$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa File: ba0578d9-926a-35fa-a460-8eae2d199b7f.roa (raw, json) Hash identifier: iC1cjq6kyHaDyaBdaU9sURSCkr84WpBcibhYQpQ0UW8= Subject key identifier: A4:34:5F:D7:E0:25:16:3E:05:44:28:2F:F9:7C:22:66:E3:08:8D:3A Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Certificate serial: 010D0C9F4328584C9ACC3BEEA1FB3CD0DD30CA80 Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 53589 IP address blocks: 199.59.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:3b:ee:a1:fb:3c:d0:dd:30:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7 Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=f40d3644-d361-4f41-8b3b-6d664a0522a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:c8:41:58:75:ec:9b:1e:3c:97:7c:28:05: 24:42:88:c8:29:96:5e:c9:17:51:ed:f3:df:4c:eb: ed:80:68:6a:9d:3f:1e:e0:02:a4:40:88:05:5a:e7: 7d:60:30:82:70:1b:a0:78:80:9d:26:5d:ae:f7:6c: 59:38:dd:d8:93:72:7b:89:17:8c:98:d0:01:84:22: 90:ff:64:b2:3a:e6:94:2b:8d:4c:96:25:00:04:9f: 61:67:1f:e6:e7:f2:3e:e2:c8:bb:30:9b:66:4f:68: 90:23:e0:9d:53:3b:c1:fe:8a:1a:a3:08:93:e8:59: 1e:4b:eb:ac:43:c2:db:cf:ab:c9:26:0a:7f:fd:00: 91:e6:66:8c:c9:f0:46:76:3b:3d:6b:21:a9:3e:fa: 2a:de:24:5c:89:19:b9:71:28:b8:69:87:a0:75:07: 00:10:3f:7e:af:7b:c4:29:5e:de:bb:73:85:89:60: 85:32:43:1f:18:7f:38:fa:4f:ee:2c:f8:57:3b:60: 97:ca:a7:5c:88:09:d2:68:71:ed:29:f7:99:25:9c: dc:20:a3:e7:50:36:cc:ee:28:e8:52:57:67:68:77: a9:ee:c9:6c:b6:c4:a6:3e:4e:6f:31:c5:a6:3b:4f: 4c:17:62:13:9c:b0:49:7d:fe:cc:91:fb:40:32:67: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:34:5F:D7:E0:25:16:3E:05:44:28:2F:F9:7C:22:66:E3:08:8D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl X509v3 Authority Key Identifier: keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.59.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d1:03:45:0f:d2:b4:54:f4:d8:35:ce:bf:6f:93:55:2b:f0: a8:5c:d2:3c:b1:f7:5c:f1:4f:ae:74:b8:a9:46:49:4a:4b:c6: 65:fb:e2:09:48:45:84:fa:54:d2:ad:3b:be:4c:0f:10:d5:17: b5:23:3c:80:09:e6:d0:58:22:b8:ef:84:3d:64:b8:0c:a6:55: ba:02:e4:83:81:94:25:fd:57:e5:ab:98:dd:88:8a:01:a1:2b: d2:d4:6b:68:17:cf:f2:7e:e3:36:07:fa:4c:a5:fe:af:62:31: 7d:b8:d1:03:6f:a2:ae:7f:13:d1:3c:26:76:bf:1b:94:89:a6: 69:db:7c:1a:ab:77:30:ea:b7:49:5c:1b:db:04:0c:1f:39:9c: de:ca:52:97:49:79:1d:0a:e7:36:5d:03:4a:87:6f:d2:cf:eb: e5:a9:fb:a6:ea:b2:dc:4e:64:1b:68:97:9f:bb:87:84:57:00: ce:41:15:9e:d5:99:bc:08:e2:a4:0e:da:b7:3c:46:4e:f5:98: c7:ae:20:ce:b6:11:b5:85:d3:7f:7a:83:0c:7a:99:69:d7:ea: 51:49:87:dc:1e:ab:33:e4:79:f6:9e:39:d2:ae:00:f9:7b:d8: 0d:85:1e:0a:24:f7:eb:96:e2:23:53:96:fd:7f:80:67:03:cc: 7b:23:2e:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyazDvuofs80N0wyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlNTFlODItN2NjNS00NTAwLWEwZmYtY2MzYTlkNWUz ZmI3MB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZjQwZDM2NDQtZDM2MS00ZjQxLThiM2ItNmQ2NjRhMDUyMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgLIQVh17JsePJd8KAUkQojIKZZeyRdR7fPf TOvtgGhqnT8e4AKkQIgFWud9YDCCcBugeICdJl2u92xZON3Yk3J7iReMmNABhCKQ /2SyOuaUK41MliUABJ9hZx/m5/I+4si7MJtmT2iQI+CdUzvB/ooaowiT6FkeS+us Q8Lbz6vJJgp//QCR5maMyfBGdjs9ayGpPvoq3iRciRm5cSi4aYegdQcAED9+r3vE KV7eu3OFiWCFMkMfGH84+k/uLPhXO2CXyqdciAnSaHHtKfeZJZzcIKPnUDbM7ijo UldnaHep7slstsSmPk5vMcWmO09MF2ITnLBJff7MkftAMmdrnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ0X9fgJRY+BUQoL/l8ImbjCI06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YmU1 MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNhOWQ1ZTNmYjcvYmEwNTc4ZDktOTI2YS0z NWZhLWE0NjAtOGVhZTJkMTk5YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGJlNTFlODItN2NjNS00NTAwLWEw ZmYtY2MzYTlkNWUzZmI3LzRiZTUxZTgyLTdjYzUtNDUwMC1hMGZmLWNjM2E5ZDVl M2ZiNy5jcmwwHwYDVR0jBBgwFoAU98hG8db+BGjqrEDnC0HKKPgl2lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YmU1MWU4Mi03Y2M1LTQ1MDAtYTBmZi1jYzNh OWQ1ZTNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvRA0UP0rRU9Ng1zr9vk1Ur8Khc0jyx91zxT650uKlGSUpLxmX74glI RYT6VNKtO75MDxDVF7UjPIAJ5tBYIrjvhD1kuAymVboC5IOBlCX9V+WrmN2IigGh K9LUa2gXz/J+4zYH+kyl/q9iMX240QNvoq5/E9E8Jna/G5SJpmnbfBqrdzDqt0lc G9sEDB85nN7KUpdJeR0K5zZdA0qHb9LP6+Wp+6bqstxOZBtol5+7h4RXAM5BFZ7V mbwI4qQO2rc8Rk71mMeuIM62EbWF0396gwx6mWnX6lFJh9weqzPkefaeOdKuAPl7 2A2FHgok9+uW4iNTlv1/gGcDzHsjLjo= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:49 2026 by rpki-client