$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: LfPFfaYhLy1t0catUFcCdqb98kPFQzbZqc4WHrNbhVs= Subject key identifier: CC:12:53:1E:B0:21:E4:0A:BF:DE:FB:FB:37:AB:BB:24:BC:38:3E:4F Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584DD4C0730A07E1E4CD54C39640 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:73:0a:07:e1:e4:cd:54:c3:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=72b244db-31e6-4751-9171-db973fe9f817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:94:6a:45:24:43:72:e7:5c:c6:e7:d8:c6: 61:4f:71:ab:21:7b:c8:68:83:c9:dc:52:14:47:00: c8:2e:7a:59:8e:6f:06:3e:e8:02:cd:3d:fe:68:84: 4a:ef:5d:9a:7b:95:da:ac:88:f1:2b:af:1d:06:9a: 88:dd:c6:fb:5b:9f:c7:2c:12:14:ed:18:c5:32:7f: f4:9b:e0:c9:4f:6e:39:3a:7d:a4:3e:da:0e:33:e0: b6:cf:b7:bb:f4:2c:8d:f4:ac:a0:1a:94:3b:57:68: bd:ed:7f:44:63:6e:9a:33:c3:80:c3:18:e4:c7:58: eb:de:6d:e7:ac:46:a4:70:63:c7:52:81:4d:40:2c: 35:b2:c0:bf:e2:f3:c0:08:83:b2:e4:cb:13:58:69: 20:c5:ba:05:0f:0d:04:c8:71:50:dd:25:fb:24:d6: ba:d3:28:15:aa:70:36:23:95:2e:4a:a6:61:2e:f9: 98:a2:9b:17:de:35:e7:32:d1:dc:64:de:fb:54:42: ef:68:0e:27:5c:3d:98:99:b8:d0:44:2f:8e:a3:04: 59:73:0b:57:77:b4:fc:dd:6b:ae:dc:6a:c1:81:f1: f4:54:70:a6:cb:6c:08:b2:15:05:88:e7:0d:f0:30: 64:47:86:e9:cf:24:66:40:a5:9c:ef:7c:27:de:58: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:53:1E:B0:21:E4:0A:BF:DE:FB:FB:37:AB:BB:24:BC:38:3E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1b:11:08:49:e4:33:a9:db:09:4d:12:75:7c:97:c3:86:11: 46:b1:53:63:ff:f5:07:fc:b5:e8:77:62:1c:c9:f8:21:3f:6e: df:b3:4f:c9:71:41:24:e5:ff:70:d6:06:f8:51:23:b4:2a:65: 58:39:cd:82:e5:72:1f:5c:db:e0:35:a2:83:14:71:53:32:d7: 06:cd:6b:df:dc:0c:6f:7f:12:7b:88:d9:71:5e:c9:52:2e:7d: 3a:ea:8a:bf:38:1c:3c:59:b7:e4:f7:d9:7a:6d:e4:72:be:dd: dd:b5:a3:17:8e:32:4d:03:7d:18:fc:db:d6:d5:72:1e:d4:36: 57:ae:69:b8:12:95:27:90:f7:bc:87:97:ce:66:45:63:b0:4e: 08:92:75:3b:63:52:18:6d:da:06:17:b6:f3:28:e5:99:98:7d: 1d:6c:17:12:e9:9e:3f:e0:ef:45:23:ae:91:90:04:9b:d8:39: 00:c8:ba:3e:bd:bd:d7:20:09:8d:44:5a:b8:ad:1d:04:09:62: 31:dd:c7:45:62:cc:82:88:89:fe:d0:9f:f4:21:ae:42:17:ec: ac:6a:e5:43:25:8d:7f:9d:0e:da:b9:70:d9:65:9a:68:20:04: 59:86:69:82:23:1e:1b:87:57:91:60:85:50:28:30:f3:da:14: f2:f6:e0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwHMKB+HkzVTDlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk NzJiMjQ0ZGItMzFlNi00NzUxLTkxNzEtZGI5NzNmZTlmODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRqUakUkQ3LnXMbn2MZhT3GrIXvIaIPJ3FIU RwDILnpZjm8GPugCzT3+aIRK712ae5XarIjxK68dBpqI3cb7W5/HLBIU7RjFMn/0 m+DJT245On2kPtoOM+C2z7e79CyN9KygGpQ7V2i97X9EY26aM8OAwxjkx1jr3m3n rEakcGPHUoFNQCw1ssC/4vPACIOy5MsTWGkgxboFDw0EyHFQ3SX7JNa60ygVqnA2 I5UuSqZhLvmYopsX3jXnMtHcZN77VELvaA4nXD2YmbjQRC+OowRZcwtXd7T83Wuu 3GrBgfH0VHCmy2wIshUFiOcN8DBkR4bpzyRmQKWc73wn3liuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwSUx6wIeQKv977+zeruyS8OD5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFobEQhJ5DOp2wlNEnV8l8OGEUaxU2P/9Qf8teh3YhzJ+CE/bt+zT8lx QSTl/3DWBvhRI7QqZVg5zYLlch9c2+A1ooMUcVMy1wbNa9/cDG9/EnuI2XFeyVIu fTrqir84HDxZt+T32Xpt5HK+3d21oxeOMk0DfRj829bVch7UNleuabgSlSeQ97yH l85mRWOwTgiSdTtjUhht2gYXtvMo5ZmYfR1sFxLpnj/g70UjrpGQBJvYOQDIuj69 vdcgCY1EWritHQQJYjHdx0VizIKIif7Qn/QhrkIX7Kxq5UMljX+dDtq5cNllmmgg BFmGaYIjHhuHV5FghVAoMPPaFPL24Hg= -----END CERTIFICATE-----Generated at Thu May 21 19:36:03 2026 by rpki-client