$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa File: dafff672-519a-347d-980e-8ae7d32a641e.roa (raw, json) Hash identifier: w1R1wT0kCSsLMhGx4P7IDGATcRw0A5wnQ2s6G2IUcJs= Subject key identifier: E3:90:93:A5:F2:CB:AE:CA:0C:19:F4:50:72:DE:56:A9:7E:4F:7C:48 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584DF4DB4433C5E55142DEB7C900 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 174 IP address blocks: 199.89.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:44:33:c5:e5:51:42:de:b7:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=a4df2a3c-16d3-46cc-b18a-9e3a109a1ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a0:4f:1a:09:41:76:50:5d:20:25:b8:e6:1b: 7a:58:5f:3c:3e:ba:2b:f9:78:45:ca:1c:c4:1d:dc: 8e:13:b7:61:e9:81:8b:68:8a:1a:b7:9c:62:eb:14: d4:81:84:b2:2a:2d:20:43:31:08:0b:06:43:1e:24: 04:27:bf:33:92:5e:8a:fb:a6:25:1c:18:46:0d:08: e3:9d:22:f9:1a:6d:64:fa:c0:15:80:69:2e:d1:24: 63:f8:89:12:16:dd:c8:d6:d6:02:54:7b:60:d2:0c: 06:6c:74:10:3d:45:7e:1b:90:e2:66:ab:17:29:2b: f8:08:21:b1:d3:08:0a:a1:4a:2e:dc:99:21:a6:1e: 3c:b9:2c:6a:83:69:99:96:ba:d0:e6:43:24:e3:2b: 4c:63:f5:ac:88:ee:a7:9c:da:36:ac:d2:a8:a6:61: 5b:81:c2:7e:6e:43:b5:cc:c3:b4:e6:bc:9e:d5:05: 4e:d8:f3:96:a7:47:16:21:82:e5:ab:dd:9a:c7:94: c0:0a:be:ca:5c:a8:1b:dd:28:21:95:3e:d5:d2:38: 7b:1e:af:a8:84:42:a8:59:e2:ca:5d:be:69:71:2f: 04:02:83:4e:b9:ea:25:56:e2:95:9a:03:52:b6:e0: c0:98:69:5e:1f:f3:e8:da:f7:6e:a3:e0:45:f3:d0: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:90:93:A5:F2:CB:AE:CA:0C:19:F4:50:72:DE:56:A9:7E:4F:7C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:70:90:5b:6a:39:6c:66:0f:b9:d5:64:32:ae:df:51:96:70: 39:7a:ce:50:73:08:9c:ca:e5:b5:67:89:ba:6c:94:08:01:a8: 94:62:d0:b7:ce:ba:ca:57:d6:7d:79:9b:88:52:a0:0f:91:2c: 83:39:89:09:e5:34:9d:58:c1:1b:c6:43:bd:18:9c:5a:80:f9: 79:5a:6e:6c:27:ea:b1:c9:08:29:28:0c:f2:95:3b:fe:ec:5a: 59:5e:a3:69:90:ce:33:e7:83:31:04:f8:d4:a7:5b:16:68:b6: e1:2a:ee:cf:42:ec:f9:43:46:54:f1:70:72:4c:a8:90:9f:f1: 4d:40:dd:c5:2f:31:98:80:33:6e:31:71:9d:b3:52:96:bf:a3: 92:64:2f:c6:bf:8f:ad:31:12:61:12:f6:90:75:b8:e5:97:f5: 69:29:8f:0f:ed:7c:2b:d2:0a:b6:18:55:97:0a:fb:5c:71:46: 5e:61:c5:d9:5c:10:e6:c5:f6:71:67:5b:97:97:84:57:3c:f9: d7:79:00:ef:cd:e7:fb:fe:62:1e:44:6e:58:9f:5f:a9:60:39: 96:56:82:49:6b:00:38:2d:a1:eb:80:6b:b7:81:e5:0c:7d:f4: 5b:83:65:eb:08:08:71:b2:b9:c3:b0:8c:04:aa:d7:87:f3:1c: 58:67:4a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020QzxeVRQt63yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YTRkZjJhM2MtMTZkMy00NmNjLWIxOGEtOWUzYTEwOWExZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KBPGglBdlBdICW45ht6WF88Pror+XhFyhzE HdyOE7dh6YGLaIoat5xi6xTUgYSyKi0gQzEICwZDHiQEJ78zkl6K+6YlHBhGDQjj nSL5Gm1k+sAVgGku0SRj+IkSFt3I1tYCVHtg0gwGbHQQPUV+G5DiZqsXKSv4CCGx 0wgKoUou3Jkhph48uSxqg2mZlrrQ5kMk4ytMY/WsiO6nnNo2rNKopmFbgcJ+bkO1 zMO05rye1QVO2POWp0cWIYLlq92ax5TACr7KXKgb3SghlT7V0jh7Hq+ohEKoWeLK Xb5pcS8EAoNOueolVuKVmgNStuDAmGleH/Po2vduo+BF89AAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOQk6Xyy67KDBn0UHLeVql+T3xIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvZGFmZmY2NzItNTE5YS0z NDdkLTk4MGUtOGFlN2QzMmE2NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRwkFtqOWxmD7nVZDKu31GWcDl6zlBzCJzK5bVnibpslAgBqJRi0LfO uspX1n15m4hSoA+RLIM5iQnlNJ1YwRvGQ70YnFqA+Xlabmwn6rHJCCkoDPKVO/7s Wlleo2mQzjPngzEE+NSnWxZotuEq7s9C7PlDRlTxcHJMqJCf8U1A3cUvMZiAM24x cZ2zUpa/o5JkL8a/j60xEmES9pB1uOWX9Wkpjw/tfCvSCrYYVZcK+1xxRl5hxdlc EObF9nFnW5eXhFc8+dd5AO/N5/v+Yh5EblifX6lgOZZWgklrADgtoeuAa7eB5Qx9 9FuDZesICHGyucOwjASq14fzHFhnSlk= -----END CERTIFICATE-----Generated at Thu May 28 13:38:08 2026 by rpki-client