$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d5db21-3550-366d-8de9-4f6cbcb510c8.roa File: c8d5db21-3550-366d-8de9-4f6cbcb510c8.roa (raw, json) Hash identifier: tDDhF6RKIigyvTJI6NRZUIfGAI9HTcEvHlFRx/XPJew= Subject key identifier: 97:9E:EE:44:3A:A8:11:D5:CE:57:0D:06:C5:F2:9B:63:AA:E4:24:55 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CD44E91732F44B5DA600 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d5db21-3550-366d-8de9-4f6cbcb510c8.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 199.21.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cd:44:e9:17:32:f4:4b:5d:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=f92557c6-0af3-458b-a131-7e0f082ee3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:99:8e:51:60:72:e1:f9:9c:2a:8b:f0:e9:5f: 2b:77:1d:91:7f:4b:67:db:db:30:5d:7e:32:a1:2b: 3f:b8:93:1c:c1:22:de:d5:5c:e9:83:0e:fc:de:01: 7e:c5:5f:43:11:f4:33:f9:c1:c9:b6:25:b0:da:7a: 22:14:94:c1:18:d2:6f:55:0d:19:41:16:72:26:14: 84:bf:ad:85:d2:94:6c:b7:4d:5a:bf:d0:86:5e:2b: 12:19:dd:0e:37:90:58:24:37:43:2c:c4:9c:e9:39: 64:23:ae:68:cd:af:f6:21:32:04:ac:ff:e2:e0:e2: 98:2f:ca:b8:bc:60:ba:94:bf:4a:04:cc:74:22:d3: 0e:9a:0d:9c:18:9f:9e:5a:ea:f5:7a:1b:1c:ea:ca: 9f:36:43:63:d8:32:f1:e6:3d:f1:c8:c5:37:69:de: 0d:07:07:4e:c8:b7:f9:67:e7:13:22:ea:d0:99:3e: 63:8b:83:a3:a1:59:ae:66:e1:58:3f:6c:54:bc:92: c8:93:b1:e2:30:8d:33:39:38:77:61:5d:94:61:dc: 0e:eb:a9:d2:87:1a:ee:c9:e2:73:b7:31:c0:24:f2: 9a:10:64:42:a7:27:07:fb:c9:4b:9f:3e:de:49:87: bf:e7:31:b3:95:8a:08:70:d4:e5:67:8d:8f:48:02: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9E:EE:44:3A:A8:11:D5:CE:57:0D:06:C5:F2:9B:63:AA:E4:24:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/c8d5db21-3550-366d-8de9-4f6cbcb510c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 199.21.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:07:dc:50:f0:21:d0:4e:0d:12:45:a8:cd:7b:f7:fc:ad:42: da:3c:73:ac:98:76:93:4f:a0:d1:77:d8:a5:66:c6:cc:d3:61: 1c:62:fc:69:30:4c:ce:67:44:03:40:3e:71:49:09:a6:ed:d3: 70:91:02:75:77:ef:45:d9:05:7d:be:bc:e5:1b:e4:97:a6:3a: 6d:c2:23:2c:15:6c:52:f7:d9:2c:00:b3:1e:16:bb:93:67:33: 9a:3c:27:c2:b8:39:e4:90:76:ca:31:00:5e:9d:40:4b:bb:b7: 41:16:a8:d2:37:7a:79:10:17:f3:f9:69:17:97:df:c3:35:da: 69:ba:08:62:02:93:63:46:30:89:f1:bc:89:fe:af:ae:63:af: b7:30:f2:dc:9b:e3:d6:6b:e8:ee:f5:71:39:2c:cc:09:c9:15: 68:a8:6d:b9:a2:43:a8:4e:54:45:96:ea:80:3d:0d:40:2d:a2: b4:58:de:33:35:e5:cd:2b:6d:5b:0a:a4:2e:98:92:19:a5:0d: 24:3e:42:21:e1:8f:7b:14:6e:c7:26:c0:a7:5d:c0:e5:79:fc: 69:9f:09:11:3b:e7:ab:85:a8:00:9a:92:e1:bd:2a:9c:59:19: 75:8e:43:d4:79:2e:38:08:ae:68:13:46:ff:ad:31:9e:e8:e0: f4:60:73:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM1E6Rcy9EtdpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjkyNTU3YzYtMGFmMy00NThiLWExMzEtN2UwZjA4MmVlM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZmOUWBy4fmcKovw6V8rdx2Rf0tn29swXX4y oSs/uJMcwSLe1Vzpgw783gF+xV9DEfQz+cHJtiWw2noiFJTBGNJvVQ0ZQRZyJhSE v62F0pRst01av9CGXisSGd0ON5BYJDdDLMSc6TlkI65oza/2ITIErP/i4OKYL8q4 vGC6lL9KBMx0ItMOmg2cGJ+eWur1ehsc6sqfNkNj2DLx5j3xyMU3ad4NBwdOyLf5 Z+cTIurQmT5ji4OjoVmuZuFYP2xUvJLIk7HiMI0zOTh3YV2UYdwO66nShxruyeJz tzHAJPKaEGRCpycH+8lLnz7eSYe/5zGzlYoIcNTlZ42PSALB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJee7kQ6qBHVzlcNBsXym2Oq5CRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvYzhkNWRiMjEtMzU1MC0z NjZkLThkZTktNGY2Y2JjYjUxMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUH3FDwIdBODRJFqM179/ytQto8c6yYdpNPoNF32KVmxszTYRxi/Gkw TM5nRANAPnFJCabt03CRAnV370XZBX2+vOUb5JemOm3CIywVbFL32SwAsx4Wu5Nn M5o8J8K4OeSQdsoxAF6dQEu7t0EWqNI3enkQF/P5aReX38M12mm6CGICk2NGMInx vIn+r65jr7cw8tyb49Zr6O71cTkszAnJFWiobbmiQ6hOVEWW6oA9DUAtorRY3jM1 5c0rbVsKpC6YkhmlDSQ+QiHhj3sUbscmwKddwOV5/GmfCRE756uFqACakuG9KpxZ GXWOQ9R5LjgIrmgTRv+tMZ7o4PRgc30= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:03 2026 by rpki-client