$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa File: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (raw, json) Hash identifier: TqOI7y/KYDiQZSnzFG5x7/UKcl45QJ0JHR8ORyMM3Jk= Subject key identifier: D0:3F:C6:63:32:52:FD:16:4C:81:5C:42:3F:B6:02:9B:5E:43:FF:AE Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584D4D5A93F24097559CA5F75380 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 393468 IP address blocks: 199.185.120.0/23 maxlen: 23 199.185.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:93:f2:40:97:55:9c:a5:f7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=97809771-07af-4e40-8bed-3f9b16b1ecdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:4e:f9:04:cd:85:55:04:4c:24:6b:57:13: e1:bb:64:fd:94:8a:2c:c7:8a:f2:de:7b:ce:20:a1: be:0a:98:31:bf:9b:54:86:09:ec:4f:f0:46:e6:9e: 0d:0d:d6:3d:71:1a:e0:bb:61:5f:2a:02:79:69:88: f8:09:ca:13:d7:11:83:0c:03:24:59:d8:1f:eb:09: 31:9e:93:a3:92:fb:42:92:e9:fa:e5:5e:1d:28:91: 81:a0:54:98:99:31:73:39:1d:da:c3:3a:82:5e:69: 85:66:b1:cf:77:db:fa:14:f6:c8:86:e2:0a:08:fc: 05:1f:de:42:f6:7f:3d:9d:53:4b:48:31:26:26:0c: 66:03:79:c9:f7:ec:02:9e:22:8f:db:07:fd:97:91: ed:3f:fb:9f:76:96:4d:a7:3a:b6:cd:34:44:2b:16: d8:35:d3:e3:71:df:b4:38:7c:23:23:35:d9:93:c4: 2f:87:96:b0:90:18:aa:00:5d:8e:0c:b7:0f:a4:d1: 90:ad:da:21:f2:69:7c:ba:31:bb:7f:4c:51:ef:f0: 14:f7:75:0d:84:89:06:fc:ea:ee:d6:22:63:e7:72: 12:94:48:c2:24:82:07:3d:85:38:ce:57:b6:c4:ed: 91:6d:ac:8d:62:3f:ef:e7:f2:cd:1e:94:79:55:16: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3F:C6:63:32:52:FD:16:4C:81:5C:42:3F:B6:02:9B:5E:43:FF:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: 199.185.120.0-199.185.122.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b3:95:67:2e:1f:bf:23:e2:ee:25:5d:bc:99:e1:a2:78:85: 42:80:ad:b5:2f:ae:27:df:50:64:f2:a6:c5:9f:51:0c:03:08: d0:1b:33:85:53:c5:6f:70:d8:f2:11:8c:4f:ab:68:f2:51:80: d4:5a:e0:9f:0f:db:3e:8e:73:a5:98:3f:85:db:75:ef:ee:05: a4:06:59:c1:59:5e:60:af:b3:cf:26:00:62:91:02:83:40:5b: fc:93:e4:1e:2a:9b:b4:26:73:fd:35:00:66:79:4c:04:fd:c8: af:37:15:76:f1:0f:c4:30:f2:08:4d:44:33:de:43:e5:63:7e: f8:a7:bc:21:71:8a:76:82:f7:4b:ba:3a:7a:27:9c:b1:35:f5: 46:34:6f:7b:5e:21:ef:d1:09:06:e3:7a:f7:90:88:93:c5:98: 1a:3f:71:fd:22:ae:c1:02:d2:80:3f:46:05:1f:f6:f2:73:d9: 10:b9:88:e3:bf:0e:b9:a2:42:b4:fb:66:6f:19:ce:15:0f:23: a3:31:6e:6b:95:e0:9d:5b:64:d6:f4:0e:7c:9c:f8:8e:56:81: 2c:01:c5:8a:d2:37:45:ce:81:d7:49:8e:36:a9:50:70:50:97: 0a:c7:34:e3:54:e8:d0:cd:80:13:c9:8f:dd:9b:4a:02:c6:c6: b1:24:72:ca -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1NWpPyQJdVnKX3U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTc4MDk3NzEtMDdhZi00ZTQwLThiZWQtM2Y5YjE2YjFlY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme5O+QTNhVUETCRrVxPhu2T9lIosx4ry3nvO IKG+Cpgxv5tUhgnsT/BG5p4NDdY9cRrgu2FfKgJ5aYj4CcoT1xGDDAMkWdgf6wkx npOjkvtCkun65V4dKJGBoFSYmTFzOR3awzqCXmmFZrHPd9v6FPbIhuIKCPwFH95C 9n89nVNLSDEmJgxmA3nJ9+wCniKP2wf9l5HtP/ufdpZNpzq2zTREKxbYNdPjcd+0 OHwjIzXZk8Qvh5awkBiqAF2ODLcPpNGQrdoh8ml8ujG7f0xR7/AU93UNhIkG/Oru 1iJj53ISlEjCJIIHPYU4zle2xO2RbayNYj/v5/LNHpR5VRY7MQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNA/xmMyUv0WTIFcQj+2ApteQ/+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMzU0NGE0NzEtMjdjYS0z ZDhiLTlmOGEtNmZhMmY2MTM0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPHuXgD BADHuXowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAYLOVZy4fvyPi7iVdvJnhoniFQoCttS+uJ99QZPKmxZ9R DAMI0BszhVPFb3DY8hGMT6to8lGA1Frgnw/bPo5zpZg/hdt17+4FpAZZwVleYK+z zyYAYpECg0Bb/JPkHiqbtCZz/TUAZnlMBP3IrzcVdvEPxDDyCE1EM95D5WN++Ke8 IXGKdoL3S7o6eiecsTX1RjRve14h79EJBuN695CIk8WYGj9x/SKuwQLSgD9GBR/2 8nPZELmI478OuaJCtPtmbxnOFQ8jozFua5XgnVtk1vQOfJz4jlaBLAHFitI3Rc6B 10mONqlQcFCXCsc041To0M2AE8mP3ZtKAsbGsSRyyg== -----END CERTIFICATE-----Generated at Tue Apr 7 16:32:34 2026 by rpki-client