$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa File: 03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa (raw, json) Hash identifier: chVRLoQbo5hQHiF6Ds8noxvLR1pngKbMCVwNdpNzicw= Subject key identifier: 54:07:14:B6:98:36:51:F6:31:5B:43:3C:59:07:10:CC:28:E2:23:D8 Certificate issuer: /CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Certificate serial: 010D0C9F4328584D143D17A4DFBCB40EBD098B80 Authority key identifier: 02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 21941 IP address blocks: 198.62.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:17:a4:df:bc:b4:0e:bd:09:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=11dbbf5a-65fc-44bc-84ab-354122ce6b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:89:74:f1:81:2d:90:b0:70:71:06:2b:04:3f: a8:f7:43:e5:b3:38:3f:12:38:e4:31:3b:c8:23:fe: d0:3b:e3:2f:f0:ef:32:41:ac:43:f0:02:73:fc:02: 02:5c:d3:3f:80:2f:0e:e1:c1:44:01:c0:d5:33:90: 61:d9:58:05:74:be:8b:bf:68:6d:03:7a:ac:30:56: be:f7:9e:2f:e4:7d:34:d1:9d:0b:cd:5b:82:37:83: 39:01:2e:6c:88:8d:ce:1c:b4:f6:e5:1f:3c:4b:e3: e7:ae:a9:3c:82:06:88:2f:4e:f5:06:19:d7:90:65: 34:f7:88:13:86:54:4e:46:a5:71:9f:7a:d8:13:51: 60:67:15:bc:61:09:5b:91:ff:26:fa:78:5f:67:77: 72:6b:ad:1f:9b:4d:e1:db:20:b8:30:36:fc:e2:d2: bb:0b:ec:2c:20:05:b9:80:8d:1e:9b:b7:f8:e5:4f: 61:a0:83:1a:db:5b:fa:63:b7:5b:a6:98:05:26:71: 26:54:d9:bd:44:bd:03:8b:64:ab:b3:a4:98:b3:e8: 79:f0:90:0a:f5:c3:13:fa:00:59:a2:6a:d7:6d:2a: 57:81:6f:a3:07:fb:1b:32:0f:61:6c:a5:33:ce:82: 1a:83:2c:c1:82:7a:21:6c:78:75:15:12:74:e1:ba: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:07:14:B6:98:36:51:F6:31:5B:43:3C:59:07:10:CC:28:E2:23:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/03f19a76-74c9-3cd3-ae39-f6cf85a5679e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.crl X509v3 Authority Key Identifier: keyid:02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer sbgp-ipAddrBlock: critical IPv4: 198.62.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b2:26:67:24:c5:22:1b:eb:55:a7:00:25:8b:87:01:2d:d9: 7a:b0:2e:4e:29:d6:09:7c:2b:4b:6f:58:43:11:f0:77:7c:9f: ac:b6:b0:d9:b8:48:9b:bf:4b:d4:f0:19:49:a0:57:01:12:d9: 64:fc:e0:17:59:66:c5:3c:6c:5b:dc:88:62:76:49:e2:8d:1f: 47:23:ff:4f:65:7e:ba:a2:55:1f:e5:cf:65:80:8d:93:07:81: 50:be:a6:9f:96:6c:d3:0c:41:65:1e:91:71:13:6d:09:8e:13: 8d:92:55:cf:33:6f:a5:c1:0f:95:fe:2d:b3:30:23:85:0f:eb: d3:b5:23:24:83:e1:a4:a3:63:cd:4c:47:e2:bb:d1:80:3f:fc: 16:cf:46:e0:68:d1:df:64:ac:ce:33:15:a0:3e:a4:4c:c9:65: 70:7f:30:1c:cb:5a:97:9e:49:de:91:e4:46:81:17:f4:17:86: 72:9d:24:4e:52:74:6e:48:f9:3e:98:8c:09:2d:03:8d:f9:85: 0a:a8:07:66:ca:fa:fa:9e:d7:f9:d9:59:01:d7:83:e5:01:e7: 1f:dd:30:67:1a:f0:38:67:1d:67:1b:e4:e0:80:be:0d:fe:4e: 32:2b:35:c9:4a:f6:b1:36:bd:53:42:e5:57:f9:d7:e4:ea:76: c8:9e:83:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPRek37y0Dr0Ji4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGViZTMzYzAtYTUyYy00MzYyLWFlODAtNGYxZmMxNTky MmExMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTFkYmJmNWEtNjVmYy00NGJjLTg0YWItMzU0MTIyY2U2YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgol08YEtkLBwcQYrBD+o90Plszg/EjjkMTvI I/7QO+Mv8O8yQaxD8AJz/AICXNM/gC8O4cFEAcDVM5Bh2VgFdL6Lv2htA3qsMFa+ 954v5H000Z0LzVuCN4M5AS5siI3OHLT25R88S+Pnrqk8ggaIL071BhnXkGU094gT hlRORqVxn3rYE1FgZxW8YQlbkf8m+nhfZ3dya60fm03h2yC4MDb84tK7C+wsIAW5 gI0em7f45U9hoIMa21v6Y7dbppgFJnEmVNm9RL0Di2Srs6SYs+h58JAK9cMT+gBZ omrXbSpXgW+jB/sbMg9hbKUzzoIagyzBgnohbHh1FRJ04brBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQHFLaYNlH2MVtDPFkHEMwo4iPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJl MzNjMC1hNTJjLTQzNjItYWU4MC00ZjFmYzE1OTIyYTEvMDNmMTlhNzYtNzRjOS0z Y2QzLWFlMzktZjZjZjg1YTU2NzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGViZTMzYzAtYTUyYy00MzYyLWFl ODAtNGYxZmMxNTkyMmExL2RlYmUzM2MwLWE1MmMtNDM2Mi1hZTgwLTRmMWZjMTU5 MjJhMS5jcmwwHwYDVR0jBBgwFoAUAoI5F2CNOITn3mwO8Z9jPlDKbFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZWJlMzNjMC1hNTJjLTQzNjItYWU4MC00ZjFm YzE1OTIyYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxj7vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeyJmckxSIb61WnACWLhwEt2XqwLk4p1gl8K0tvWEMR8Hd8n6y2sNm4 SJu/S9TwGUmgVwES2WT84BdZZsU8bFvciGJ2SeKNH0cj/09lfrqiVR/lz2WAjZMH gVC+pp+WbNMMQWUekXETbQmOE42SVc8zb6XBD5X+LbMwI4UP69O1IySD4aSjY81M R+K70YA//BbPRuBo0d9krM4zFaA+pEzJZXB/MBzLWpeeSd6R5EaBF/QXhnKdJE5S dG5I+T6YjAktA435hQqoB2bK+vqe1/nZWQHXg+UB5x/dMGca8DhnHWcb5OCAvg3+ TjIrNclK9rE2vVNC5Vf51+Tqdsiegzs= -----END CERTIFICATE-----Generated at Fri Mar 27 00:11:35 2026 by rpki-client