$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27/698bf396-1ef2-3e14-8f09-39c9a4e88d79.roa File: 698bf396-1ef2-3e14-8f09-39c9a4e88d79.roa (raw, json) Hash identifier: JPatYQTrY00xA55P16b+1g4QmG0l8L1FQQeUiT3uCmA= Subject key identifier: CC:9E:28:5D:DD:1D:78:FA:B0:03:02:A7:71:C0:2B:1A:41:00:F9:6A Certificate issuer: /CN=c6a9428a-48ef-48bc-bf75-1fd562da6d27 Certificate serial: 010D0C9F4328584D6945012D1726262508205480 Authority key identifier: 80:D1:24:9E:21:D4:9E:26:87:9D:20:72:70:C2:BF:51:AF:C7:C8:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27/698bf396-1ef2-3e14-8f09-39c9a4e88d79.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 397171 IP address blocks: 199.89.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27/c6a9428a-48ef-48bc-bf75-1fd562da6d27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27/c6a9428a-48ef-48bc-bf75-1fd562da6d27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:45:01:2d:17:26:26:25:08:20:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a9428a-48ef-48bc-bf75-1fd562da6d27 Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=6028ddec-c8d9-4d27-a13e-b511a256808a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:06:b1:b0:dd:ed:5a:96:45:c4:34:ac:7a: d9:77:74:86:0a:a5:95:83:8e:75:b6:c0:40:5d:6d: 19:b9:a5:96:64:08:64:45:ea:7e:ce:a4:6a:25:35: 2f:66:6c:91:06:2b:8d:bd:8a:e3:c8:b7:90:bc:ec: 4f:df:14:78:3b:a3:21:18:d9:0b:50:a0:61:ed:f4: 3f:5c:bd:73:d4:75:24:eb:2c:35:03:da:0f:71:62: 49:33:d1:a3:49:32:a0:cc:80:80:a2:b4:73:bc:ec: ab:40:3b:87:8e:4b:c7:8f:5d:2f:53:a2:91:61:bf: 1a:fa:93:9e:9c:86:b6:58:25:9a:2f:f0:f1:3c:c2: 7f:67:45:93:ce:83:a6:64:d7:3f:aa:37:24:45:8c: 6d:89:e7:10:74:e9:d0:8a:10:d2:b8:38:92:2e:63: 09:8a:70:6b:21:89:7b:77:ad:96:7f:1f:ab:90:15: 83:ba:ad:c0:a3:37:f5:31:b9:da:cf:58:b3:3e:75: 4d:e7:24:4b:49:09:3b:ff:db:89:eb:4d:5c:62:2c: 19:f0:c8:19:46:77:f2:b7:08:3e:bc:0e:2d:c8:1e: d0:48:60:4b:17:ed:b1:77:67:1e:05:dc:17:47:de: b6:bc:86:76:12:07:ac:97:f1:da:b4:54:c7:9d:e7: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9E:28:5D:DD:1D:78:FA:B0:03:02:A7:71:C0:2B:1A:41:00:F9:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27/698bf396-1ef2-3e14-8f09-39c9a4e88d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27/c6a9428a-48ef-48bc-bf75-1fd562da6d27.crl X509v3 Authority Key Identifier: keyid:80:D1:24:9E:21:D4:9E:26:87:9D:20:72:70:C2:BF:51:AF:C7:C8:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6a9428a-48ef-48bc-bf75-1fd562da6d27.cer sbgp-ipAddrBlock: critical IPv4: 199.89.