$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa File: 1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa (raw, json) Hash identifier: i1iyzR1dmhUwGBZ7vQC2ib9rnpQXgwtpXX+/vw2B5+o= Subject key identifier: DA:50:7E:CB:7E:80:18:A5:0A:DE:7A:87:CD:46:92:2C:A5:96:41:26 Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Certificate serial: 010D0C9F4328584D0A2EAC6E405F9D964AE8ED80 Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa Signing time: Mon 02 Mar 2026 23:33:42 +0000 ROA not before: Mon 02 Mar 2026 23:33:42 +0000 ROA not after: Sun 31 May 2026 22:33:42 +0000 asID: 21769 IP address blocks: 199.30.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:2e:ac:6e:40:5f:9d:96:4a:e8:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85 Validity Not Before: Mar 2 23:33:42 2026 GMT Not After : May 31 22:33:42 2026 GMT Subject: CN=a533e3c4-70f1-4588-bec9-45762a9c70ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:e9:d6:ee:9b:2a:88:ae:56:d2:ab:fd:bd: 0e:87:63:71:13:08:41:ef:57:9e:c0:0c:de:42:29: 73:89:1b:a3:a1:e5:4a:8e:04:de:97:29:d5:d7:14: 72:68:7e:3d:98:b3:3e:4a:79:3c:fd:2f:01:58:ed: 00:ab:5f:e0:e7:7e:ab:62:e8:9b:51:07:87:b4:77: 00:03:31:ce:e6:eb:5c:25:fe:4b:09:87:c8:7b:4e: e5:e6:de:37:a6:4a:ce:c0:e8:ac:46:bc:10:8f:71: e8:9f:42:73:b9:42:f8:6b:ea:b8:2f:3d:47:ab:20: 6e:04:22:cf:27:21:b7:a0:65:98:cf:4b:fd:54:ad: 59:71:5e:b0:e4:22:3c:41:97:ca:8d:5b:1f:4f:23: 05:7d:39:56:8c:2f:59:82:55:7b:68:cf:79:af:6b: 80:ea:b6:17:19:95:c0:2a:14:cc:2f:11:65:50:83: be:77:74:14:04:89:4d:f3:80:54:34:7a:10:6c:29: a1:e2:e1:1b:1f:21:54:a3:ff:43:ba:d9:45:bc:b6: 8f:50:63:be:b3:75:9f:27:a1:fa:3a:2e:0a:ea:ef: 45:61:b8:7f:7f:ee:42:7a:56:ae:50:bc:bc:d9:e9: fe:13:cb:88:d1:fd:96:9e:64:02:37:f5:0f:47:da: 87:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:50:7E:CB:7E:80:18:A5:0A:DE:7A:87:CD:46:92:2C:A5:96:41:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/1f7fd2df-dd16-3ff6-b7e1-a8f36e10bc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl X509v3 Authority Key Identifier: keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer sbgp-ipAddrBlock: critical IPv4: 199.30.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3b:0d:38:a0:29:35:27:67:bc:7b:ae:07:eb:55:0f:c6:7e: 21:ac:25:d7:85:d0:55:95:98:2e:2a:e4:d5:5a:7b:b4:c1:6b: fc:c1:7e:ba:29:d1:69:da:76:8f:7d:e1:e7:22:72:5a:3c:d9: da:1e:d5:65:3f:39:7a:a1:9f:df:f8:7c:38:19:44:a4:9a:f8: 0e:27:a0:47:d6:dc:1b:5b:a7:2a:fe:c4:43:48:7b:a7:4f:5a: 7e:7b:2e:2d:f1:49:1b:9c:e1:dd:fa:cd:39:9b:52:55:96:0f: 9b:8e:b6:3a:2c:9a:89:67:c8:31:72:98:fd:dc:39:d2:c8:a5: e6:59:18:af:c0:35:2b:a3:c5:87:78:fb:62:73:df:c4:1f:03: 63:ff:7f:a6:ea:87:5f:fa:e0:97:67:fc:f4:3a:57:7d:8b:7d: 88:4b:2e:3b:5d:25:de:83:5c:84:cf:99:9d:c9:f0:72:74:a9: e9:b5:99:1b:1f:97:fe:47:30:63:71:98:8d:39:ad:eb:f0:f6: 73:3c:ac:76:64:f7:28:d3:ba:8d:77:c9:5d:b8:a2:b0:93:b7: 26:9c:2b:d0:b7:b4:91:32:d0:1b:d7:d9:2e:c7:21:72:89:37: ea:9d:6c:e2:61:b2:2e:9d:09:ac:99:7f:73:ae:f0:bd:1e:c9: 9f:d3:49:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0KLqxuQF+dlkro7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy ZDg1MB4XDTI2MDMwMjIzMzM0MloXDTI2MDUzMTIyMzM0MlowLzEtMCsGA1UEAxMk YTUzM2UzYzQtNzBmMS00NTg4LWJlYzktNDU3NjJhOWM3MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hXp1u6bKoiuVtKr/b0Oh2NxEwhB71eewAze QilziRujoeVKjgTelynV1xRyaH49mLM+Snk8/S8BWO0Aq1/g536rYuibUQeHtHcA AzHO5utcJf5LCYfIe07l5t43pkrOwOisRrwQj3Hon0JzuUL4a+q4Lz1HqyBuBCLP JyG3oGWYz0v9VK1ZcV6w5CI8QZfKjVsfTyMFfTlWjC9ZglV7aM95r2uA6rYXGZXA KhTMLxFlUIO+d3QUBIlN84BUNHoQbCmh4uEbHyFUo/9DutlFvLaPUGO+s3WfJ6H6 Oi4K6u9FYbh/f+5CelauULy82en+E8uI0f2WnmQCN/UPR9qHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpQfst+gBilCt56h81GkiyllkEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvMWY3ZmQyZGYtZGQxNi0z ZmY2LWI3ZTEtYThmMzZlMTBiYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2 NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU7DTigKTUnZ7x7rgfrVQ/GfiGsJdeF0FWVmC4q5NVae7TBa/zBfrop 0Wnado994eciclo82doe1WU/OXqhn9/4fDgZRKSa+A4noEfW3Btbpyr+xENIe6dP Wn57Li3xSRuc4d36zTmbUlWWD5uOtjosmolnyDFymP3cOdLIpeZZGK/ANSujxYd4 +2Jz38QfA2P/f6bqh1/64Jdn/PQ6V32LfYhLLjtdJd6DXITPmZ3J8HJ0qem1mRsf l/5HMGNxmI05revw9nM8rHZk9yjTuo13yV24orCTtyacK9C3tJEy0BvX2S7HIXKJ N+qdbOJhsi6dCayZf3Ou8L0eyZ/TSWQ= -----END CERTIFICATE-----Generated at Tue Mar 3 15:17:47 2026 by rpki-client