$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/843a1018-5704-3ed0-878e-ee960b8368ce.roa File: 843a1018-5704-3ed0-878e-ee960b8368ce.roa (raw, json) Hash identifier: /BKMAEnlabMgIwJu/7utZ98i805EJhcelvcS+25B2nk= Subject key identifier: 40:E3:84:DC:EC:59:77:7E:18:6E:9F:6D:64:F3:07:85:EC:D5:0E:49 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584D5CD752FE1C530CA515231650 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/843a1018-5704-3ed0-878e-ee960b8368ce.roa Signing time: Wed 01 Apr 2026 14:09:48 +0000 ROA not before: Wed 01 Apr 2026 14:09:48 +0000 ROA not after: Tue 30 Jun 2026 14:09:48 +0000 asID: 212928 IP address blocks: 198.99.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:d7:52:fe:1c:53:0c:a5:15:23:16:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Apr 1 14:09:48 2026 GMT Not After : Jun 30 14:09:48 2026 GMT Subject: CN=224c1321-2cd3-4d98-9adb-62bd0f22c40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:29:d8:c7:8e:04:81:9d:9b:54:c7:32:f4:e9: 2b:0e:48:53:1d:88:59:ca:97:7e:fd:ec:e4:81:81: 9d:7d:2e:03:c8:5f:27:cc:f5:e2:52:99:cf:52:b8: b1:51:02:1a:59:4d:17:cf:f2:6d:bf:a9:dd:c1:4d: 2d:f9:e8:2f:a2:1f:9b:ed:af:c2:ba:27:a0:d7:ba: e7:64:ee:b2:58:28:d1:b4:5a:07:75:ce:5c:ba:f9: 59:97:50:2e:b8:c2:30:3c:aa:2c:e0:fd:f1:81:4f: ed:c2:88:a1:fc:db:f6:47:19:4c:3d:50:b1:24:6e: e1:ba:86:70:ea:20:ba:eb:fd:36:7d:da:09:c9:cb: e1:08:74:a8:00:c8:70:48:20:27:2f:b8:7a:93:e4: 0c:36:32:dc:e4:51:de:52:05:95:6b:36:d8:4e:79: de:54:4e:40:fb:4c:b8:3c:de:63:01:79:36:8c:27: b9:0c:69:78:27:5e:bd:9e:ba:d0:89:b0:a4:f4:dc: 8c:28:6f:4e:45:02:33:09:9b:f1:e9:a4:a2:bf:d8: f0:3f:40:85:f2:2c:6b:d8:73:e0:e9:cf:7e:f3:77: ec:a3:14:2b:c2:47:59:c0:ec:38:c1:7b:fa:a1:f2: eb:4e:0f:71:d0:3b:1a:dc:9b:9e:91:db:84:ba:83: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E3:84:DC:EC:59:77:7E:18:6E:9F:6D:64:F3:07:85:EC:D5:0E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/843a1018-5704-3ed0-878e-ee960b8368ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: 198.99.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e4:fc:c0:27:b5:80:d3:56:8c:bb:4d:4e:27:40:bb:d2:65: 45:00:93:8e:be:45:1e:b6:55:4c:58:4d:5a:1d:7a:3a:df:e7: 3a:78:20:cb:28:02:68:e9:94:d6:df:36:9d:34:9b:3f:ac:55: aa:42:50:a8:a1:7f:52:0a:e9:d8:e1:dd:35:52:89:65:84:d7: 27:6c:4f:e8:f5:d5:22:ab:02:a3:d1:6e:e5:7f:10:81:de:b7: 11:df:62:59:5c:32:a9:76:b1:60:d7:e0:44:7d:0f:5a:ae:7b: 97:22:3c:61:d7:8a:af:7c:f2:32:f8:ce:61:e0:ad:77:26:17: ac:db:96:0b:64:86:e3:82:e7:bb:a2:37:4a:2d:19:c2:1b:9d: 5b:86:f8:02:64:0e:57:08:68:6d:df:c1:7e:91:13:28:e5:74: 76:e7:9a:7b:fc:5e:1e:4c:f7:78:a7:df:f5:22:b6:3b:67:0a: 30:76:ef:cb:ac:82:4a:c9:4c:a3:78:af:6f:0c:39:bf:7d:3c: 53:7d:c3:d2:df:e0:dd:aa:14:ee:b8:e6:02:13:76:06:0d:c5: 83:a0:f9:dd:50:5a:6f:6c:e2:a8:d7:e9:44:94:9b:91:65:92: 66:f6:3a:4f:90:6f:af:9b:94:29:03:2c:ae:9e:69:f6:e6:87: 2e:ca:2f:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1c11L+HFMMpRUjFlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDQwMTE0MDk0OFoXDTI2MDYzMDE0MDk0OFowLzEtMCsGA1UEAxMk MjI0YzEzMjEtMmNkMy00ZDk4LTlhZGItNjJiZDBmMjJjNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSnYx44EgZ2bVMcy9OkrDkhTHYhZypd+/ezk gYGdfS4DyF8nzPXiUpnPUrixUQIaWU0Xz/Jtv6ndwU0t+egvoh+b7a/Cuieg17rn ZO6yWCjRtFoHdc5cuvlZl1AuuMIwPKos4P3xgU/twoih/Nv2RxlMPVCxJG7huoZw 6iC66/02fdoJycvhCHSoAMhwSCAnL7h6k+QMNjLc5FHeUgWVazbYTnneVE5A+0y4 PN5jAXk2jCe5DGl4J169nrrQibCk9NyMKG9ORQIzCZvx6aSiv9jwP0CF8ixr2HPg 6c9+83fsoxQrwkdZwOw4wXv6ofLrTg9x0Dsa3JuekduEuoPjXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDjhNzsWXd+GG6fbWTzB4Xs1Q5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvODQzYTEwMTgtNTcwNC0z ZWQwLTg3OGUtZWU5NjBiODM2OGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPk/MAntYDTVoy7TU4nQLvSZUUAk46+RR62VUxYTVodejrf5zp4IMso AmjplNbfNp00mz+sVapCUKihf1IK6djh3TVSiWWE1ydsT+j11SKrAqPRbuV/EIHe txHfYllcMql2sWDX4ER9D1que5ciPGHXiq988jL4zmHgrXcmF6zblgtkhuOC57ui N0otGcIbnVuG+AJkDlcIaG3fwX6REyjldHbnmnv8Xh5M93in3/UitjtnCjB278us gkrJTKN4r28MOb99PFN9w9Lf4N2qFO645gITdgYNxYOg+d1QWm9s4qjX6USUm5Fl kmb2Ok+Qb6+blCkDLK6eafbmhy7KL+8= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:28 2026 by rpki-client