:82:a7:4e:29:d0:7f:b1:31:3d:0a:01:81:67:dc:5f:09: 5d:5e:38:e2:11:23:cb:c1:02:7a:02:6a:6c:00:e6:77:73:aa: 7d:a1:f9:ca:bd:87:9c:62:ac:b9:1d:9f:c2:41:29:87:cc:f0: b0:de:fe:ca:a4:b7:44:b0:bd:ca:b3:aa:f7:a5:57:4a:df:db: 13:4f:eb:36:f4:82:64:6b:67:35:b8:5e:1f:08:55:b2:15:85: df:1c:6a:72:9b:17:10:c4:41:28:78:f7:ed:64:57:64:79:75: e2:76:df:d3:78:16:fd:1e:ac:c3:34:8b:3f:d8:39:58:f9:b2: 9e:e1:ac:23:53:14:9d:7b:c7:c2:1d:67:3b:e9:0f:1e:92:09: 3c:c6:99:8a:e5:98:12:20:35:22:bf:21:9f:4f:f7:eb:aa:e0: 63:f6:5b:10:07:fa:6b:35:76:07:f1:97:37:fb:41:6b:88:54: f0:d4:5c:1e:fd:c1:24:e9:c8:14:6f:1d:1c:3a:b3:2f:ba:73: 49:3a:08:f9:7f:ab:f2:5a:37:6d:a8:f8:d2:6e:b0:95:0d:5e: 78:e7:46:39:39:4b:dd:db:95:81:3e:aa:20:4c:ac:c0:83:e3: 86:16:52:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLy0HgDakd1rSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzIwYmYxZjUtYmZkYy00ZTliLWFlYzktNDVmMTY1MjVh ZmJlMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YWRlOTNlZTAtODEwMy00YmMwLWIzMjYtNDZiZTc4NjgxNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz66RfIFjjeIVYbgW8tAMK1dGUQZdKW2LAmwZ dfHGOJfhIedA7hChx6aKYtuojLBrlrzNDdKTyCOkYwdIMFPMy/cV6mugv+v8EXOj tsgjEm9ePeWdoqB7TKxiBz3ZvnP3d+YTILu7x8xUvE+vVr6DGcJhbDn4yZSuI8qd pRjGiI0mlUJ1I1Yzq3aqjiTdMVjQ7yGSPOpmlKzdIPiTabKySS8RwbpIPMAzrR0r N8HVM0+ZLdlNa0bNE3xYqePj4UFcB5Zd04IPoorsz/1A1TRkOlAYEZv4Y3NQGpjb Lku0yH6cvWseP0OTDwRwhTWtUiiEfI/PC96RS1coja/bUUByxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCd6Uwstd62QIZyBjR3iYuCA42qkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83MjBi ZjFmNS1iZmRjLTRlOWItYWVjOS00NWYxNjUyNWFmYmUvOTQ2NDM4NWQtNDg4YS0z OWRjLTgxYzEtODhlNzc5NzE4ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzIwYmYxZjUtYmZkYy00ZTliLWFl YzktNDVmMTY1MjVhZmJlLzcyMGJmMWY1LWJmZGMtNGU5Yi1hZWM5LTQ1ZjE2NTI1 YWZiZS5jcmwwHwYDVR0jBBgwFoAUZsfrsk0mhhZ6d+zsS5XXMAOBXg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83MjBiZjFmNS1iZmRjLTRlOWItYWVjOS00NWYx NjUyNWFmYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAmFLkfCPl2Q+BCXY4GKZPgPaN9gqdOKdB/sTE9CgGBZ9xfCV1eOOIR I8vBAnoCamwA5ndzqn2h+cq9h5xirLkdn8JBKYfM8LDe/sqkt0SwvcqzqvelV0rf 2xNP6zb0gmRrZzW4Xh8IVbIVhd8canKbFxDEQSh49+1kV2R5deJ239N4Fv0erMM0 iz/YOVj5sp7hrCNTFJ17x8IdZzvpDx6SCTzGmYrlmBIgNSK/IZ9P9+uq4GP2WxAH +ms1dgfxlzf7QWuIVPDUXB79wSTpyBRvHRw6sy+6c0k6CPl/q/JaN22o+NJusJUN XnjnRjk5S93blYE+qiBMrMCD44YWUgk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:23:14 2026 by rpki-client