$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/849bfc30-8559-3500-a392-d2c5f760215f.roa File: 849bfc30-8559-3500-a392-d2c5f760215f.roa (raw, json) Hash identifier: 8oMu429jgoz0AC0alRHtEsOGrjphjopT55IU4/EU0Cg= Subject key identifier: 52:7E:75:BB:5C:5A:B9:5F:B7:B4:5A:0E:AA:9C:54:F0:68:97:87:B0 Certificate issuer: /CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Certificate serial: 010D0C9F4328584D30AA2A8BB1D2B039C0716400 Authority key identifier: A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/849bfc30-8559-3500-a392-d2c5f760215f.roa Signing time: Mon 16 Mar 2026 18:23:14 +0000 ROA not before: Mon 16 Mar 2026 18:23:14 +0000 ROA not after: Sun 14 Jun 2026 18:23:14 +0000 asID: 209242 IP address blocks: 198.202.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:aa:2a:8b:b1:d2:b0:39:c0:71:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Validity Not Before: Mar 16 18:23:14 2026 GMT Not After : Jun 14 18:23:14 2026 GMT Subject: CN=dc9b6a9e-aaac-4f68-8ce0-43aa5da3bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:cb:35:ee:9f:07:52:6c:0b:68:e0:91:bf: ea:83:c5:28:75:aa:b8:29:cd:f8:29:e5:27:91:3a: e3:4e:a2:e9:e3:b4:52:eb:74:f8:d7:30:33:f9:e7: d2:45:c3:26:78:b2:e5:69:24:0c:5a:ee:58:ff:e0: 3d:e5:6f:5d:c7:8a:9d:7b:16:e4:10:e4:c8:35:b4: eb:33:2c:2e:75:e7:95:2c:fb:b0:f9:ea:30:41:85: 4a:3a:01:1e:ed:2f:f0:c6:ac:6d:6e:17:9c:78:1d: 48:99:67:ff:c0:ec:4c:43:38:e5:b4:63:12:ba:01: af:1a:44:4f:c8:c4:8b:d1:84:64:95:97:5b:ef:8e: b8:c2:fc:72:b2:32:39:2c:81:cd:42:72:40:84:f9: 23:af:65:9f:b4:fc:e7:2a:17:c9:94:ec:03:b0:d3: dc:75:34:f6:d6:1a:42:df:f9:37:74:65:37:17:4c: dd:06:ea:9e:ea:5c:4e:ff:6f:ea:53:0b:10:62:17: b4:df:a6:e5:3a:5a:45:9b:35:45:87:94:a9:c1:de: cd:ec:a2:2b:c4:a3:ee:fd:3e:97:e0:8d:a0:82:c0: 2d:93:1b:0a:cf:ec:8e:21:89:65:20:08:c8:57:4a: d7:2e:4d:16:a5:ea:01:1f:d5:ab:84:5e:39:3e:f8: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:75:BB:5C:5A:B9:5F:B7:B4:5A:0E:AA:9C:54:F0:68:97:87:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/849bfc30-8559-3500-a392-d2c5f760215f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl X509v3 Authority Key Identifier: keyid:A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer sbgp-ipAddrBlock: critical IPv4: 198.202.