$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/3c5b9b6c-5584-3980-a0da-1887060b5dff.roa File: 3c5b9b6c-5584-3980-a0da-1887060b5dff.roa (raw, json) Hash identifier: KexL/7fRyDCQmdx73HEY0qf7y2wN+8WB3WXXfXtjr8k= Subject key identifier: 99:0B:84:89:2F:58:8D:DA:3E:31:8A:76:76:4F:80:65:EA:BE:10:1B Certificate issuer: /CN=4113c935-d29d-41b5-bec0-a7395bdeac99 Certificate serial: 010D0C9F4328584D569F20949747ADD5BF49B5C0 Authority key identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/3c5b9b6c-5584-3980-a0da-1887060b5dff.roa Signing time: Mon 30 Mar 2026 08:41:43 +0000 ROA not before: Mon 30 Mar 2026 08:41:43 +0000 ROA not after: Sun 28 Jun 2026 06:56:55 +0000 asID: 36086 IP address blocks: 199.195.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:56:9f:20:94:97:47:ad:d5:bf:49:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4113c935-d29d-41b5-bec0-a7395bdeac99 Validity Not Before: Mar 30 08:41:43 2026 GMT Not After : Jun 28 06:56:55 2026 GMT Subject: CN=e6819b3a-3da4-4d15-8d12-fcf67e7ee7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:15:e0:3d:f2:f4:a8:06:6d:4d:9b:82:64: ef:7d:de:45:a4:17:61:4f:10:72:5f:6b:64:f7:0c: 69:40:70:1d:a8:83:ca:43:b9:2f:09:f8:ee:83:d8: 7e:a0:65:81:fb:4a:3d:7e:3c:0d:9b:68:26:10:3a: 52:e2:15:f5:d4:d2:22:2f:ef:c8:ee:f0:7b:62:96: 80:ab:43:c0:d1:de:44:47:66:7a:46:cd:12:05:f3: a5:09:32:58:fd:a9:7c:38:e1:cb:fc:f2:10:62:84: 5c:0a:01:00:d5:d2:a1:ad:fd:f5:15:bc:66:23:28: d4:06:4e:e4:0c:fe:95:ab:08:39:84:f9:99:26:14: d6:d8:79:ec:7e:02:8a:32:e4:bd:7f:c3:f9:c1:63: 09:56:c4:13:05:57:26:fc:59:bc:43:b8:7a:21:ec: 05:8a:b7:29:39:ca:ae:03:d5:41:b4:7b:12:c2:37: bb:0c:84:00:56:8c:cb:ae:b3:f0:90:f3:c8:5d:26: 8e:79:d3:a2:a2:a9:98:da:ef:a4:9f:b4:02:b4:6c: 14:0e:f9:2d:b9:3d:85:18:43:f7:b9:a7:54:d4:35: 01:0d:06:be:ae:5c:76:a9:0f:2f:93:d4:ae:80:44: 9b:26:df:b0:7b:24:03:5b:a2:12:41:76:37:68:1c: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0B:84:89:2F:58:8D:DA:3E:31:8A:76:76:4F:80:65:EA:BE:10:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/3c5b9b6c-5584-3980-a0da-1887060b5dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.crl X509v3 Authority Key Identifier: keyid:18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer sbgp-ipAddrBlock: critical IPv4: 199.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d6:a0:e7:5c:c0:12:2b:04:cf:29:41:71:46:90:d6:f7:82: d2:89:66:bb:2c:6b:51:9c:bc:53:43:8f:a8:47:43:1c:00:b5: 78:4b:40:20:dd:00:e8:83:22:1b:37:df:6e:29:6d:41:ef:a8: d7:be:40:39:ee:a3:26:b3:4b:4c:e3:04:ec:ab:b5:02:3f:81: c2:8b:65:72:e5:38:eb:f3:33:f9:3c:f0:f7:8f:51:8f:68:26: 79:f8:cf:cc:c0:1c:f3:7f:28:d7:60:15:b8:c5:7f:a6:8d:fb: 72:72:71:7c:00:d0:57:14:62:27:0c:73:82:2b:15:bf:f1:38: 38:b3:36:88:e3:75:c0:50:a4:61:0b:9c:6c:f2:bc:f5:bc:96: 3d:24:8b:ff:20:07:d5:c1:ab:a0:cd:d9:ec:f7:3d:88:bc:81: 38:b6:ab:a5:d0:b1:74:09:fc:f4:9a:14:7d:10:7d:58:26:bb: 24:48:67:ca:ce:7c:e6:5d:28:0e:3c:72:8c:e6:dc:cc:3b:4c: 74:ce:83:00:da:0a:f3:58:ed:08:20:5b:2b:f8:ac:74:0b:95: ea:4b:90:a5:a5:e1:0b:5b:91:47:00:84:10:cb:b8:3c:1d:99: bd:40:9e:33:a5:8f:97:ab:96:1e:ea:2a:43:db:ef:ee:41:0e: c4:7c:b9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1WnyCUl0et1b9JtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDExM2M5MzUtZDI5ZC00MWI1LWJlYzAtYTczOTViZGVh Yzk5MB4XDTI2MDMzMDA4NDE0M1oXDTI2MDYyODA2NTY1NVowLzEtMCsGA1UEAxMk ZTY4MTliM2EtM2RhNC00ZDE1LThkMTItZmNmNjdlN2VlN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGsV4D3y9KgGbU2bgmTvfd5FpBdhTxByX2tk 9wxpQHAdqIPKQ7kvCfjug9h+oGWB+0o9fjwNm2gmEDpS4hX11NIiL+/I7vB7YpaA q0PA0d5ER2Z6Rs0SBfOlCTJY/al8OOHL/PIQYoRcCgEA1dKhrf31FbxmIyjUBk7k DP6Vqwg5hPmZJhTW2HnsfgKKMuS9f8P5wWMJVsQTBVcm/Fm8Q7h6IewFircpOcqu A9VBtHsSwje7DIQAVozLrrPwkPPIXSaOedOioqmY2u+kn7QCtGwUDvktuT2FGEP3 uadU1DUBDQa+rlx2qQ8vk9SugESbJt+weyQDW6ISQXY3aBwWPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkLhIkvWI3aPjGKdnZPgGXqvhAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTEz YzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJkZWFjOTkvM2M1YjliNmMtNTU4NC0z OTgwLWEwZGEtMTg4NzA2MGI1ZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDExM2M5MzUtZDI5ZC00MWI1LWJl YzAtYTczOTViZGVhYzk5LzQxMTNjOTM1LWQyOWQtNDFiNS1iZWMwLWE3Mzk1YmRl YWM5OS5jcmwwHwYDVR0jBBgwFoAUGDDRaqH477+3IU5sD/F6UFmYDsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5 NWJkZWFjOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfWoOdcwBIrBM8pQXFGkNb3gtKJZrssa1GcvFNDj6hHQxwAtXhLQCDd AOiDIhs3324pbUHvqNe+QDnuoyazS0zjBOyrtQI/gcKLZXLlOOvzM/k88PePUY9o Jnn4z8zAHPN/KNdgFbjFf6aN+3JycXwA0FcUYicMc4IrFb/xODizNojjdcBQpGEL nGzyvPW8lj0ki/8gB9XBq6DN2ez3PYi8gTi2q6XQsXQJ/PSaFH0QfVgmuyRIZ8rO fOZdKA48cozm3Mw7THTOgwDaCvNY7QggWyv4rHQLlepLkKWl4QtbkUcAhBDLuDwd mb1AnjOlj5erlh7qKkPb7+5BDsR8uTE= -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:11 2026 by rpki-client