$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa File: a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa (raw, json) Hash identifier: 8J/0UAZsdN0jjUaS2SZOHfDEP4bAN8NhymZnyf4BSN8= Subject key identifier: 67:3D:4D:0E:45:CE:2B:67:B4:16:DA:B2:25:3A:9D:3A:28:1B:92:56 Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584CAA270A8E9D71830A9436EB40 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 53542 IP address blocks: 199.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0a:8e:9d:71:83:0a:94:36:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=77cbeb6c-1229-45a6-8f55-37e6f9479335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:60:1a:ec:cf:e5:b1:fd:2f:27:53:9c:62: 08:6e:2f:03:d0:f8:00:f0:aa:04:f1:a0:df:f2:64: 95:bf:d4:ab:06:b4:a1:91:8d:e5:95:5f:16:b5:a2: 45:bd:d0:9b:69:5c:19:50:5c:4d:19:9d:a0:e1:c3: 7d:fe:b4:2d:4a:e6:8e:01:86:f0:7f:ed:1c:76:91: 35:b1:41:2a:1e:9e:4b:ef:e1:a7:44:b2:98:bd:11: 22:18:13:36:a6:88:05:e6:fd:ca:76:a7:05:52:59: 09:73:74:e8:2f:a0:da:0c:1e:02:17:cf:e5:9d:b1: 1b:21:cf:29:11:cb:84:31:0f:46:90:4a:1a:cb:02: 9e:c4:12:22:13:e0:a6:be:82:08:77:78:cb:25:47: 5f:38:80:6e:b4:af:c0:f8:0f:ea:87:4a:1b:d0:78: 10:56:b5:60:23:16:dd:74:51:d8:de:c6:fe:35:a5: 2d:ca:e8:7e:12:ef:37:ed:32:da:77:ce:ed:bd:15: 67:db:ad:61:ed:62:82:02:3c:2e:0d:24:c1:d6:15: 66:62:d7:28:03:e2:6c:55:9d:42:e5:6c:8e:74:8d: 93:b0:b8:c9:6d:89:ef:0e:2a:1e:1f:a2:4c:3d:92: 53:b4:14:5e:15:41:f7:4c:e3:86:98:b5:fb:fa:20: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3D:4D:0E:45:CE:2B:67:B4:16:DA:B2:25:3A:9D:3A:28:1B:92:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: 199.255.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6f:6e:c2:a5:61:92:2e:97:cb:5e:b7:14:83:a1:1a:ca:64: 21:2f:5b:5d:88:26:21:ef:18:1b:b8:3e:9c:e4:d6:e5:d7:f4: 3c:0b:86:f8:3c:c2:90:ef:8c:bb:4b:67:af:b0:17:3d:60:71: ae:9a:5c:4f:d0:9c:d7:c5:f3:71:6a:5b:05:79:19:28:cd:a4: d3:c6:2e:b4:8e:1b:b1:d9:0e:f7:d0:2e:35:68:a8:82:8f:ab: 3d:2f:4a:30:4b:25:71:cd:9f:6f:46:d1:78:6a:bd:55:6e:13: de:43:26:89:57:5e:6f:62:85:0c:c5:49:73:35:22:9e:b8:24: 72:84:28:ec:04:81:df:48:54:54:31:f0:c9:19:72:b0:fd:86: 30:d4:fa:99:4d:7a:8b:16:cc:a7:20:0e:15:11:da:25:ca:09: df:b0:98:fe:ed:6b:91:b1:b9:2b:60:9c:76:04:b0:45:5a:7e: 01:58:e1:06:03:82:9e:e0:e3:eb:78:15:c8:45:56:b6:64:24: 66:5a:6d:8d:21:0d:cf:c4:30:fb:53:14:a3:b4:73:e9:2f:13: f0:f2:d0:11:a1:a0:89:2c:f2:5a:02:c2:ae:42:f1:8c:1b:68: db:4e:5f:ff:c8:45:14:d6:1d:b5:77:89:ca:45:cf:1a:ef:94: 01:a6:f5:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwqOnXGDCpQ260AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NzdjYmViNmMtMTIyOS00NWE2LThmNTUtMzdlNmY5NDc5MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSNgGuzP5bH9LydTnGIIbi8D0PgA8KoE8aDf 8mSVv9SrBrShkY3llV8WtaJFvdCbaVwZUFxNGZ2g4cN9/rQtSuaOAYbwf+0cdpE1 sUEqHp5L7+GnRLKYvREiGBM2pogF5v3KdqcFUlkJc3ToL6DaDB4CF8/lnbEbIc8p EcuEMQ9GkEoaywKexBIiE+CmvoIId3jLJUdfOIButK/A+A/qh0ob0HgQVrVgIxbd dFHY3sb+NaUtyuh+Eu837TLad87tvRVn261h7WKCAjwuDSTB1hVmYtcoA+JsVZ1C 5WyOdI2TsLjJbYnvDioeH6JMPZJTtBReFUH3TOOGmLX7+iBd1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc9TQ5FzitntBbasiU6nTooG5JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvYTNhNTc5ZmEtYTlkZC0z MmEzLTliODUtZDE4NzVjZjFkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtvbsKlYZIul8tetxSDoRrKZCEvW12IJiHvGBu4Ppzk1uXX9DwLhvg8 wpDvjLtLZ6+wFz1gca6aXE/QnNfF83FqWwV5GSjNpNPGLrSOG7HZDvfQLjVoqIKP qz0vSjBLJXHNn29G0XhqvVVuE95DJolXXm9ihQzFSXM1Ip64JHKEKOwEgd9IVFQx 8MkZcrD9hjDU+plNeosWzKcgDhUR2iXKCd+wmP7ta5GxuStgnHYEsEVafgFY4QYD gp7g4+t4FchFVrZkJGZabY0hDc/EMPtTFKO0c+kvE/Dy0BGhoIks8loCwq5C8Ywb aNtOX//IRRTWHbV3icpFzxrvlAGm9Ts= -----END CERTIFICATE-----Generated at Mon Mar 2 17:25:57 2026 by rpki-client