$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3ee4997f-2e99-33f0-8dad-2578754155cf.roa File: 3ee4997f-2e99-33f0-8dad-2578754155cf.roa (raw, json) Hash identifier: yhWzyg04LBnpF5i6upQy6u86W55Ici0IOm8W4dxwKiw= Subject key identifier: 28:8B:DA:28:B5:01:59:B3:1A:F2:E2:09:26:47:C2:23:FE:4A:0B:9A Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584D143D45B532DC4F2D30B06780 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3ee4997f-2e99-33f0-8dad-2578754155cf.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 61317 IP address blocks: 199.181.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:45:b5:32:dc:4f:2d:30:b0:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=6a072fb4-bcff-4751-b864-b128ceeecdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:c5:ca:b7:97:f6:da:01:63:89:71:c5:8b: b0:ba:b1:89:52:be:80:e1:46:1a:f8:56:12:3e:82: d3:d2:1f:81:06:14:56:af:7a:fb:df:67:1e:47:01: dd:86:bc:49:2d:83:84:db:d1:e7:df:cc:7f:21:cc: 68:9c:24:13:ae:06:7b:14:bc:fe:4f:45:50:fe:9d: a5:e8:a4:3c:35:7b:0a:84:ec:97:96:2e:71:88:ea: a5:72:00:66:17:b4:96:34:74:28:fb:37:e1:99:b8: 48:70:ec:2b:bb:52:6d:b5:dd:38:6c:0b:ac:72:4c: 7d:1c:48:5e:ee:f0:f7:c4:b3:c3:95:1a:3e:30:80: ad:31:0e:d5:7c:cb:3c:99:57:d1:11:af:57:25:fe: 49:fe:fa:19:c1:48:6b:a3:d8:eb:58:c5:8f:00:ed: 96:2d:25:ad:74:a6:e6:3e:ba:4f:19:14:13:bf:5e: 29:02:93:5e:b0:ff:1e:40:b6:7b:d4:7f:be:b5:77: c2:51:3f:d3:0a:8e:8f:36:ce:d6:a4:e7:e9:d4:e1: ea:f6:6e:f9:0d:83:6e:d5:a8:b5:d8:68:ec:f2:a4: 7f:05:8e:ce:4e:5b:3f:73:7e:76:c7:11:dd:16:bd: 7d:91:43:3b:0d:18:7e:52:7c:70:4d:3a:7e:c3:4b: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8B:DA:28:B5:01:59:B3:1A:F2:E2:09:26:47:C2:23:FE:4A:0B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3ee4997f-2e99-33f0-8dad-2578754155cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 199.181.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:58:10:25:ed:f8:97:1b:a2:5b:40:b2:ea:55:de:2c:be:8c: 31:79:a5:ad:c9:89:61:2e:c3:a6:d5:84:72:9b:38:99:7e:fc: 88:f7:e4:60:9a:2c:76:6e:de:6c:37:53:65:54:23:55:c7:3f: fe:6a:1e:08:ec:6b:74:58:64:0c:d4:29:ed:41:ca:99:b6:41: 8b:8d:e4:d6:16:c2:b8:f2:6e:6b:50:e6:48:9c:50:de:0d:d7: 1c:0e:b1:23:b7:9d:48:c9:23:90:95:68:06:af:ac:5e:83:4f: 57:f9:70:ac:4b:ae:7b:3c:7d:05:3b:74:c6:37:4e:0d:52:1c: f7:71:8a:5e:70:bf:92:18:bb:fb:33:04:10:3f:c8:1a:da:29: ec:b9:1f:67:a4:f6:97:4a:b6:f2:a1:19:69:19:78:a5:3f:6a: 4f:0f:ba:60:4e:52:3f:ba:6d:78:fb:50:1e:a8:7f:48:50:7c: f4:ae:5f:75:36:02:23:8f:88:64:f2:a0:ae:26:a7:2e:df:c4: 68:ba:ae:2d:88:b7:21:c6:33:08:25:20:e5:56:cd:8a:05:a3: 54:43:cf:78:69:1f:4f:45:e8:0d:bb:0e:49:61:3b:d5:91:85: 48:7c:29:10:38:6a:23:7e:0d:a6:9e:de:18:40:9f:74:8c:89: 8a:34:3a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUW1MtxPLTCwZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NmEwNzJmYjQtYmNmZi00NzUxLWI4NjQtYjEyOGNlZWVjZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXrFyreX9toBY4lxxYuwurGJUr6A4UYa+FYS PoLT0h+BBhRWr3r732ceRwHdhrxJLYOE29Hn38x/IcxonCQTrgZ7FLz+T0VQ/p2l 6KQ8NXsKhOyXli5xiOqlcgBmF7SWNHQo+zfhmbhIcOwru1Jttd04bAusckx9HEhe 7vD3xLPDlRo+MICtMQ7VfMs8mVfREa9XJf5J/voZwUhro9jrWMWPAO2WLSWtdKbm PrpPGRQTv14pApNesP8eQLZ71H++tXfCUT/TCo6PNs7WpOfp1OHq9m75DYNu1ai1 2Gjs8qR/BY7OTls/c352xxHdFr19kUM7DRh+UnxwTTp+w0vF5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiL2ii1AVmzGvLiCSZHwiP+SguaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvM2VlNDk5N2YtMmU5OS0z M2YwLThkYWQtMjU3ODc1NDE1NWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7XvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9YECXt+JcboltAsupV3iy+jDF5pa3JiWEuw6bVhHKbOJl+/Ij35GCa LHZu3mw3U2VUI1XHP/5qHgjsa3RYZAzUKe1Bypm2QYuN5NYWwrjybmtQ5kicUN4N 1xwOsSO3nUjJI5CVaAavrF6DT1f5cKxLrns8fQU7dMY3Tg1SHPdxil5wv5IYu/sz BBA/yBraKey5H2ek9pdKtvKhGWkZeKU/ak8PumBOUj+6bXj7UB6of0hQfPSuX3U2 AiOPiGTyoK4mpy7fxGi6ri2ItyHGMwglIOVWzYoFo1RDz3hpH09F6A27DklhO9WR hUh8KRA4aiN+Daae3hhAn3SMiYo0OoA= -----END CERTIFICATE-----Generated at Tue Mar 17 05:37:01 2026 by rpki-client