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4b:cc:10:5e:5a:9d:d5:e2:61:71:b8:15:16:0f:1e:e2:7a: 78:dc:c4:0b:4d:79:19:e6:83:4f:3d:bf:f5:e9:6c:b9:82:63: 03:d5:9c:5a:65:81:34:03:6d:2b:e9:00:c8:3c:48:2e:09:4e: 31:f3:67:4a:ea:d6:21:7b:18:93:63:65:19:44:cf:47:f4:c1: 52:8b:58:c5:f5:95:c3:24:93:20:07:38:f4:87:5d:02:4d:86: c1:8c:7e:f3:2a:3f:fb:c6:e9:2a:d1:5f:f9:36:f7:cc:d4:5a: 22:c9:42:97:20:18:90:37:4d:81:d7:70:fe:33:8a:ca:0e:c5: 1c:b4:7d:08:1a:03:b0:2d:74:ff:fc:ab:06:07:b6:02:a3:af: 53:aa:75:30:c9:6e:86:2a:02:ad:02:92:c6:e4:ab:b7:ee:aa: 9c:a0:9f:78:f4:22:6c:bb:60:ad:80:87:20:a7:9a:c8:22:93: 2d:47:4d:e1:7d:8a:78:0e:da:31:09:39:35:c5:5c:ae:6f:4f: 47:0d:e3:91:ec:0e:b7:02:ce:d6:39:84:78:bd:0e:22:20:79: f5:33:d7:58:e6:64:b9:ab:24:9d:99:33:f5:10:19:1b:4e:8e: 80:de:43:e1:e5:dd:37:9d:91:f4:5f:f2:fc:13:d2:1a:27:c4: e6:94:c0:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRQEtFyYmJQggVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZhOTQyOGEtNDhlZi00OGJjLWJmNzUtMWZkNTYyZGE2 ZDI3MB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk NjAyOGRkZWMtYzhkOS00ZDI3LWExM2UtYjUxMWEyNTY4MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6UGsbDd7VqWRcQ0rHrZd3SGCqWVg451tsBA XW0ZuaWWZAhkRep+zqRqJTUvZmyRBiuNvYrjyLeQvOxP3xR4O6MhGNkLUKBh7fQ/ XL1z1HUk6yw1A9oPcWJJM9GjSTKgzICAorRzvOyrQDuHjkvHj10vU6KRYb8a+pOe nIa2WCWaL/DxPMJ/Z0WTzoOmZNc/qjckRYxtiecQdOnQihDSuDiSLmMJinBrIYl7 d62Wfx+rkBWDuq3Aozf1Mbnaz1izPnVN5yRLSQk7/9uJ601cYiwZ8MgZRnfytwg+ vA4tyB7QSGBLF+2xd2ceBdwXR962vIZ2Egesl/HatFTHnedfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyeKF3dHXj6sAMCp3HAKxpBAPlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNmE5 NDI4YS00OGVmLTQ4YmMtYmY3NS0xZmQ1NjJkYTZkMjcvNjk4YmYzOTYtMWVmMi0z ZTE0LThmMDktMzljOWE0ZTg4ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzZhOTQyOGEtNDhlZi00OGJjLWJm NzUtMWZkNTYyZGE2ZDI3L2M2YTk0MjhhLTQ4ZWYtNDhiYy1iZjc1LTFmZDU2MmRh NmQyNy5jcmwwHwYDVR0jBBgwFoAUgNEkniHUniaHnSBycMK/Ua/HyLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNmE5NDI4YS00OGVmLTQ4YmMtYmY3NS0xZmQ1 NjJkYTZkMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1miMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJLzBBeWp3V4mFxuBUWDx7ienjcxAtNeRnmg089v/XpbLmCYwPVnFpl gTQDbSvpAMg8SC4JTjHzZ0rq1iF7GJNjZRlEz0f0wVKLWMX1lcMkkyAHOPSHXQJN hsGMfvMqP/vG6SrRX/k298zUWiLJQpcgGJA3TYHXcP4zisoOxRy0fQgaA7AtdP/8 qwYHtgKjr1OqdTDJboYqAq0Cksbkq7fuqpygn3j0Imy7YK2AhyCnmsgiky1HTeF9 ingO2jEJOTXFXK5vT0cN45HsDrcCztY5hHi9DiIgefUz11jmZLmrJJ2ZM/UQGRtO joDeQ+Hl3TedkfRf8vwT0honxOaUwEA= -----END CERTIFICATE-----Generated at Mon Apr 13 12:09:22 2026 by rpki-client