$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa File: 3ccc2b69-3869-30a1-8033-735bd84893f6.roa (raw, json) Hash identifier: iBzh2VhYKUYz2EVGQh338HaJPGp+K3uOneAuKOvtqyQ= Subject key identifier: 44:50:2C:9A:56:AB:4B:27:5E:BB:86:0B:AD:10:C2:E0:56:96:07:B9 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D80FFFAE3E6FAB16A0CE3C180 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 199.91.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:fa:e3:e6:fa:b1:6a:0c:e3:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=8fa94dc4-d681-4bdd-97c2-eb6f15788884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:0c:28:43:66:79:c7:d2:01:b9:1e:d4:ae: 57:b7:74:33:65:6c:20:2b:7a:59:61:02:24:72:ba: 62:82:ea:4e:26:c0:be:7c:db:76:7b:9d:72:e2:dd: 8d:1c:8f:b6:92:56:f3:be:67:43:13:5f:74:de:70: 39:75:fe:fd:09:19:a5:e0:83:18:b2:4b:d8:be:8c: 9e:46:38:a0:30:49:18:8c:ec:52:31:28:6f:39:66: 02:07:eb:cc:d2:54:be:d2:02:25:3b:1a:f6:62:7f: ae:c0:2c:ba:7b:d9:7e:25:5a:ef:cf:20:13:72:83: 35:2b:1c:e2:f4:70:d8:c5:96:73:62:a4:3d:b9:5c: 77:4a:f1:5f:2f:8a:b8:01:de:7d:24:d4:73:f9:fd: bc:79:88:c5:27:36:00:7c:31:2f:ca:89:80:00:d1: ff:47:69:c5:ea:1c:9b:4c:2d:d1:a6:1d:01:c9:c2: 1e:3e:7d:6e:fb:49:cd:d0:e5:f7:58:ee:27:53:72: 03:9f:a8:01:c0:50:2d:c0:ce:6d:dd:fe:bc:c0:21: ea:ce:b5:0f:e4:72:50:b9:a0:7e:e1:80:6c:70:f7: 0a:45:dd:94:31:82:9d:e6:44:0f:c3:b4:0d:9c:54: 28:01:fa:85:fb:b7:66:82:b2:33:d2:a6:dd:e1:f9: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:50:2C:9A:56:AB:4B:27:5E:BB:86:0B:AD:10:C2:E0:56:96:07:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:69:ff:bb:37:45:5c:92:7d:67:7e:f2:e4:23:a6:4d:58:78: e6:15:55:36:53:b3:da:ab:fc:99:14:01:9c:a2:8f:3d:47:42: 45:5c:62:a7:84:03:ce:64:64:b0:f4:f0:4a:e4:61:4f:63:12: 0a:3f:fd:6a:ed:8a:d4:e8:33:06:2c:10:2d:5d:d8:e8:0a:96: be:26:3e:8e:27:9f:09:0d:40:3f:1b:38:03:87:b8:2f:80:15: 3d:5e:5d:56:37:ba:78:87:b5:5d:65:47:1b:3d:4a:24:98:83: 71:17:74:63:a6:10:c3:ce:5e:fc:be:a5:88:90:4b:80:5c:d4: 4d:6c:38:7f:e2:eb:10:64:28:2e:50:65:ea:e8:7e:2b:d5:d1: 4b:0a:8b:9c:16:e6:3e:86:13:8f:f3:be:0c:42:55:59:b5:76: 38:df:78:cc:a9:8b:ee:17:26:90:1d:bf:ce:a9:12:9f:20:62: f4:28:cb:ee:57:e5:21:09:79:2b:7c:99:6f:3b:97:6f:91:51: d4:5e:e7:a7:f4:03:bc:c0:f0:c0:1a:5e:02:ab:91:5c:84:9c: fb:b8:1f:b0:19:0d:b7:8c:9c:65:e8:df:1a:52:58:7b:1f:b9: 11:36:8b:de:4f:63:c1:b2:d0:9a:56:c4:bb:4d:4a:9f:b4:82: 86:eb:31:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//rj5vqxagzjwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk OGZhOTRkYzQtZDY4MS00YmRkLTk3YzItZWI2ZjE1Nzg4ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBoMKENmecfSAbke1K5Xt3QzZWwgK3pZYQIk crpigupOJsC+fNt2e51y4t2NHI+2klbzvmdDE1903nA5df79CRml4IMYskvYvoye RjigMEkYjOxSMShvOWYCB+vM0lS+0gIlOxr2Yn+uwCy6e9l+JVrvzyATcoM1Kxzi 9HDYxZZzYqQ9uVx3SvFfL4q4Ad59JNRz+f28eYjFJzYAfDEvyomAANH/R2nF6hyb TC3Rph0BycIePn1u+0nN0OX3WO4nU3IDn6gBwFAtwM5t3f68wCHqzrUP5HJQuaB+ 4YBscPcKRd2UMYKd5kQPw7QNnFQoAfqF+7dmgrIz0qbd4fl7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERQLJpWq0snXruGC60QwuBWlge5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2NjYzJiNjktMzg2OS0z MGExLTgwMzMtNzM1YmQ4NDg5M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9p/7s3RVySfWd+8uQjpk1YeOYVVTZTs9qr/JkUAZyijz1HQkVcYqeE A85kZLD08ErkYU9jEgo//WrtitToMwYsEC1d2OgKlr4mPo4nnwkNQD8bOAOHuC+A FT1eXVY3uniHtV1lRxs9SiSYg3EXdGOmEMPOXvy+pYiQS4Bc1E1sOH/i6xBkKC5Q ZerofivV0UsKi5wW5j6GE4/zvgxCVVm1djjfeMypi+4XJpAdv86pEp8gYvQoy+5X 5SEJeSt8mW87l2+RUdRe56f0A7zA8MAaXgKrkVyEnPu4H7AZDbeMnGXo3xpSWHsf uRE2i95PY8Gy0JpWxLtNSp+0gobrMXU= -----END CERTIFICATE-----Generated at Fri Apr 17 22:25:06 2026 by rpki-client