$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa File: d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa (raw, json) Hash identifier: vDMoLu08eW85+JUhvmHI2eyP1AIQHY/vLaWL/olvB1k= Subject key identifier: 65:8E:88:94:0D:E2:DE:17:D5:D6:56:D0:3A:44:06:A7:84:D5:D0:A1 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584CA5F74B5ACFE3CC0CB617DF60 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 400072 IP address blocks: 199.187.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:4b:5a:cf:e3:cc:0c:b6:17:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=752e9eaf-e53b-402d-81e0-15150aef1067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:fa:c1:59:5c:43:cc:06:ce:6c:ba:28:52: 2b:2c:ab:69:8b:53:be:e2:05:28:a7:aa:08:b6:f5: 87:29:2c:3e:28:98:a4:0a:df:23:cb:9b:a2:3f:d3: f7:cd:8b:8e:34:d9:be:e4:bc:2c:d3:e9:dd:11:4b: 78:f5:37:ca:35:67:fe:ea:5d:c7:46:f1:4c:c9:3b: c3:77:b1:ec:33:28:29:04:4b:66:ca:2a:e6:1b:97: 9c:f1:f0:76:26:52:ae:09:45:4c:90:05:a9:5e:e8: 08:35:b3:9d:26:1b:5b:05:6d:5a:37:c3:5d:38:7e: 1e:cf:8d:c5:bc:b5:08:82:ba:c9:42:ee:d7:57:ba: 2d:ca:b8:03:cd:0d:99:e3:b4:5c:a9:1f:22:86:7b: f9:0d:d1:03:1f:66:cc:68:dd:d4:fe:23:0c:73:a7: 40:9d:5d:83:ef:d1:6c:c1:b1:8a:e8:04:59:dd:16: f7:62:1a:76:5d:f3:1a:e0:b8:78:bd:a9:85:eb:fd: 28:3f:3e:a8:4b:72:93:58:ff:3c:5d:f8:a7:c7:02: 0e:67:33:1a:99:91:11:e2:b2:96:02:53:47:94:35: 4b:8d:45:ee:66:cc:cb:68:c2:8a:3c:3a:4a:81:d7: 82:ed:ec:a3:c2:9e:b6:6e:af:de:eb:46:36:73:6e: fb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:88:94:0D:E2:DE:17:D5:D6:56:D0:3A:44:06:A7:84:D5:D0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d051a386-b52b-3cb8-a9fd-923a1c2d1795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 199.187.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e3:6c:21:6a:6e:ad:d4:61:9c:d7:23:42:53:4c:91:df:dd: c7:cf:b8:3f:de:48:1b:19:9e:71:43:36:25:e9:59:c1:dc:d7: 03:a5:a1:bf:17:4b:4c:8c:e7:09:d4:22:ff:bf:b2:29:0e:c7: 60:d2:6f:5a:9c:cc:b2:05:5e:2e:96:14:0e:3e:08:e2:34:22: 78:6a:0d:f3:db:2b:15:b5:d4:55:c2:44:58:9d:4d:3f:c4:d6: 9c:33:5a:8d:79:b3:7e:71:63:3a:c3:f1:5a:58:58:f9:04:46: 38:7d:0e:49:e9:89:c0:3d:29:56:03:01:70:ef:88:ac:c7:33: f2:11:26:34:1a:8e:45:fe:e7:dd:1f:ee:c9:f2:6a:e3:ed:dd: ce:24:5e:e9:f9:77:24:0a:de:16:97:d0:f5:d8:f7:dc:e7:62: b9:1e:d6:33:78:c1:18:a9:c4:a2:71:a7:6a:c6:b2:9c:35:65: 3d:c9:c8:de:5f:58:87:7e:e8:b1:2c:93:f9:e7:67:15:d2:13: 53:ed:ef:fa:1f:66:96:89:8b:2f:ac:59:fa:0a:a3:72:4a:8d: 99:7f:26:bf:b9:31:33:cc:21:a1:68:85:0b:5d:73:70:2e:db: e9:c4:97:b7:eb:4c:2e:9c:0b:69:1f:e0:a8:39:b4:87:f0:29: 3e:5c:2c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90taz+PMDLYX32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NzUyZTllYWYtZTUzYi00MDJkLTgxZTAtMTUxNTBhZWYxMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3v6wVlcQ8wGzmy6KFIrLKtpi1O+4gUop6oI tvWHKSw+KJikCt8jy5uiP9P3zYuONNm+5Lws0+ndEUt49TfKNWf+6l3HRvFMyTvD d7HsMygpBEtmyirmG5ec8fB2JlKuCUVMkAWpXugINbOdJhtbBW1aN8NdOH4ez43F vLUIgrrJQu7XV7otyrgDzQ2Z47RcqR8ihnv5DdEDH2bMaN3U/iMMc6dAnV2D79Fs wbGK6ARZ3Rb3Yhp2XfMa4Lh4vamF6/0oPz6oS3KTWP88XfinxwIOZzMamZER4rKW AlNHlDVLjUXuZszLaMKKPDpKgdeC7eyjwp62bq/e60Y2c277BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWOiJQN4t4X1dZW0DpEBqeE1dChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvZDA1MWEzODYtYjUyYi0z Y2I4LWE5ZmQtOTIzYTFjMmQxNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7u8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/jbCFqbq3UYZzXI0JTTJHf3cfPuD/eSBsZnnFDNiXpWcHc1wOlob8X S0yM5wnUIv+/sikOx2DSb1qczLIFXi6WFA4+COI0InhqDfPbKxW11FXCRFidTT/E 1pwzWo15s35xYzrD8VpYWPkERjh9DknpicA9KVYDAXDviKzHM/IRJjQajkX+590f 7snyauPt3c4kXun5dyQK3haX0PXY99znYrke1jN4wRipxKJxp2rGspw1ZT3JyN5f WId+6LEsk/nnZxXSE1Pt7/ofZpaJiy+sWfoKo3JKjZl/Jr+5MTPMIaFohQtdc3Au 2+nEl7frTC6cC2kf4Kg5tIfwKT5cLGY= -----END CERTIFICATE-----Generated at Thu Feb 26 20:53:20 2026 by rpki-client