$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa File: 3d9be492-283e-32a9-9ca3-e5235522fa2b.roa (raw, json) Hash identifier: w61p77copzstiSbh+esb67MigiK2uubuVg5O347L9UA= Subject key identifier: 66:F4:E3:B5:B0:B7:DB:AF:68:B8:2A:5C:EA:11:C0:DA:50:DC:FF:29 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584D2BDA23388339E940A1F0D930 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 399294 IP address blocks: 200.5.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:23:38:83:39:e9:40:a1:f0:d9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=ffc4ba4d-bf43-4d08-a91d-561c51fa55a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a1:b4:51:8e:a2:51:3a:8a:50:c4:17:5a:08: 36:3e:2e:f7:53:61:32:db:77:02:2f:2f:93:f9:79: 14:7d:7e:c4:1b:e5:88:89:48:bd:57:a6:d8:33:23: e7:2e:30:13:fb:1a:0d:cb:47:01:7a:84:b1:d3:8f: bf:cb:2f:73:fb:69:92:07:ad:6f:aa:f9:38:e6:50: 3d:5a:2c:d1:cc:5b:44:5a:f4:ca:6b:bd:31:7f:97: 4f:90:49:fb:de:33:65:b2:d9:aa:8f:63:ac:e9:b7: 83:64:75:9f:07:67:21:39:c6:d0:ec:64:b9:3e:a0: 4e:c8:e3:ac:e9:9a:e3:df:a7:6c:aa:61:38:8d:0d: 5f:c1:08:97:2f:d2:7f:f5:f0:ca:ee:4c:ea:9b:b1: ee:ec:cc:c4:57:96:32:20:26:c3:c0:33:23:0b:63: ca:3c:f5:4d:80:99:71:26:70:dd:fd:8f:f1:2c:b5: 54:6b:bc:84:a5:4d:bf:80:62:0f:dc:07:2e:7b:fa: 64:e1:ec:ab:77:6f:cc:7f:5e:32:07:47:30:36:cb: d6:40:bc:f3:7d:fb:23:e9:f1:c1:86:67:8a:19:78: 4f:4a:cc:96:5e:c9:d5:d8:a0:9d:4d:97:f2:c6:86: b1:e6:2c:e5:a7:dc:5d:a4:ca:ef:42:4f:ae:39:08: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:E3:B5:B0:B7:DB:AF:68:B8:2A:5C:EA:11:C0:DA:50:DC:FF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/3d9be492-283e-32a9-9ca3-e5235522fa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 200.5.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:94:55:15:41:ff:cb:32:b0:1c:58:e3:03:32:18:11:6b:22: bd:05:df:e0:38:8e:c3:50:9c:9a:a7:7c:fd:f7:ed:b0:92:c8: fd:28:e3:18:46:3c:e2:09:fd:0a:6b:7a:7f:ac:9b:72:00:04: e9:dc:5e:54:be:ab:9f:74:5e:58:69:3a:bc:bd:71:73:de:72: eb:34:37:e9:2e:84:b7:c7:c0:e2:9c:8f:6b:9e:a8:6f:39:06: 88:66:38:94:1a:88:c3:b5:7b:5b:37:2d:06:84:25:9a:13:8f: 3c:7c:a2:61:00:a2:ef:3f:ac:cf:16:a2:76:6c:ff:fc:46:97: f5:fe:a5:41:a3:6b:62:ad:22:60:ed:8e:0b:7d:b9:5f:6f:d9: 2d:00:c1:83:fe:66:1a:fe:98:8c:a3:8c:c3:bc:58:e2:68:d9: 11:26:33:bb:f9:c1:78:8a:9b:0f:79:16:18:39:3e:34:51:17: 77:be:f9:c9:68:b9:1e:32:c9:f1:57:55:eb:24:64:e8:37:d9: 32:e3:c2:cc:f8:1e:62:e8:b6:a0:d0:32:7b:bc:fc:36:c0:40: 8a:c7:b9:e2:9a:3c:f9:30:22:5f:60:45:a1:50:c7:c5:ad:4b: 99:f7:22:0e:77:b8:86:a2:47:71:fe:d2:aa:a3:ad:3f:79:00: 22:09:56:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iM4gznpQKHw2TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZmZjNGJhNGQtYmY0My00ZDA4LWE5MWQtNTYxYzUxZmE1NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aG0UY6iUTqKUMQXWgg2Pi73U2Ey23cCLy+T +XkUfX7EG+WIiUi9V6bYMyPnLjAT+xoNy0cBeoSx04+/yy9z+2mSB61vqvk45lA9 WizRzFtEWvTKa70xf5dPkEn73jNlstmqj2Os6beDZHWfB2chOcbQ7GS5PqBOyOOs 6Zrj36dsqmE4jQ1fwQiXL9J/9fDK7kzqm7Hu7MzEV5YyICbDwDMjC2PKPPVNgJlx JnDd/Y/xLLVUa7yEpU2/gGIP3Acue/pk4eyrd2/Mf14yB0cwNsvWQLzzffsj6fHB hmeKGXhPSsyWXsnV2KCdTZfyxoax5izlp9xdpMrvQk+uOQgEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb047Wwt9uvaLgqXOoRwNpQ3P8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvM2Q5YmU0OTItMjgzZS0z MmE5LTljYTMtZTUyMzU1MjJmYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuUVRVB/8sysBxY4wMyGBFrIr0F3+A4jsNQnJqnfP337bCSyP0o4xhG POIJ/Qpren+sm3IABOncXlS+q590XlhpOry9cXPecus0N+kuhLfHwOKcj2ueqG85 BohmOJQaiMO1e1s3LQaEJZoTjzx8omEAou8/rM8WonZs//xGl/X+pUGja2KtImDt jgt9uV9v2S0AwYP+Zhr+mIyjjMO8WOJo2REmM7v5wXiKmw95Fhg5PjRRF3e++clo uR4yyfFXVeskZOg32TLjwsz4HmLotqDQMnu8/DbAQIrHueKaPPkwIl9gRaFQx8Wt S5n3Ig53uIaiR3H+0qqjrT95ACIJVr8= -----END CERTIFICATE-----Generated at Mon Mar 16 22:40:47 2026 by rpki-client