$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/a9a01585-551d-360e-98ce-07ff9d46d7a1.roa File: a9a01585-551d-360e-98ce-07ff9d46d7a1.roa (raw, json) Hash identifier: MBs+zeLT1VCDftfGl9iPko31gxindu2SXkGnb3u3yIo= Subject key identifier: 32:F3:41:5A:11:79:02:79:1A:C5:E4:F1:E1:DF:77:F5:1F:B4:A6:EF Certificate issuer: /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Certificate serial: 010D0C9F4328584CD6D221DDA6E69DDBB914C1E0 Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/a9a01585-551d-360e-98ce-07ff9d46d7a1.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 36131 IP address blocks: 199.30.240.0/24 maxlen: 24 199.30.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:21:dd:a6:e6:9d:db:b9:14:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=ce4b3484-27cd-4f18-902a-b252e8d627b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e7:0a:ac:ac:e4:91:b2:08:00:f6:ba:1a:64: 05:dd:30:74:79:7b:74:9d:4e:a6:f2:cf:8e:53:09: c5:3f:27:44:eb:fd:21:c2:78:d9:87:06:12:4b:2a: a4:5f:47:fb:02:80:5f:6d:c9:76:85:14:fc:80:e1: c3:05:82:ce:89:0b:a2:7a:3c:d5:87:64:75:9f:a2: a6:b7:63:5c:31:22:bf:d6:fe:cf:49:54:68:4d:35: f2:c1:9a:d2:47:32:50:f4:3c:88:1c:f5:6b:fb:24: b6:1f:c1:cf:6f:01:bc:df:17:64:d2:77:8c:18:21: 9b:46:8f:9d:84:a6:11:6b:22:81:55:60:ea:95:d9: f9:1d:d3:4a:66:c0:52:90:3a:f7:0d:11:65:bc:d7: bd:5c:0b:77:5c:49:ba:d3:3b:0e:fc:88:49:69:82: e3:b7:44:c3:0a:d6:89:de:f6:37:c0:09:cd:58:e0: cd:5c:8d:fc:01:94:47:0a:d4:3e:f5:09:68:ac:c5: 6c:9d:fe:78:fa:1a:4f:ea:41:5a:f0:0d:2b:6c:3b: 55:38:2a:c0:88:5a:d9:a2:50:6a:4c:2c:d3:f0:29: e3:53:25:2a:87:55:7a:2b:9d:f2:70:12:61:7e:64: 80:f8:55:22:4f:88:56:30:7e:02:54:31:ed:76:13: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F3:41:5A:11:79:02:79:1A:C5:E4:F1:E1:DF:77:F5:1F:B4:A6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/a9a01585-551d-360e-98ce-07ff9d46d7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl X509v3 Authority Key Identifier: keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer sbgp-ipAddrBlock: critical IPv4: 199.30.240.0/24 199.30.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:76:d0:29:73:58:0e:fc:84:21:9f:93:d6:03:40:6c:25:ed: b8:ae:0b:83:00:5b:0f:cf:1b:11:19:e0:c8:2e:04:d7:36:62: 28:29:da:25:fb:89:ab:fb:06:09:ea:ca:07:e9:f3:54:d4:e3: 62:5c:b2:57:c5:3e:f9:1f:71:56:52:54:42:5e:e6:1b:c7:22: 2e:96:3f:41:15:39:6d:d4:ee:a5:1f:60:e4:1a:d8:b5:6c:aa: 9d:ee:92:6f:8c:18:7d:f4:cc:e0:87:4b:fb:6a:43:99:db:6e: 45:7c:fe:29:fd:a0:2e:db:f7:a9:5a:ca:d6:34:18:18:b1:b1: 63:08:0d:ac:5e:35:47:6b:8b:c8:c9:43:92:8b:a8:3b:aa:51: 54:65:b1:2e:57:f9:1e:fd:39:1c:0b:a0:20:bf:22:c2:7b:66: 83:7f:f8:a4:ac:bf:e8:0f:f8:03:c5:77:64:59:8e:ec:0a:ab: 6e:af:b8:99:00:09:14:6b:3a:93:ee:5c:d1:23:29:62:b6:ce: 7a:e1:0a:57:f9:71:24:84:e1:a9:ef:32:95:84:15:69:96:e5: d1:d2:34:3f:de:b0:94:c3:82:7b:ec:a3:1f:7e:d2:53:bf:b1: 11:f3:6b:82:32:41:48:aa:be:6a:df:67:ab:7f:db:2f:dc:e7: 21:00:fb:b5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzW0iHdpuad27kUweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5MjUzZmUtOGI0Zi00OGY2LTlmZTEtMTA5ZGY2YmIz MjUxMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk Y2U0YjM0ODQtMjdjZC00ZjE4LTkwMmEtYjI1MmU4ZDYyN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ucKrKzkkbIIAPa6GmQF3TB0eXt0nU6m8s+O UwnFPydE6/0hwnjZhwYSSyqkX0f7AoBfbcl2hRT8gOHDBYLOiQuiejzVh2R1n6Km t2NcMSK/1v7PSVRoTTXywZrSRzJQ9DyIHPVr+yS2H8HPbwG83xdk0neMGCGbRo+d hKYRayKBVWDqldn5HdNKZsBSkDr3DRFlvNe9XAt3XEm60zsO/IhJaYLjt0TDCtaJ 3vY3wAnNWODNXI38AZRHCtQ+9QlorMVsnf54+hpP6kFa8A0rbDtVOCrAiFrZolBq TCzT8CnjUyUqh1V6K53ycBJhfmSA+FUiT4hWMH4CVDHtdhMhlwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDLzQVoReQJ5GsXk8eHfd/UftKbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTky NTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlkZjZiYjMyNTEvYTlhMDE1ODUtNTUxZC0z NjBlLTk4Y2UtMDdmZjlkNDZkN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTU5MjUzZmUtOGI0Zi00OGY2LTlm ZTEtMTA5ZGY2YmIzMjUxLzU1OTI1M2ZlLThiNGYtNDhmNi05ZmUxLTEwOWRmNmJi MzI1MS5jcmwwHwYDVR0jBBgwFoAU+dOqBOdJT5n/YbCdWYtxuQDxUwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTkyNTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlk ZjZiYjMyNTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxx7wAwQA xx7yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHR20ClzWA78hCGfk9YDQGwl7biuC4MAWw/PGxEZ4MguBNc2 Yigp2iX7iav7Bgnqygfp81TU42JcslfFPvkfcVZSVEJe5hvHIi6WP0EVOW3U7qUf YOQa2LVsqp3ukm+MGH30zOCHS/tqQ5nbbkV8/in9oC7b96laytY0GBixsWMIDaxe NUdri8jJQ5KLqDuqUVRlsS5X+R79ORwLoCC/IsJ7ZoN/+KSsv+gP+APFd2RZjuwK q26vuJkACRRrOpPuXNEjKWK2znrhClf5cSSE4anvMpWEFWmW5dHSND/esJTDgnvs ox9+0lO/sRHza4IyQUiqvmrfZ6t/2y/c5yEA+7U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:39 2026 by rpki-client