$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa File: a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa (raw, json) Hash identifier: HGWl572Hs7njNy9Qh5oOw6nlsGH7ucKE/pYsEnh4bdA= Subject key identifier: 5A:8A:5E:E2:F2:72:18:F7:8F:96:4D:0F:02:32:A2:91:5C:24:AE:7D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CF6ECD956167355DC46C16040 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 31898 IP address blocks: 199.87.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d9:56:16:73:55:dc:46:c1:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=842c4d95-bb9b-47bd-83df-a3dd3e1fa15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:12:fc:12:81:b0:6b:0f:a9:e1:d8:d1:8b: 93:5f:be:51:59:3c:55:db:19:e0:60:f7:72:86:aa: 27:34:91:37:88:d0:fa:74:ba:5b:f6:03:82:c1:20: dc:eb:07:4f:4e:0d:e2:71:a5:e7:8d:1a:ff:eb:56: d8:a6:96:43:5f:a9:9d:56:41:9c:36:86:42:9d:1d: 68:be:55:97:be:5f:e6:10:88:69:ca:04:2e:66:a0: 59:03:7b:49:1b:25:32:c9:e8:12:75:bb:84:70:6b: 84:53:39:fa:ca:00:09:3d:dd:0e:d3:b3:b3:46:7d: c9:2b:dd:bb:62:74:31:8c:fc:b6:c1:aa:80:0d:80: 6c:69:fb:56:47:5f:ef:ed:f3:d4:46:4f:cd:e5:b7: b9:6b:1c:13:12:8d:bf:ec:e3:3c:65:50:da:a7:25: 3a:0a:a1:cf:02:9f:78:c7:1d:30:d6:89:93:9b:21: e8:b0:00:0b:57:f3:e9:3b:03:50:72:6a:35:30:ce: d8:35:14:c5:3e:16:22:08:21:dd:03:be:38:40:dd: a6:04:a2:df:98:9f:83:93:ed:7c:65:71:3f:9f:26: e8:00:30:e4:42:f7:a5:dd:9c:4e:e9:73:7a:c6:d9: 20:15:ce:ca:fa:9d:ee:c2:9b:97:83:72:a0:c6:7b: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8A:5E:E2:F2:72:18:F7:8F:96:4D:0F:02:32:A2:91:5C:24:AE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 199.87.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:59:e5:f7:f5:dc:06:b9:c4:d1:a5:de:0e:6f:a6:ee:59:a1: 03:9f:c6:ab:65:54:6e:9d:70:68:9c:1e:39:96:b0:8a:5c:a9: 46:eb:4a:22:cf:ef:95:9d:43:a6:0d:90:a4:f5:87:2b:56:53: bf:ab:d8:79:8d:4e:a4:db:72:3e:4d:f4:c6:a1:21:3f:28:4b: 7e:18:ae:b5:6a:7c:e5:20:85:87:40:3d:69:ef:bc:83:b1:c4: 73:44:a4:bd:94:bb:ec:a2:6b:1e:2c:f5:45:13:df:ff:9b:95: 79:d8:3d:55:34:e7:80:48:a5:fb:ff:a3:e2:e9:9b:58:c3:0b: 3f:2a:4c:84:14:6b:0d:f9:5b:0e:3e:bc:2a:8f:a4:ef:38:07: 36:a2:9d:be:27:ed:f2:07:34:49:60:67:aa:eb:8f:b7:c6:68: 1d:36:cc:e0:5e:45:6c:fc:42:cd:d2:ea:bc:2e:e5:40:e3:a1: e5:0d:39:45:1f:c8:15:fb:55:9b:4f:92:ce:46:a3:75:d4:36: 62:e0:57:7c:a6:ed:92:93:a7:a2:ea:72:33:76:ea:02:0d:f4: 8c:49:58:5d:4d:fa:b1:c2:1b:69:53:a1:c8:7b:a1:83:ea:88: b5:b3:e2:82:0a:09:dd:c9:73:2e:f5:ab:7c:a5:49:5b:3f:e8: d5:18:07:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NlWFnNV3EbBYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODQyYzRkOTUtYmI5Yi00N2JkLTgzZGYtYTNkZDNlMWZhMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGwS/BKBsGsPqeHY0YuTX75RWTxV2xngYPdy hqonNJE3iND6dLpb9gOCwSDc6wdPTg3icaXnjRr/61bYppZDX6mdVkGcNoZCnR1o vlWXvl/mEIhpygQuZqBZA3tJGyUyyegSdbuEcGuEUzn6ygAJPd0O07OzRn3JK927 YnQxjPy2waqADYBsaftWR1/v7fPURk/N5be5axwTEo2/7OM8ZVDapyU6CqHPAp94 xx0w1omTmyHosAALV/PpOwNQcmo1MM7YNRTFPhYiCCHdA744QN2mBKLfmJ+Dk+18 ZXE/nyboADDkQvel3ZxO6XN6xtkgFc7K+p3uwpuXg3KgxnuclwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqKXuLychj3j5ZNDwIyopFcJK59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYTFjNmUxODktOGE0MS0z MGY1LWEyNTgtZjQxMWU4N2VhOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1d6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9Z5ff13Aa5xNGl3g5vpu5ZoQOfxqtlVG6dcGicHjmWsIpcqUbrSiLP 75WdQ6YNkKT1hytWU7+r2HmNTqTbcj5N9MahIT8oS34YrrVqfOUghYdAPWnvvIOx xHNEpL2Uu+yiax4s9UUT3/+blXnYPVU054BIpfv/o+Lpm1jDCz8qTIQUaw35Ww4+ vCqPpO84Bzainb4n7fIHNElgZ6rrj7fGaB02zOBeRWz8Qs3S6rwu5UDjoeUNOUUf yBX7VZtPks5Go3XUNmLgV3ym7ZKTp6LqcjN26gIN9IxJWF1N+rHCG2lToch7oYPq iLWz4oIKCd3Jcy71q3ylSVs/6NUYB5w= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:54 2026 by rpki-client