$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa File: a0319291-6260-33b7-94e3-177209ea6dc7.roa (raw, json) Hash identifier: TOQ5KWdqf+i/wahIiaG+QJD5qTAN55DJQF/cOENL7qQ= Subject key identifier: 41:2D:E4:12:BE:04:5F:A6:1F:89:92:86:70:50:58:2E:B3:DF:9F:09 Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F4328584CB551D2570749283590508E80 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 394449 IP address blocks: 199.68.53.0/24 maxlen: 24 2604:3dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d2:57:07:49:28:35:90:50:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=797c4d20-8297-4ddb-b747-3856022ab290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:0d:f6:54:c6:3b:e6:61:95:ff:09:5f:d8: 07:fd:91:66:ee:97:63:f4:eb:f2:ad:81:9e:e3:76: bd:57:aa:74:a8:a5:18:5a:c3:8d:fa:59:33:8e:ee: d6:d4:f0:8b:b6:6c:42:5a:5c:27:17:f3:7d:33:fb: 62:71:b1:7c:30:60:a1:a0:5a:71:c2:e1:ca:b8:09: 65:02:f1:ad:ba:29:6b:2d:db:92:59:c5:7c:4e:31: bf:2d:3d:47:22:53:3c:45:f7:d0:07:4b:a5:16:a8: 80:8e:0d:e5:31:b5:40:fb:8f:0a:5b:f0:86:ed:4d: 2f:1a:ac:e9:10:52:fb:9e:f4:f7:9b:9b:5d:b3:fb: 98:dd:8a:46:fa:a8:96:3a:95:0b:8a:23:9c:d1:9d: 94:56:b9:da:ce:f6:3a:eb:3d:5f:17:45:a2:7f:f2: ae:e7:9b:43:7e:f5:9f:95:44:21:e5:48:70:5c:27: 6a:30:71:46:be:9e:96:ed:f5:cd:11:67:09:4b:fe: ce:b3:41:6f:9e:dc:a6:a2:37:df:e5:e6:e7:e8:c2: ea:9f:ac:2e:7b:dc:54:3d:12:3e:f6:5b:9f:f3:85: d0:dd:fe:dd:ac:01:7a:96:2b:ec:81:b2:86:95:9d: c4:3d:39:87:c1:92:c5:07:77:c8:a1:97:5a:fc:81: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2D:E4:12:BE:04:5F:A6:1F:89:92:86:70:50:58:2E:B3:DF:9F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/a0319291-6260-33b7-94e3-177209ea6dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv4: 199.68.53.0/24 IPv6: 2604:3dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fd:b9:6d:10:0a:d7:56:7d:9f:d5:50:23:aa:d3:ae:3a:f8: 6c:93:f8:8e:e6:e1:9d:19:06:23:59:47:e6:fc:e8:61:5d:42: 8d:25:89:4d:48:4b:ed:94:d5:18:ba:e3:2f:ac:6a:38:a7:58: 4a:55:b8:53:43:f0:a5:da:a5:bd:90:2c:6f:f5:77:38:7f:96: d5:77:db:33:59:a9:11:04:54:6f:85:da:f8:a2:21:c9:74:5e: e7:14:22:58:47:2e:1d:5b:be:1d:85:6e:83:92:3c:12:dc:63: 2c:ce:b1:f0:05:e8:13:7a:d0:d6:1f:12:0d:63:88:44:91:d5: 90:4b:9c:f6:94:04:bd:e1:28:ee:30:69:45:e9:e3:8b:d6:28: bd:d1:3b:9b:10:b4:e9:66:74:3f:e9:06:83:c6:62:58:34:18: c9:14:36:92:24:77:ff:53:62:6d:16:bb:8e:3e:a4:d5:69:d3: 21:65:f2:cf:58:1f:79:83:85:e6:76:a4:55:77:30:95:c2:bd: 35:ba:48:7e:6b:ce:01:1e:89:6a:0c:3a:5f:ab:a6:be:5e:d2: bf:b3:ce:67:8e:98:d1:80:90:af:d5:40:61:3a:72:42:8f:aa: d3:57:a6:e8:0a:10:07:4f:ae:2c:fc:d7:89:8a:1f:a3:f6:17: 49:e8:6f:ac -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEy1UdJXB0koNZBQjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk Nzk3YzRkMjAtODI5Ny00ZGRiLWI3NDctMzg1NjAyMmFiMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtAN9lTGO+Zhlf8JX9gH/ZFm7pdj9OvyrYGe 43a9V6p0qKUYWsON+lkzju7W1PCLtmxCWlwnF/N9M/ticbF8MGChoFpxwuHKuAll AvGtuilrLduSWcV8TjG/LT1HIlM8RffQB0ulFqiAjg3lMbVA+48KW/CG7U0vGqzp EFL7nvT3m5tds/uY3YpG+qiWOpULiiOc0Z2UVrnazvY66z1fF0Wif/Ku55tDfvWf lUQh5UhwXCdqMHFGvp6W7fXNEWcJS/7Os0Fvntymojff5ebn6MLqn6wue9xUPRI+ 9luf84XQ3f7drAF6livsgbKGlZ3EPTmHwZLFB3fIoZda/IHZnwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEEt5BK+BF+mH4mShnBQWC6z358JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvYTAzMTkyOTEtNjI2MC0z M2I3LTk0ZTMtMTc3MjA5ZWE2ZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAx0Q1MA0E AgACMAcDBQAmBD3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHD9uW0QCtdWfZ/VUCOq0646+GyT+I7m4Z0Z BiNZR+b86GFdQo0liU1IS+2U1Ri64y+sajinWEpVuFND8KXapb2QLG/1dzh/ltV3 2zNZqREEVG+F2viiIcl0XucUIlhHLh1bvh2FboOSPBLcYyzOsfAF6BN60NYfEg1j iESR1ZBLnPaUBL3hKO4waUXp44vWKL3RO5sQtOlmdD/pBoPGYlg0GMkUNpIkd/9T Ym0Wu44+pNVp0yFl8s9YH3mDheZ2pFV3MJXCvTW6SH5rzgEeiWoMOl+rpr5e0r+z zmeOmNGAkK/VQGE6ckKPqtNXpugKEAdPriz814mKH6P2F0nob6w= -----END CERTIFICATE-----Generated at Mon Mar 2 07:16:42 2026 by rpki-client