$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa File: be99669b-76e7-3a62-9151-901a36da86da.roa (raw, json) Hash identifier: mBJ1UG3ADp3YbXG+opxYydV/TyjgQAX6xAYfQY9r2iE= Subject key identifier: B8:40:CE:12:FA:2D:13:AB:1E:00:47:7C:61:F1:2D:D1:97:B9:24:46 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584D11726914782FB6DFAEBEF240 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 212238 IP address blocks: 199.181.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:69:14:78:2f:b6:df:ae:be:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=8ff08a93-47e4-4a8b-a56d-ada35fad9679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:05:b4:ba:91:64:74:b1:29:d2:f8:51:2d: 78:a9:8a:49:f4:1e:8d:3d:b7:0e:a7:1c:41:c6:71: 8f:17:01:4d:16:cd:3e:b3:28:61:0c:50:2d:9e:26: c8:ed:c9:38:64:cc:f9:8b:d2:4a:74:06:11:78:0d: 27:87:05:c1:4e:f2:d7:aa:d0:bf:f7:61:8f:e6:2b: f0:a7:b1:19:f8:75:e6:1c:23:75:2d:8e:46:cf:65: e1:9e:01:bc:ac:5f:1e:95:f4:87:cf:34:1b:61:1e: 4d:73:a4:8f:b0:ce:98:e4:ba:52:e6:97:ba:85:7e: f8:0e:46:d0:61:77:24:90:2a:34:e2:c8:d7:60:e9: 60:f7:9f:f8:fe:d8:8b:77:9f:b8:c8:2b:df:e1:d6: ca:dc:99:e9:3e:e3:17:4c:35:f0:9b:01:6b:a7:06: ae:10:ed:3c:22:3f:85:9c:18:95:53:1e:52:40:5f: a4:84:79:07:2b:19:68:94:eb:d1:17:c5:3e:4f:39: 0b:c9:50:c8:20:55:1b:55:f5:bc:a5:5e:60:64:7f: d8:79:7a:eb:4f:8d:1a:ae:cb:62:e2:b2:ea:05:8b: 6c:f9:a6:38:17:87:a9:b2:70:cb:e4:38:e5:f2:b8: da:46:17:e4:65:81:97:6d:82:4d:0e:e3:7e:6c:45: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:CE:12:FA:2D:13:AB:1E:00:47:7C:61:F1:2D:D1:97:B9:24:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be99669b-76e7-3a62-9151-901a36da86da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 199.181.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d6:5f:b2:dc:5c:c9:a2:ad:4e:fe:56:75:d4:d4:a6:1f:4e: 13:35:e2:d9:04:d5:29:90:f6:d2:bf:70:79:a8:ab:c4:d7:1b: ff:c9:73:31:16:bc:a5:c5:8b:ad:57:4b:98:d6:6e:0c:ca:4c: b0:e4:f8:7f:67:b6:6d:f6:eb:a2:ec:4b:9a:b7:2b:8c:b3:98: 81:e3:45:8f:8e:ab:3b:34:48:70:a8:a0:8c:e4:32:9e:e5:4c: a2:ee:85:1f:3d:68:26:c7:93:e9:79:bc:e6:1c:bd:74:db:ad: 01:aa:ca:f7:a0:6d:84:1e:76:21:3c:3d:d4:ed:bc:8e:4d:bc: a6:84:f0:18:2f:1e:bc:95:2b:70:b3:44:67:34:a1:2d:98:aa: b3:8c:5d:b0:d5:e3:1d:40:8b:bc:9d:9a:43:b5:d5:f7:0d:b1: d4:20:f0:ae:75:79:22:38:37:eb:cb:74:08:53:7c:8c:d5:2f: e3:27:26:4f:90:33:dd:2a:7d:43:57:f5:8c:f5:ae:05:7d:93: 70:89:2a:51:70:eb:8e:9d:87:0b:0d:d7:d2:ea:b4:ca:d2:51: 8e:93:95:e4:c6:b4:4a:30:7d:21:93:1c:46:74:5c:cc:3f:d5: 82:21:93:e9:0e:0d:82:48:9d:29:28:27:a9:70:ad:c6:d4:07: be:a7:61:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmkUeC+2366+8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk OGZmMDhhOTMtNDdlNC00YThiLWE1NmQtYWRhMzVmYWQ5Njc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUgFtLqRZHSxKdL4US14qYpJ9B6NPbcOpxxB xnGPFwFNFs0+syhhDFAtnibI7ck4ZMz5i9JKdAYReA0nhwXBTvLXqtC/92GP5ivw p7EZ+HXmHCN1LY5Gz2XhngG8rF8elfSHzzQbYR5Nc6SPsM6Y5LpS5pe6hX74DkbQ YXckkCo04sjXYOlg95/4/tiLd5+4yCvf4dbK3JnpPuMXTDXwmwFrpwauEO08Ij+F nBiVUx5SQF+khHkHKxlolOvRF8U+TzkLyVDIIFUbVfW8pV5gZH/YeXrrT40arsti 4rLqBYts+aY4F4epsnDL5Djl8rjaRhfkZYGXbYJNDuN+bEVarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhAzhL6LROrHgBHfGHxLdGXuSRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmU5OTY2OWItNzZlNy0z YTYyLTkxNTEtOTAxYTM2ZGE4NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7XvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvWX7LcXMmirU7+VnXU1KYfThM14tkE1SmQ9tK/cHmoq8TXG//JczEW vKXFi61XS5jWbgzKTLDk+H9ntm3266LsS5q3K4yzmIHjRY+Oqzs0SHCooIzkMp7l TKLuhR89aCbHk+l5vOYcvXTbrQGqyvegbYQediE8PdTtvI5NvKaE8BgvHryVK3Cz RGc0oS2YqrOMXbDV4x1Ai7ydmkO11fcNsdQg8K51eSI4N+vLdAhTfIzVL+MnJk+Q M90qfUNX9Yz1rgV9k3CJKlFw646dhwsN19LqtMrSUY6TleTGtEowfSGTHEZ0XMw/ 1YIhk+kODYJInSkoJ6lwrcbUB76nYeA= -----END CERTIFICATE-----Generated at Tue Mar 17 05:34:10 2026 by rpki-client