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cd:20:e4:a0:2b:b5:8c:3d:d5:a2:cd:6a:dd:5d:f2:5c:ff: bf:37:d5:c3:04:6a:20:fe:67:36:17:97:79:59:45:9f:cf:54: b3:c2:1a:19:a6:9f:49:60:ce:9a:18:21:06:21:15:c5:13:cd: 59:23:24:e1:1e:37:69:8b:73:53:d3:81:6d:f3:b7:e7:6b:84: a4:80:33:e0:f1:6a:36:fe:ca:a1:42:95:44:da:d2:a4:73:ee: c3:fb:87:ee:65:9d:19:b1:7a:e5:e9:eb:0b:80:5f:bf:b6:2c: 62:df:da:26:f9:60:7d:47:31:6d:0a:6a:07:88:b2:e0:ed:e9: dd:d1:7b:1e:1b:71:5b:20:e3:51:1d:5a:e6:71:84:24:94:18: 71:53:4d:28:95:88:dd:0a:5b:7d:7f:11:a4:b7:70:b6:91:af: 92:67:1a:35:be:a1:19:0e:56:45:7a:b5:6d:90:22:68:a5:05: a0:51:27:e5:9f:de:50:b3:73:19:10:75:75:ca:38:17:d0:81: 4c:78:11:dc:c7:43:0a:7b:7f:42:56:62:1b:3f:ca:54:ff:f5: f6:cf:f6:0c:1f:91:a3:55:fa:4c:5d:a9:ed:1e:d5:35:c1:e7: d2:d7:65:2e:d6:c6:0e:c2:e8:de:2e:19:67:22:1f:3d:6c:06: 46:e5:1b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wqiqLsdKwOcBxZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkYTlhZjktZDJkZi00ODA5LWI1MmMtZDdiYzg4NTlm ZWIzMB4XDTI2MDMxNjE4MjMxNFoXDTI2MDYxNDE4MjMxNFowLzEtMCsGA1UEAxMk ZGM5YjZhOWUtYWFhYy00ZjY4LThjZTAtNDNhYTVkYTNiZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy3LNe6fB1JsC2jgkb/qg8Uodaq4Kc34KeUn kTrjTqLp47RS63T41zAz+efSRcMmeLLlaSQMWu5Y/+A95W9dx4qdexbkEOTINbTr MywudeeVLPuw+eowQYVKOgEe7S/wxqxtbheceB1ImWf/wOxMQzjltGMSugGvGkRP yMSL0YRklZdb7464wvxysjI5LIHNQnJAhPkjr2WftPznKhfJlOwDsNPcdTT21hpC 3/k3dGU3F0zdBuqe6lxO/2/qUwsQYhe036blOlpFmzVFh5Spwd7N7KIrxKPu/T6X 4I2ggsAtkxsKz+yOIYllIAjIV0rXLk0WpeoBH9WrhF45PvjXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ+dbtcWrlft7RaDqqcVPBol4ewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Rh OWFmOS1kMmRmLTQ4MDktYjUyYy1kN2JjODg1OWZlYjMvODQ5YmZjMzAtODU1OS0z NTAwLWEzOTItZDJjNWY3NjAyMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNkYTlhZjktZDJkZi00ODA5LWI1 MmMtZDdiYzg4NTlmZWIzL2ZjZGE5YWY5LWQyZGYtNDgwOS1iNTJjLWQ3YmM4ODU5 ZmViMy5jcmwwHwYDVR0jBBgwFoAUoQQLRehstb9uP371hwsWs+OCvQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2RhOWFmOS1kMmRmLTQ4MDktYjUyYy1kN2Jj ODg1OWZlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvNIOSgK7WMPdWizWrdXfJc/7831cMEaiD+ZzYXl3lZRZ/PVLPCGhmm n0lgzpoYIQYhFcUTzVkjJOEeN2mLc1PTgW3zt+drhKSAM+Dxajb+yqFClUTa0qRz 7sP7h+5lnRmxeuXp6wuAX7+2LGLf2ib5YH1HMW0KageIsuDt6d3Rex4bcVsg41Ed WuZxhCSUGHFTTSiViN0KW31/EaS3cLaRr5JnGjW+oRkOVkV6tW2QImilBaBRJ+Wf 3lCzcxkQdXXKOBfQgUx4EdzHQwp7f0JWYhs/ylT/9fbP9gwfkaNV+kxdqe0e1TXB 59LXZS7Wxg7C6N4uGWciHz1sBkblG7Y= -----END CERTIFICATE-----Generated at Wed Mar 25 11:50:52 2026 by rpki-client