$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/841aba38-7d00-30d9-863c-9732d3a8519c.roa File: 841aba38-7d00-30d9-863c-9732d3a8519c.roa (raw, json) Hash identifier: fcERRYbwv5v0o0hEIq+5d6+z36Cwqn8AfqNReFUFVMw= Subject key identifier: 5E:05:1F:D6:42:FC:CF:FF:48:7E:1B:EC:64:9D:9D:9D:B2:B0:12:7F Certificate issuer: /CN=23658315-b56f-46db-89d2-184000d7f7e1 Certificate serial: 010D0C9F4328584CAE571266A6FFD05D27F05680 Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/841aba38-7d00-30d9-863c-9732d3a8519c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 26968 IP address blocks: 199.101.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:12:66:a6:ff:d0:5d:27:f0:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9ac26b4c-1ac5-4eae-ab31-78ca17905884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:02:ee:f4:e9:87:ed:9e:07:18:77:61:26: 64:86:5d:a2:07:ed:fb:ab:9c:f8:b1:2a:c3:76:fa: 52:ce:3d:d0:30:98:c9:db:28:bc:bb:c1:14:38:55: 74:a7:f2:11:b2:54:8b:7a:06:56:8b:6d:95:ac:07: ae:a2:33:46:be:b0:e8:9d:7e:49:bf:5c:90:36:4d: 15:b2:c6:30:eb:11:80:7d:a1:57:7c:a5:3a:a6:b1: a0:20:43:b7:2c:e5:de:1b:41:42:c2:cc:16:22:1a: 46:ff:bc:3a:e7:c1:1f:4a:f1:50:2f:0d:e1:4c:1c: 75:40:6f:62:ad:5d:85:e7:f7:a5:38:4c:74:70:30: 2a:e9:f4:46:29:a3:b1:1a:b2:e0:6c:4f:be:3c:09: 4d:72:c8:81:4e:4c:c8:2c:52:56:07:7b:46:f8:54: da:15:2a:9a:a6:ec:a4:ea:cb:f2:23:48:2c:ec:b5: d6:71:5e:23:18:16:1c:8d:24:07:31:04:4b:01:26: 5d:e9:4b:8c:02:e7:c7:b4:85:cd:1f:1d:12:89:23: 50:a6:e9:ec:fc:9b:cb:6f:14:c7:6d:73:ec:b7:cf: ed:05:2f:22:8a:5b:7b:13:84:64:1d:53:1f:0d:04: 45:1d:10:fd:82:8a:c6:e1:7e:1f:57:8e:00:7d:f7: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:05:1F:D6:42:FC:CF:FF:48:7E:1B:EC:64:9D:9D:9D:B2:B0:12:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/841aba38-7d00-30d9-863c-9732d3a8519c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl X509v3 Authority Key Identifier: keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer sbgp-ipAddrBlock: critical IPv4: 199.101.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:79:e1:f4:20:89:4c:fe:35:33:49:37:3d:7c:38:ae:93:28: 1c:91:8e:9a:1c:ae:75:4b:de:d4:8c:e6:d6:08:9f:64:c3:6b: 7d:4b:3f:34:2d:c6:c0:e5:66:93:74:0f:b3:83:29:c9:8c:f1: 6c:6d:9c:ac:03:6b:3b:48:41:44:2f:6f:68:af:f9:68:92:82: b2:40:0d:e3:11:76:21:31:77:f1:4a:2e:95:ba:e7:d6:30:fb: 0b:1d:0b:e9:ad:1b:cf:35:bb:2f:ab:1b:ca:f1:b0:ae:50:2e: 85:db:a2:c3:ba:b2:f9:3f:f1:e5:90:15:6f:9f:1e:11:68:50: 2d:dd:a5:cd:c3:75:b6:78:09:9e:29:3f:5f:d1:c8:19:b7:64: 91:d5:77:46:05:6e:27:e0:d9:f9:68:86:e4:c1:3b:5f:11:1b: 5a:c1:80:89:4f:e1:6d:0e:02:18:44:f8:3c:29:e6:37:20:03: 4c:ed:69:f0:1b:26:a7:f3:b7:39:74:db:59:ea:05:d8:9a:3a: f6:48:9d:88:09:65:45:e7:87:3c:ed:c3:d6:8f:48:79:20:49: 6c:9d:f6:26:e1:1d:c4:c5:82:b4:66:ff:76:ee:15:0b:fe:7c: 39:eb:85:ea:44:54:cc:7e:61:21:44:f5:9d:49:d9:09:2c:8d: de:6f:1d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxJmpv/QXSfwVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm N2UxMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWFjMjZiNGMtMWFjNS00ZWFlLWFiMzEtNzhjYTE3OTA1ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtMC7vTph+2eBxh3YSZkhl2iB+37q5z4sSrD dvpSzj3QMJjJ2yi8u8EUOFV0p/IRslSLegZWi22VrAeuojNGvrDonX5Jv1yQNk0V ssYw6xGAfaFXfKU6prGgIEO3LOXeG0FCwswWIhpG/7w658EfSvFQLw3hTBx1QG9i rV2F5/elOEx0cDAq6fRGKaOxGrLgbE++PAlNcsiBTkzILFJWB3tG+FTaFSqapuyk 6svyI0gs7LXWcV4jGBYcjSQHMQRLASZd6UuMAufHtIXNHx0SiSNQpuns/JvLbxTH bXPst8/tBS8iilt7E4RkHVMfDQRFHRD9gorG4X4fV44Affd71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4FH9ZC/M//SH4b7GSdnZ2ysBJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1 ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvODQxYWJhMzgtN2QwMC0z MGQ5LTg2M2MtOTczMmQzYTg1MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5 ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3 ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2VLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR54fQgiUz+NTNJNz18OK6TKByRjpocrnVL3tSM5tYIn2TDa31LPzQt xsDlZpN0D7ODKcmM8WxtnKwDaztIQUQvb2iv+WiSgrJADeMRdiExd/FKLpW659Yw +wsdC+mtG881uy+rG8rxsK5QLoXbosO6svk/8eWQFW+fHhFoUC3dpc3DdbZ4CZ4p P1/RyBm3ZJHVd0YFbifg2flohuTBO18RG1rBgIlP4W0OAhhE+Dwp5jcgA0ztafAb Jqfztzl021nqBdiaOvZInYgJZUXnhzztw9aPSHkgSWyd9ibhHcTFgrRm/3buFQv+ fDnrhepEVMx+YSFE9Z1J2Qksjd5vHQw= -----END CERTIFICATE-----Generated at Mon Mar 2 22:36:15 2026 by rpki-client