$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa File: 1480a659-dff0-3379-854a-3902b5d6c9ea.roa (raw, json) Hash identifier: WVZIVNo0fpzZCK+toEL3gpmTHdiOXkizj+Tjb23puuA= Subject key identifier: D9:78:3C:DF:07:A2:72:FA:AA:BF:05:5A:0C:BE:E1:FE:8B:F7:F0:1F Certificate issuer: /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Certificate serial: 010D0C9F4328584D571FA104EB084791E2CF3480 Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 198.99.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a1:04:eb:08:47:91:e2:cf:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=48875631-0f40-4b26-9b64-a13995882d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:6d:96:0d:61:03:dc:d0:0d:cd:d0:c0:44: 3c:6d:6d:36:17:24:69:6d:1b:fd:f4:3b:a5:db:fd: ca:96:c3:b6:5a:21:43:71:6d:c7:c0:ad:cb:2e:1d: 62:f9:45:a0:3e:89:26:80:8d:b1:82:3b:ff:39:6f: 94:17:a9:7d:62:fd:d2:ae:07:de:7c:b5:7c:1a:5f: 4e:7c:0c:b0:20:d8:9f:b0:3a:26:cf:9d:dc:b3:a5: da:90:d5:2e:a9:89:68:41:6b:dd:b0:eb:f0:c5:b2: 33:4a:f7:dd:fc:d8:a5:af:d6:0f:9d:87:f9:d3:4b: 24:77:34:8e:66:5a:75:50:ba:be:8d:94:11:c3:12: 50:04:a3:72:19:07:52:e0:b5:de:69:85:3c:d6:99: 73:49:c5:2f:e7:ea:90:3a:e4:26:0a:7b:6a:f8:f1: 9b:3b:2b:d6:2e:b1:e0:ea:1a:dc:67:81:a2:ce:55: 72:fb:82:c7:b1:15:8f:1d:21:22:5e:37:b1:75:ef: 82:c3:72:7d:d5:7a:4d:68:cd:ef:2a:c3:88:8b:53: 90:37:ac:c6:55:39:cd:99:b0:7c:cc:35:d7:45:5b: af:70:6a:af:03:f3:cc:bc:3d:97:5e:cd:ff:c5:20: c1:da:6f:e1:76:3f:4d:cc:c5:53:4d:b4:de:f3:7b: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:78:3C:DF:07:A2:72:FA:AA:BF:05:5A:0C:BE:E1:FE:8B:F7:F0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl X509v3 Authority Key Identifier: keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer sbgp-ipAddrBlock: critical IPv4: 198.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cf:8e:d5:34:5c:43:18:79:d7:04:2d:2b:ba:32:5d:99:8a: 65:cb:b8:3d:d8:24:e6:3c:bf:6f:1e:31:e5:78:db:3a:62:cb: 20:55:77:17:bd:24:9b:c1:23:6d:a2:11:70:c7:0e:00:ac:ab: 87:b5:d2:df:0a:98:dc:0e:c3:6b:7a:2f:52:4d:70:9e:d8:7e: 32:cb:2d:60:04:2f:b5:b5:15:36:67:f4:d5:95:39:bf:cc:ff: 06:f2:a9:e9:fa:3a:13:30:9a:fd:fe:9e:4c:4f:7e:b4:73:79: 41:e2:c9:da:11:31:c7:a5:1f:04:72:10:6e:35:5c:a8:b2:6f: 2b:fa:f0:d5:0b:fa:1e:d8:c9:c2:37:ba:52:48:b8:0b:45:c4: 0c:83:53:30:a7:31:bc:02:76:01:c1:56:76:5e:7d:17:0b:a4: 5a:cd:14:b4:a4:e5:f5:99:1a:1b:ca:7d:75:72:02:3c:2d:cd: 20:ba:a3:dc:68:b2:f5:ed:c0:3f:c8:8a:1e:a7:20:71:4c:3e: 45:c6:db:4f:a7:8a:28:59:9b:69:88:82:5a:86:43:74:81:14: eb:b0:6c:46:18:91:0b:e6:3c:6a:ce:7e:4e:d2:45:ba:16:48: 2c:8f:a2:67:5b:ce:17:0d:a2:80:0a:a9:8e:7c:98:fd:ec:b3: 7d:ba:dc:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6EE6whHkeLPNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyYWQ5MjMtN2RiYy00ZWQ0LWIzNTEtZTJmZDIzNTlh MjE2MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NDg4NzU2MzEtMGY0MC00YjI2LTliNjQtYTEzOTk1ODgyZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfNtlg1hA9zQDc3QwEQ8bW02FyRpbRv99Dul 2/3KlsO2WiFDcW3HwK3LLh1i+UWgPokmgI2xgjv/OW+UF6l9Yv3SrgfefLV8Gl9O fAywINifsDomz53cs6XakNUuqYloQWvdsOvwxbIzSvfd/Nilr9YPnYf500skdzSO Zlp1ULq+jZQRwxJQBKNyGQdS4LXeaYU81plzScUv5+qQOuQmCntq+PGbOyvWLrHg 6hrcZ4GizlVy+4LHsRWPHSEiXjexde+Cw3J91XpNaM3vKsOIi1OQN6zGVTnNmbB8 zDXXRVuvcGqvA/PMvD2XXs3/xSDB2m/hdj9NzMVTTbTe83sacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl4PN8HonL6qr8FWgy+4f6L9/AfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJh ZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1OWEyMTYvMTQ4MGE2NTktZGZmMC0z Mzc5LTg1NGEtMzkwMmI1ZDZjOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGEyYWQ5MjMtN2RiYy00ZWQ0LWIz NTEtZTJmZDIzNTlhMjE2LzhhMmFkOTIzLTdkYmMtNGVkNC1iMzUxLWUyZmQyMzU5 YTIxNi5jcmwwHwYDVR0jBBgwFoAU+H4ZrPkNEkj/s8hXYlR6Eqwb0xkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZk MjM1OWEyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnPjtU0XEMYedcELSu6Ml2ZimXLuD3YJOY8v28eMeV42zpiyyBVdxe9 JJvBI22iEXDHDgCsq4e10t8KmNwOw2t6L1JNcJ7YfjLLLWAEL7W1FTZn9NWVOb/M /wbyqen6OhMwmv3+nkxPfrRzeUHiydoRMcelHwRyEG41XKiybyv68NUL+h7YycI3 ulJIuAtFxAyDUzCnMbwCdgHBVnZefRcLpFrNFLSk5fWZGhvKfXVyAjwtzSC6o9xo svXtwD/Iih6nIHFMPkXG20+niihZm2mIglqGQ3SBFOuwbEYYkQvmPGrOfk7SRboW SCyPomdbzhcNooAKqY58mP3ss3263PQ= -----END CERTIFICATE-----Generated at Tue Apr 7 13:29:59 2026 by rpki-client