$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa File: 252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa (raw, json) Hash identifier: JIvA6AxronRl2RE1nwiRhmRVXf9FXGbALnpgBzZmYNg= Subject key identifier: 6D:A0:D9:B4:7B:7C:3F:C2:31:80:F5:83:52:28:79:B6:42:D8:DA:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E8E184D7546178591D70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 199.36.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e8:e1:84:d7:54:61:78:59:1d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5a2d5743-5e29-43aa-b1cc-a50a1d44108f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:2a:dc:5f:70:a2:94:60:3c:76:d8:e9:53: 86:d3:03:89:52:f2:9d:82:3f:c5:29:35:3b:4a:32: 76:41:7a:46:be:a8:da:5a:76:39:0d:38:60:ae:2f: 1e:a6:9d:c0:35:c6:ea:8f:67:62:0a:31:44:e1:8c: 9b:61:96:b5:55:2d:b3:e9:24:bf:a3:3e:ff:85:1c: b3:7d:a1:5b:2c:63:b1:87:da:61:a9:94:a7:64:94: 9f:a8:71:92:ac:53:02:70:c5:c8:29:8a:a1:23:8a: 29:ea:41:86:29:87:d4:fd:cc:6e:68:5a:a5:5b:b1: 7b:4c:2a:fc:a7:04:9a:b4:28:a4:2c:2c:2b:bf:85: 46:d7:9b:c1:10:a1:f6:b7:e0:86:a7:82:26:81:6f: b3:d0:80:fe:b7:ff:00:18:95:a6:86:90:2e:4c:d1: 90:c0:a5:ef:67:7b:ab:ed:2b:2d:ef:9b:5a:fd:2b: ab:c6:aa:97:5a:ee:10:f2:a6:62:fd:06:94:b7:69: 90:b9:33:83:c4:a6:fb:a4:f5:41:b6:2c:ed:58:21: 68:30:44:0c:aa:bc:9d:21:14:a8:96:06:42:89:1a: 43:a6:00:f6:0c:c7:f3:ae:dd:f6:cc:7e:7d:be:ae: c4:3f:35:4f:11:08:18:2d:9f:c3:53:5b:b5:61:31: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A0:D9:B4:7B:7C:3F:C2:31:80:F5:83:52:28:79:B6:42:D8:DA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fa:9a:41:0e:17:24:a1:50:ba:1c:4c:e8:6c:d8:74:62:6e: 58:83:f2:7b:b4:45:41:b3:66:f6:c2:80:5a:c8:05:b7:a6:a1: cf:9b:06:d6:4b:cb:b8:77:79:9c:17:5c:d1:1f:8d:22:b6:f5: b7:38:e3:8d:1e:a4:5b:d1:44:89:2f:19:ef:50:b3:86:b2:62: 41:83:06:aa:05:42:02:2b:f4:ca:8c:68:37:c3:e5:f5:1a:9c: 27:5b:a8:e5:27:3b:a2:bd:f7:03:09:80:20:5a:dd:68:92:9e: 36:84:8d:9f:ff:76:7c:0d:18:48:67:9f:9b:29:e8:29:cc:f0: eb:50:f0:12:95:80:c6:28:f1:80:d4:59:6f:96:6c:34:5c:4e: 83:75:66:25:e5:f9:f6:e2:bf:ed:26:8d:c4:3f:6e:bf:8a:e6: a1:a6:06:ea:79:4b:48:3f:bc:8f:ed:bf:c9:21:c2:43:71:b4: 9e:15:c2:7b:d3:db:36:a1:28:08:6e:91:c7:e1:36:78:f8:5f: 18:cf:c5:6a:96:d3:d7:5b:f6:a1:9a:2e:4d:d5:bd:79:51:6d: a8:8f:e8:86:23:a4:cd:4a:04:3c:55:b1:e8:5f:aa:5a:14:0a: dc:e5:d7:a0:ce:ee:db:a0:3f:5d:36:79:b0:e7:53:3c:df:00: 96:9d:db:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OjhhNdUYXhZHXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWEyZDU3NDMtNWUyOS00M2FhLWIxY2MtYTUwYTFkNDQxMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnogq3F9wopRgPHbY6VOG0wOJUvKdgj/FKTU7 SjJ2QXpGvqjaWnY5DThgri8epp3ANcbqj2diCjFE4YybYZa1VS2z6SS/oz7/hRyz faFbLGOxh9phqZSnZJSfqHGSrFMCcMXIKYqhI4op6kGGKYfU/cxuaFqlW7F7TCr8 pwSatCikLCwrv4VG15vBEKH2t+CGp4ImgW+z0ID+t/8AGJWmhpAuTNGQwKXvZ3ur 7Sst75ta/SurxqqXWu4Q8qZi/QaUt2mQuTODxKb7pPVBtiztWCFoMEQMqrydIRSo lgZCiRpDpgD2DMfzrt32zH59vq7EPzVPEQgYLZ/DU1u1YTF5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2g2bR7fD/CMYD1g1IoebZC2NrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjUyZjNhZTgtN2FlYS0z OTg5LThiNjItZjFiYmU1YzljM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf6mkEOFyShULocTOhs2HRibliD8nu0RUGzZvbCgFrIBbemoc+bBtZL y7h3eZwXXNEfjSK29bc4440epFvRRIkvGe9Qs4ayYkGDBqoFQgIr9MqMaDfD5fUa nCdbqOUnO6K99wMJgCBa3WiSnjaEjZ//dnwNGEhnn5sp6CnM8OtQ8BKVgMYo8YDU WW+WbDRcToN1ZiXl+fbiv+0mjcQ/br+K5qGmBup5S0g/vI/tv8khwkNxtJ4VwnvT 2zahKAhukcfhNnj4XxjPxWqW09db9qGaLk3VvXlRbaiP6IYjpM1KBDxVsehfqloU Ctzl16DO7tugP102ebDnUzzfAJad248= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:31 2026 by rpki-client