$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa File: 8ae67e8a-104d-3a84-8b85-450caa25862f.roa (raw, json) Hash identifier: g8aeDNcyAopsVoGtSF/2w+n7Swkb5n6P/oi5HPOyutM= Subject key identifier: F9:D4:A5:48:C6:F1:8D:AC:16:1F:33:90:40:46:85:3D:37:F4:CB:6C Certificate issuer: /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Certificate serial: 010D0C9F4328584D09125B584ADFE1D3FBE89580 Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 32402 IP address blocks: 199.7.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5b:58:4a:df:e1:d3:fb:e8:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=85ebf203-e106-4305-b111-7caa611888c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:b1:ac:a8:5c:ff:3c:93:43:23:c2:64:85: 86:e5:9e:e0:1a:41:05:fc:9c:32:e2:6f:5b:31:ae: cf:27:b9:62:69:81:6d:f2:5a:81:4a:19:8e:e1:ed: 70:5a:6f:05:2d:ff:d1:c1:5c:02:7c:ea:3a:5d:4a: 67:fe:49:ee:5f:78:31:13:f2:1a:e6:47:eb:a1:1b: 56:4f:3a:69:00:df:5d:e1:50:bc:07:34:f6:3a:bc: 67:ca:c6:8a:d4:74:ae:18:5b:36:4a:f3:14:35:e9: 15:6d:75:65:68:a3:cd:0f:d9:6e:17:c9:d0:b1:8e: b2:6e:6b:10:6c:09:9d:be:d7:d2:07:65:2f:37:64: 0f:55:c6:a9:a4:3e:e5:91:98:d0:13:74:40:cf:c6: d0:c0:29:1f:d7:75:4e:da:da:2d:06:1c:23:1b:fc: 87:a2:14:a0:a7:95:dd:1d:29:a0:92:3b:72:b6:b1: fb:6e:4e:16:3e:a6:02:8f:8e:32:68:b0:da:fd:03: 71:8e:9d:bb:16:db:7f:35:31:97:c8:b9:dd:2c:6e: 31:40:d5:ac:c0:17:62:a7:54:8d:bd:9b:70:8a:04: a8:e7:92:57:57:6c:65:23:d3:48:f9:e0:04:ae:a5: c2:95:fd:72:ac:7d:66:86:27:d6:8c:31:e0:52:ed: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D4:A5:48:C6:F1:8D:AC:16:1F:33:90:40:46:85:3D:37:F4:CB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl X509v3 Authority Key Identifier: keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer sbgp-ipAddrBlock: critical IPv4: 199.7.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:95:5f:cf:2e:20:ee:2c:8f:f9:b4:b3:7b:13:fb:6e:95:5b: 6c:41:8d:0e:f0:46:00:c3:99:91:3a:44:51:50:4c:85:6c:80: 3d:23:44:22:3c:4a:67:b3:0e:ba:76:87:39:fb:42:07:8f:35: 99:9a:e3:15:06:13:54:c1:4e:b0:ac:0d:16:84:61:51:2e:89: 94:e6:fb:de:c9:70:08:88:35:9c:8f:04:40:46:73:65:9b:41: c4:2e:a0:c2:2d:15:84:54:6b:11:f8:6f:44:82:9a:d0:3d:cd: f5:9f:10:dd:fe:04:3b:b8:08:ff:f1:5b:e6:43:b1:aa:ce:3a: 72:f9:1f:28:0a:2e:88:98:c7:45:5b:c9:a9:13:96:98:ba:06: 25:aa:e7:9e:a3:46:22:ca:c2:a8:b1:52:a5:8d:1a:fd:5e:8c: 6b:5a:a4:b8:eb:d2:04:64:8f:c4:ad:a7:a5:97:3d:a2:86:0d: ee:05:4b:85:62:80:c2:57:8b:0c:ef:8b:a6:bf:1d:34:0c:6f: 34:54:28:0c:f8:9f:91:17:20:13:e3:1e:67:33:95:b6:65:84: e1:0f:64:e8:84:ef:2c:8a:0c:6f:6b:e3:d9:87:8a:1c:08:12: 5b:93:50:08:6e:94:5d:a5:6b:4a:aa:61:28:f0:10:61:97:3a: 99:5e:bd:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEltYSt/h0/volYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNm N2Y4MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODVlYmYyMDMtZTEwNi00MzA1LWIxMTEtN2NhYTYxMTg4OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnryxrKhc/zyTQyPCZIWG5Z7gGkEF/Jwy4m9b Ma7PJ7liaYFt8lqBShmO4e1wWm8FLf/RwVwCfOo6XUpn/knuX3gxE/Ia5kfroRtW TzppAN9d4VC8BzT2OrxnysaK1HSuGFs2SvMUNekVbXVlaKPND9luF8nQsY6ybmsQ bAmdvtfSB2UvN2QPVcappD7lkZjQE3RAz8bQwCkf13VO2totBhwjG/yHohSgp5Xd HSmgkjtytrH7bk4WPqYCj44yaLDa/QNxjp27Ftt/NTGXyLndLG4xQNWswBdip1SN vZtwigSo55JXV2xlI9NI+eAErqXClf1yrH1mhifWjDHgUu1/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnUpUjG8Y2sFh8zkEBGhT039MtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDhl NGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvOGFlNjdlOGEtMTA0ZC0z YTg0LThiODUtNDUwY2FhMjU4NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1 MTUtOTAxNzA4YzNmN2Y4L2VkOGU0ZGZhLWU5MGUtNGUzZC1hNTE1LTkwMTcwOGMz ZjdmOC5jcmwwHwYDVR0jBBgwFoAU2R0Zrz+TBG1NWTZN1xzphxtdhOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3 MDhjM2Y3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKVX88uIO4sj/m0s3sT+26VW2xBjQ7wRgDDmZE6RFFQTIVsgD0jRCI8 SmezDrp2hzn7QgePNZma4xUGE1TBTrCsDRaEYVEuiZTm+97JcAiINZyPBEBGc2Wb QcQuoMItFYRUaxH4b0SCmtA9zfWfEN3+BDu4CP/xW+ZDsarOOnL5HygKLoiYx0Vb yakTlpi6BiWq556jRiLKwqixUqWNGv1ejGtapLjr0gRkj8Stp6WXPaKGDe4FS4Vi gMJXiwzvi6a/HTQMbzRUKAz4n5EXIBPjHmczlbZlhOEPZOiE7yyKDG9r49mHihwI EluTUAhulF2la0qqYSjwEGGXOplevQg= -----END CERTIFICATE-----Generated at Tue Mar 10 08:52:06 2026 by rpki-client