$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa File: 828f5560-8643-3618-befe-cdea85db6497.roa (raw, json) Hash identifier: jKtntMRFVyNKLEySyQIqOwhTGNLZhtojtUNJzHOCHpc= Subject key identifier: D2:94:20:6F:6F:7A:7F:6D:B7:AF:95:26:34:1F:EF:42:AE:76:7E:20 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CB121E076364DD6717BA8E200 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 31898 IP address blocks: 199.87.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:e0:76:36:4d:d6:71:7b:a8:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=c0e53c3a-e931-4d29-b1a4-a7bd3a102e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:b8:05:ba:5d:bb:9d:6c:10:69:bd:61:4f: 1e:07:40:7b:3e:8d:3c:e4:23:74:26:63:98:f8:5e: e4:4b:59:9c:54:34:0f:c9:fe:79:37:5d:4a:b9:2d: f7:92:ea:f1:68:31:f7:31:8c:b9:0d:19:6e:bf:01: ee:1c:6d:32:03:d2:0f:e7:99:0a:f6:cf:6c:63:44: f0:c7:59:58:65:e8:eb:72:63:10:c0:97:6e:fc:fb: 44:39:1a:b8:32:f5:4e:9a:e6:01:ce:34:55:9d:77: dc:23:8e:7d:27:97:b4:f3:4d:81:63:ac:43:ed:50: b1:8d:f9:19:03:57:08:1d:97:75:5a:4f:52:1b:6a: 83:06:08:8c:74:e4:bb:b7:16:db:32:d3:85:b8:6e: 9a:43:7b:6e:38:2c:33:5e:98:da:12:51:c5:83:60: c5:82:ea:59:03:de:6b:46:8c:e0:f8:16:13:bb:76: 4f:3b:51:6c:db:4b:4a:55:4f:bd:5f:74:96:6c:85: 53:46:ea:b3:6a:ad:f7:f4:37:68:40:64:4f:21:ff: 0f:78:58:c7:45:c5:d0:8f:e3:2f:a6:dd:66:e8:3e: 8e:27:45:fd:21:be:b8:45:31:f3:ee:d7:9f:b0:d4: 13:c0:db:eb:ec:24:fe:07:ad:87:95:9c:49:28:7d: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:20:6F:6F:7A:7F:6D:B7:AF:95:26:34:1F:EF:42:AE:76:7E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/828f5560-8643-3618-befe-cdea85db6497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:52:7a:a3:d6:d8:f4:c7:1d:6e:d9:9f:cb:e9:48:f0:64:5c: fb:57:88:2a:9a:6b:81:1a:0a:b9:51:41:b2:63:33:1f:8f:7a: d0:42:5d:b0:a6:be:15:72:a6:db:57:89:c2:8c:da:08:11:e1: 14:d1:e7:f2:1f:59:b0:91:af:6c:93:ac:51:29:77:ec:e9:24: fd:8b:3f:73:10:2d:3a:26:b4:47:da:d2:f9:cc:cb:97:84:15: a4:8a:ab:56:58:9c:5e:61:20:60:42:b8:bf:9a:9c:36:09:c2: c0:08:58:48:92:7a:f6:d8:ba:94:a5:27:dd:eb:e3:a7:1f:7f: 8c:30:b9:eb:e9:0e:10:ce:e2:75:d2:4b:0b:fe:6e:2b:6e:94: 33:f6:ab:20:b6:a5:18:09:91:b9:10:a8:dd:fe:20:2c:79:14: a6:71:b1:cb:ef:5a:aa:15:dc:f0:e7:96:ce:33:cc:35:fc:c2: 80:fa:8c:be:1d:1b:ad:f4:e0:24:3e:53:53:d5:a0:c3:16:b6: 60:60:3f:90:e1:56:db:00:5c:c6:6a:2c:d6:cd:da:ff:c2:5f: 34:d4:a1:7b:38:63:69:a0:73:93:25:3b:d6:f5:04:89:8b:ca: 0e:a8:88:0d:67:37:0a:ac:f1:df:dc:6c:9f:59:b3:bd:dd:a0: 94:31:48:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIeB2Nk3WcXuo4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzBlNTNjM2EtZTkzMS00ZDI5LWIxYTQtYTdiZDNhMTAyZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y+4Bbpdu51sEGm9YU8eB0B7Po085CN0JmOY +F7kS1mcVDQPyf55N11KuS33kurxaDH3MYy5DRluvwHuHG0yA9IP55kK9s9sY0Tw x1lYZejrcmMQwJdu/PtEORq4MvVOmuYBzjRVnXfcI459J5e0802BY6xD7VCxjfkZ A1cIHZd1Wk9SG2qDBgiMdOS7txbbMtOFuG6aQ3tuOCwzXpjaElHFg2DFgupZA95r Rozg+BYTu3ZPO1Fs20tKVU+9X3SWbIVTRuqzaq339DdoQGRPIf8PeFjHRcXQj+Mv pt1m6D6OJ0X9Ib64RTHz7tefsNQTwNvr7CT+B62HlZxJKH0Y+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKUIG9ven9tt6+VJjQf70Kudn4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODI4ZjU1NjAtODY0My0z NjE4LWJlZmUtY2RlYTg1ZGI2NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhSeqPW2PTHHW7Zn8vpSPBkXPtXiCqaa4EaCrlRQbJjMx+PetBCXbCm vhVypttXicKM2ggR4RTR5/IfWbCRr2yTrFEpd+zpJP2LP3MQLTomtEfa0vnMy5eE FaSKq1ZYnF5hIGBCuL+anDYJwsAIWEiSevbYupSlJ93r46cff4wwuevpDhDO4nXS Swv+bitulDP2qyC2pRgJkbkQqN3+ICx5FKZxscvvWqoV3PDnls4zzDX8woD6jL4d G6304CQ+U1PVoMMWtmBgP5DhVtsAXMZqLNbN2v/CXzTUoXs4Y2mgc5MlO9b1BImL yg6oiA1nNwqs8d/cbJ9Zs73doJQxSOY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:53 2026 by rpki-client