$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa File: baf35b03-5e28-3070-83c6-669f5294e617.roa (raw, json) Hash identifier: gTSoxQQ7B5AWYjcc4CGrUvYejZ5pL1eY/f8m/4T0Ze4= Subject key identifier: 20:01:B7:B3:5F:E5:50:AC:73:6B:5E:48:A7:9A:7F:B0:FA:DC:67:F6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19FCBB902DD9EA4521A300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 99.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:fc:bb:90:2d:d9:ea:45:21:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=a450581b-8341-403d-a881-22af5db6420c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:c3:df:1c:8c:47:60:df:8d:81:f9:7f:80: ea:a4:85:72:6c:89:22:d4:a2:7d:10:b3:b1:1d:4d: 8f:dd:30:6d:c3:97:fc:b1:90:ff:38:69:24:de:4c: 9f:8e:06:91:9e:79:bc:d3:6b:91:82:8d:b0:7e:02: ff:64:a9:c6:41:bb:09:4d:b1:c9:8d:47:a2:eb:9f: cd:b5:f0:df:09:15:ec:d0:d3:ff:62:b8:e1:64:25: c3:22:99:aa:de:5c:25:10:26:42:e8:08:f0:9d:6e: 68:06:44:1e:6f:b5:d0:12:d8:4f:84:f8:10:25:88: b5:3c:a8:c1:b3:b3:cd:31:75:06:7e:7c:20:f2:74: 3e:da:a0:e1:5f:82:d5:98:05:d1:99:aa:48:03:41: cd:61:09:5c:91:09:27:25:60:6f:15:94:ec:19:2a: 39:d5:b1:94:bc:43:ea:71:7c:91:19:69:49:e2:0f: 08:da:69:2f:c1:7c:72:32:72:0a:7c:69:7b:30:0b: 0d:a7:62:f5:ed:d6:4d:ae:17:91:88:2f:27:4b:32: 0e:70:01:cd:11:d9:e2:98:15:1e:1f:03:fb:c4:d3: 8e:e4:4b:5e:d7:87:a6:37:ee:c7:c1:62:e8:e7:3e: b9:2a:3a:91:a8:0f:4b:c0:ef:79:37:ae:03:59:28: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:01:B7:B3:5F:E5:50:AC:73:6B:5E:48:A7:9A:7F:B0:FA:DC:67:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 99.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cf:51:36:f9:fd:c6:e7:36:f2:c1:14:46:5a:c8:1c:eb:51: 8b:ba:e0:af:8e:30:17:26:de:82:92:1f:74:0c:c0:40:d6:94: 30:bd:f9:9f:8b:35:47:2b:f4:81:b0:60:43:fa:01:26:a8:fe: 2b:f7:16:8a:1f:ba:42:10:d0:a5:e9:94:44:29:88:0f:78:36: 22:3f:89:a8:6a:7f:83:11:bf:0a:d7:56:ac:64:db:17:39:9e: 10:f0:6b:ac:9c:7d:33:79:81:28:d4:1d:ea:3a:11:31:1a:58: 60:2a:f9:95:ad:e9:48:b7:b6:49:93:a9:2c:7d:22:6d:9f:80: c4:54:f7:3c:84:23:2d:19:a7:ea:a3:1a:89:30:d8:46:64:89: 44:8a:3d:16:66:ae:ac:52:f2:fe:2f:84:00:95:43:37:20:1c: c8:ad:65:00:4e:61:d9:a9:f6:5f:f9:4f:d8:ac:30:4b:29:ce: b8:88:d3:71:b0:d2:60:3f:ad:f2:c5:10:d1:9b:bf:42:67:ba: ee:9b:b2:45:aa:71:a5:36:53:a4:a0:c4:95:ca:6d:d4:ef:60: 6b:89:20:e7:02:71:5e:f7:42:58:f6:21:40:e6:9b:07:a7:5c: 0a:38:b4:f7:a6:05:77:70:85:d2:b2:a7:68:f1:0a:2f:78:7f: 18:5a:d9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfy7kC3Z6kUhowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YTQ1MDU4MWItODM0MS00MDNkLWE4ODEtMjJhZjVkYjY0MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkprD3xyMR2DfjYH5f4DqpIVybIki1KJ9ELOx HU2P3TBtw5f8sZD/OGkk3kyfjgaRnnm802uRgo2wfgL/ZKnGQbsJTbHJjUei65/N tfDfCRXs0NP/YrjhZCXDIpmq3lwlECZC6AjwnW5oBkQeb7XQEthPhPgQJYi1PKjB s7PNMXUGfnwg8nQ+2qDhX4LVmAXRmapIA0HNYQlckQknJWBvFZTsGSo51bGUvEPq cXyRGWlJ4g8I2mkvwXxyMnIKfGl7MAsNp2L17dZNrheRiC8nSzIOcAHNEdnimBUe HwP7xNOO5Ete14emN+7HwWLo5z65KjqRqA9LwO95N64DWShwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCABt7Nf5VCsc2teSKeaf7D63Gf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmFmMzViMDMtNWUyOC0z MDcwLTgzYzYtNjY5ZjUyOTRlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEY8fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/PUTb5/cbnNvLBFEZayBzrUYu64K+OMBcm3oKSH3QMwEDWlDC9+Z+L NUcr9IGwYEP6ASao/iv3FoofukIQ0KXplEQpiA94NiI/iahqf4MRvwrXVqxk2xc5 nhDwa6ycfTN5gSjUHeo6ETEaWGAq+ZWt6Ui3tkmTqSx9Im2fgMRU9zyEIy0Zp+qj Gokw2EZkiUSKPRZmrqxS8v4vhACVQzcgHMitZQBOYdmp9l/5T9isMEspzriI03Gw 0mA/rfLFENGbv0Jnuu6bskWqcaU2U6SgxJXKbdTvYGuJIOcCcV73Qlj2IUDmmwen XAo4tPemBXdwhdKyp2jxCi94fxha2R0= -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:43 2026 by rpki-client