$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa File: 9ff35021-1a5a-37a7-8f79-b9c773e21707.roa (raw, json) Hash identifier: SXbDknc1PUUGtvLB8f0ClRTjJWVPfAPPgXG7UrsFquI= Subject key identifier: 05:DB:4E:84:45:D9:3B:E4:DD:25:EF:AA:0B:AA:87:86:69:33:00:96 Certificate issuer: /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Certificate serial: 010D0C9F4328584D1F4A416DEEC6AB4D1B02BE80 Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 12161 IP address blocks: 199.74.222.0/24 maxlen: 24 199.74.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:41:6d:ee:c6:ab:4d:1b:02:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=0387b795-e444-401f-8556-fbba0e4d133b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:2a:a2:bf:c4:32:3f:cf:bb:fd:ce:79:e9: 66:9a:60:3b:e7:e3:d8:59:09:62:66:1a:0c:35:5e: b5:01:29:fc:27:53:0a:ef:1a:59:2f:13:4c:8b:1a: f5:d2:36:6d:4f:07:d9:74:0d:a8:7e:b5:c8:d7:4a: dc:b8:cc:25:e8:b5:a4:9b:07:29:7b:e4:64:1a:a5: 54:4a:6f:5f:3f:ce:2c:41:fc:14:49:47:0f:ba:11: 0a:ab:81:47:bf:0f:d3:88:7f:d0:08:26:41:b5:69: 33:ff:db:d0:7c:42:d0:aa:db:4b:73:c5:a2:51:9e: 81:85:0f:3a:df:98:63:05:e9:c6:6b:ec:fb:c1:ff: 35:6c:4b:d1:1d:b3:8e:9d:e6:e0:fa:7b:21:83:f6: 22:b8:23:de:f6:3d:e7:ae:5c:00:53:3f:ad:64:8f: 63:f4:31:6a:c9:6d:9e:31:f5:44:dc:08:b1:4d:00: 36:b8:4a:73:3e:2c:db:68:e3:ef:b4:e7:60:1b:56: 28:74:25:63:16:87:ad:c7:e1:e6:50:ea:e0:dc:00: ac:5f:dc:9e:b7:c7:6a:73:d7:4f:4d:e8:72:9c:2f: f9:2c:b5:0f:2e:a0:8c:78:65:df:87:99:3c:24:18: 51:d5:59:91:25:9a:61:9d:d5:6e:b6:f5:10:79:71: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:4E:84:45:D9:3B:E4:DD:25:EF:AA:0B:AA:87:86:69:33:00:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl X509v3 Authority Key Identifier: keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer sbgp-ipAddrBlock: critical IPv4: 199.74.222.0/24 199.74.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:77:48:25:4b:35:e5:1f:b9:13:2e:6a:b1:cb:9e:53:43:c2: 3f:17:d4:00:bd:4b:d9:78:98:12:3a:74:5a:e9:e0:72:5c:45: 41:93:1e:55:a0:30:ce:a4:3f:9b:3b:ec:ec:1d:da:d9:18:34: 97:5e:76:0e:bd:23:0a:e0:04:0d:87:46:2a:30:eb:b7:82:bb: a6:17:f1:de:8f:ba:4b:34:84:af:5b:d8:c2:8f:bd:9f:a3:fc: b8:67:57:61:13:de:be:9c:47:f5:0d:02:c0:f8:3a:54:ba:16: f1:4e:d4:bd:88:bf:fa:e4:71:21:d1:13:97:e5:3a:99:0d:11: 30:bc:de:78:c8:7c:a7:34:ff:91:0d:0f:c1:34:d5:62:3c:7e: 07:61:00:e0:ff:d5:80:18:81:2a:e3:2a:28:96:67:8b:24:05: 4d:2d:16:77:93:ee:46:bb:b4:bd:0c:cf:fe:40:8c:1a:06:7d: c3:24:85:96:58:7d:04:a1:70:91:b3:e6:2d:d3:57:18:37:39: 91:58:df:62:34:8c:4d:1a:18:10:9d:3d:70:3e:c4:86:b4:e0: 2e:51:90:2c:79:13:3c:41:e9:48:db:37:21:14:09:22:77:4b: d3:4d:8f:8b:b3:3f:7b:9f:7e:e8:29:14:05:c8:29:bd:90:25: 2f:df:0e:77 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0fSkFt7sarTRsCvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg1MTAwZjktM2IyOC00ZWY0LWIyYzItY2YzMjdkOTgz OWQ2MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MDM4N2I3OTUtZTQ0NC00MDFmLTg1NTYtZmJiYTBlNGQxMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVkqor/EMj/Pu/3OeelmmmA75+PYWQliZhoM NV61ASn8J1MK7xpZLxNMixr10jZtTwfZdA2ofrXI10rcuMwl6LWkmwcpe+RkGqVU Sm9fP84sQfwUSUcPuhEKq4FHvw/TiH/QCCZBtWkz/9vQfELQqttLc8WiUZ6BhQ86 35hjBenGa+z7wf81bEvRHbOOnebg+nshg/YiuCPe9j3nrlwAUz+tZI9j9DFqyW2e MfVE3AixTQA2uEpzPizbaOPvtOdgG1YodCVjFoetx+HmUOrg3ACsX9yet8dqc9dP TehynC/5LLUPLqCMeGXfh5k8JBhR1VmRJZphndVutvUQeXHunwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAXbToRF2Tvk3SXvqguqh4ZpMwCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ODUx MDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMyN2Q5ODM5ZDYvOWZmMzUwMjEtMWE1YS0z N2E3LThmNzktYjljNzczZTIxNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjg1MTAwZjktM2IyOC00ZWY0LWIy YzItY2YzMjdkOTgzOWQ2LzY4NTEwMGY5LTNiMjgtNGVmNC1iMmMyLWNmMzI3ZDk4 MzlkNi5jcmwwHwYDVR0jBBgwFoAUixKCgpxJcnhlLMRCbyeEoVgGCw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ODUxMDBmOS0zYjI4LTRlZjQtYjJjMi1jZjMy N2Q5ODM5ZDYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAx0reAwQA x0r5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJB3SCVLNeUfuRMuarHLnlNDwj8X1AC9S9l4mBI6dFrp4HJc RUGTHlWgMM6kP5s77Owd2tkYNJdedg69IwrgBA2HRiow67eCu6YX8d6Puks0hK9b 2MKPvZ+j/LhnV2ET3r6cR/UNAsD4OlS6FvFO1L2Iv/rkcSHRE5flOpkNETC83njI fKc0/5END8E01WI8fgdhAOD/1YAYgSrjKiiWZ4skBU0tFneT7ka7tL0Mz/5AjBoG fcMkhZZYfQShcJGz5i3TVxg3OZFY32I0jE0aGBCdPXA+xIa04C5RkCx5EzxB6Ujb NyEUCSJ3S9NNj4uzP3uffugpFAXIKb2QJS/fDnc= -----END CERTIFICATE-----Generated at Mon Mar 16 17:22:37 2026 by rpki-client