$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b3ba9344-3997-35e9-8110-a2249f4bd801.roa File: b3ba9344-3997-35e9-8110-a2249f4bd801.roa (raw, json) Hash identifier: TSUPcZLk8YMSRZEtWlC102HJIX5bwJoxsREPKHP0gog= Subject key identifier: E4:C7:4D:4B:27:02:16:61:BE:45:5C:1D:CE:7D:65:10:1F:6C:A6:AC Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584D5E1A6EBA0832C9AB88A8F260 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b3ba9344-3997-35e9-8110-a2249f4bd801.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 3082 IP address blocks: 199.103.69.0/24 maxlen: 24 199.103.70.0/23 maxlen: 23 199.103.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6e:ba:08:32:c9:ab:88:a8:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=0eb11c68-0f56-4faa-9439-9d6f76fa1e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:68:07:04:ce:51:10:39:47:ec:d8:25:e9: 64:82:f2:51:36:f6:01:33:c5:3c:b5:80:8d:7e:bd: 01:82:2d:6a:b5:a0:46:60:75:ba:f7:e2:c3:e7:74: 60:ac:f6:78:9c:fb:e6:e2:e1:df:fd:1a:11:92:b5: c2:f9:18:9b:cf:6d:57:bc:94:89:05:00:aa:4b:01: 4b:ba:a8:ca:0f:b7:7d:58:46:f1:f3:cb:df:5a:39: e4:01:f2:24:69:ef:31:cc:ab:54:98:71:3a:9c:0b: d7:0d:5b:fc:1c:1f:6b:8e:07:1f:47:63:dc:cf:39: b6:2c:cf:e9:5b:39:2b:eb:16:28:b4:e5:0f:e3:16: 1d:47:73:bc:26:e2:23:47:6f:a7:e1:20:f8:22:46: 05:68:d0:f2:40:f1:d2:79:dc:bf:56:45:2a:d1:a0: 68:d1:94:23:f6:c2:dc:25:2d:24:9a:45:4e:fe:bd: 92:62:1e:bc:17:6e:92:73:ca:70:1c:3e:c9:6e:95: 81:5c:61:02:0c:f8:c0:bc:2b:60:c9:41:f6:65:dc: a8:f4:f8:f2:20:c6:eb:a0:7a:71:db:32:e1:49:5f: c3:b7:fe:1c:3e:dc:93:d9:4b:73:de:cc:e4:fa:22: 1f:aa:ad:ba:8f:4a:ae:3c:17:2f:0e:83:90:62:a2: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C7:4D:4B:27:02:16:61:BE:45:5C:1D:CE:7D:65:10:1F:6C:A6:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/b3ba9344-3997-35e9-8110-a2249f4bd801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 199.103.69.0-199.103.72.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ad:ed:be:86:30:99:56:af:49:49:ba:cb:ab:46:55:1d:f8: 9d:80:4f:65:c3:b1:90:85:0c:b6:26:d6:19:28:36:7a:ab:5b: 3c:36:6d:fd:9a:b9:10:e6:ab:3a:ad:27:b0:aa:d0:70:51:ed: bf:27:e8:6f:78:7f:e8:5a:47:dd:d0:e2:aa:da:1c:16:fb:90: d4:df:1c:c2:fb:25:8b:d6:67:b4:b1:62:f5:a2:35:fa:81:fb: 20:5c:3c:9f:2b:3b:fa:72:ad:b8:ed:d7:b5:61:49:d7:6a:f9: 2e:0a:da:ba:67:ad:b6:64:9d:90:68:df:3e:60:54:b3:c7:6b: d8:5f:dc:a0:7d:5a:98:69:05:8f:90:57:9f:3c:db:e9:b0:cc: 0b:af:ec:11:f5:88:0b:7e:09:3e:c3:a6:bc:aa:d8:fb:4a:e6: 2a:7c:01:4e:a9:ac:08:4a:0b:be:f1:98:47:e1:9a:44:39:a9: ee:29:dc:a0:65:18:96:ab:02:0b:78:d4:d6:c6:25:63:46:5c: 98:64:76:76:a8:3f:78:de:c6:dc:1a:59:e3:ba:6c:03:72:9b: 02:a3:a5:95:82:7e:0f:be:02:62:2a:ea:a9:5f:69:48:1f:68: ae:aa:b3:c2:64:3e:c3:61:0f:c2:14:23:fb:ed:e8:83:5e:f6: 6c:59:83:16 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1eGm66CDLJq4io8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MGViMTFjNjgtMGY1Ni00ZmFhLTk0MzktOWQ2Zjc2ZmExZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+poBwTOURA5R+zYJelkgvJRNvYBM8U8tYCN fr0Bgi1qtaBGYHW69+LD53RgrPZ4nPvm4uHf/RoRkrXC+Ribz21XvJSJBQCqSwFL uqjKD7d9WEbx88vfWjnkAfIkae8xzKtUmHE6nAvXDVv8HB9rjgcfR2Pczzm2LM/p Wzkr6xYotOUP4xYdR3O8JuIjR2+n4SD4IkYFaNDyQPHSedy/VkUq0aBo0ZQj9sLc JS0kmkVO/r2SYh68F26Sc8pwHD7JbpWBXGECDPjAvCtgyUH2Zdyo9PjyIMbroHpx 2zLhSV/Dt/4cPtyT2Utz3szk+iIfqq26j0quPBcvDoOQYqLSYQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOTHTUsnAhZhvkVcHc59ZRAfbKasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvYjNiYTkzNDQtMzk5Ny0z NWU5LTgxMTAtYTIyNDlmNGJkODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADHZ0UD BADHZ0gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAlq3tvoYwmVavSUm6y6tGVR34nYBPZcOxkIUMtibWGSg2 eqtbPDZt/Zq5EOarOq0nsKrQcFHtvyfob3h/6FpH3dDiqtocFvuQ1N8cwvsli9Zn tLFi9aI1+oH7IFw8nys7+nKtuO3XtWFJ12r5LgraumettmSdkGjfPmBUs8dr2F/c oH1amGkFj5BXnzzb6bDMC6/sEfWIC34JPsOmvKrY+0rmKnwBTqmsCEoLvvGYR+Ga RDmp7incoGUYlqsCC3jU1sYlY0ZcmGR2dqg/eN7G3BpZ47psA3KbAqOllYJ+D74C YirqqV9pSB9orqqzwmQ+w2EPwhQj++3og172bFmDFg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:33:29 2026 by rpki-client