$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/849bfc30-8559-3500-a392-d2c5f760215f.roa File: 849bfc30-8559-3500-a392-d2c5f760215f.roa (raw, json) Hash identifier: C5CvumbrgkYMmjGnFqPJjbtu9lFISgVotCcrOosnk6g= Subject key identifier: 85:D2:6A:C6:0B:D5:E6:A0:7B:F3:38:9E:01:D4:AF:98:B6:46:F4:17 Certificate issuer: /CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Certificate serial: 010D0C9F4328584E104F3548A1B8188B7CCF65E0 Authority key identifier: A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/849bfc30-8559-3500-a392-d2c5f760215f.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 209242 IP address blocks: 198.202.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:35:48:a1:b8:18:8b:7c:cf:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=594d26d9-7aba-43bf-8963-48b34bad678b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:74:aa:cc:45:19:dc:38:76:b3:60:29:16: fb:47:a2:06:80:0a:2e:b3:62:f2:49:e6:b6:3c:d6: 89:ba:6e:d5:75:99:6b:56:5e:40:76:86:7b:7f:95: d8:5e:84:c2:47:05:f9:52:1f:8a:ec:f9:ef:d7:ed: 96:a3:d9:81:50:90:68:66:07:e2:0e:1c:2a:03:52: ef:9f:15:d8:40:d2:bb:82:e0:a9:cb:9f:c5:cd:e8: f6:0b:46:d9:99:c4:73:dd:fe:31:68:15:94:37:ae: 3e:d5:c7:da:7a:b3:0b:7a:32:ac:20:88:cf:2f:8e: 17:8d:65:64:56:8f:9a:cc:f6:5e:33:c2:4b:f3:8e: de:64:fb:44:eb:ee:ce:2e:80:97:93:17:d0:61:b5: 71:16:4f:18:9c:59:6f:6e:9b:9e:4f:9b:0f:f0:44: 53:1a:d6:34:ee:dc:59:b0:9b:59:a6:95:de:17:32: 22:9b:e5:28:c4:76:af:ad:de:63:71:82:5d:1f:88: 50:6d:9e:e1:3d:e1:f8:9d:1f:2a:4b:31:91:bf:69: f2:c0:26:9d:f1:61:be:a2:f0:bc:a4:ba:b0:6e:01: 39:02:b5:07:b5:52:0a:28:31:5c:9a:71:ca:13:79: 62:02:9c:da:ac:3e:7c:9e:c3:03:d9:8c:63:2e:99: 6b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:6A:C6:0B:D5:E6:A0:7B:F3:38:9E:01:D4:AF:98:B6:46:F4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/849bfc30-8559-3500-a392-d2c5f760215f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl X509v3 Authority Key Identifier: keyid:A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer sbgp-ipAddrBlock: critical IPv4: 198.202.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c7:48:62:b2:af:ce:58:c5:5c:64:a5:11:ca:75:87:59:c8: 16:a0:b9:c2:db:44:8d:16:c9:65:91:9b:13:40:2a:68:5c:97: 85:90:0c:8b:d8:2c:c2:e7:83:3e:dd:c5:65:5f:f8:77:5e:63: 9f:9a:ff:c6:f2:c1:74:40:78:61:b9:42:6f:a2:26:98:f6:1c: 4c:12:df:8c:53:6f:2d:58:14:96:bf:d9:ff:a4:7a:ef:3c:25: 13:e2:0d:79:9c:0e:9a:f6:cf:d6:d1:8b:1c:91:14:30:39:84: 31:9e:7a:d6:ab:ea:87:45:f9:b2:58:c0:d1:a2:f5:4c:8e:f7: 8a:16:0c:27:68:c0:fc:e9:3a:59:b7:11:ce:1b:98:11:7c:51: 86:f0:3e:a9:a9:97:dd:dc:22:15:40:1c:66:01:af:64:c4:2d: 1d:ef:85:f3:65:f8:51:ae:14:4d:ea:ce:70:10:1d:69:2f:53: 96:64:11:77:06:77:3f:a2:91:a0:1b:ff:e3:49:08:99:50:d2: 5a:8e:c4:ab:22:b2:d1:ba:eb:01:cc:d0:6a:97:70:6e:63:bd: ec:3b:c7:1c:35:4d:bc:e0:f4:ee:b4:4f:d6:d7:48:f0:33:4a: 2e:37:fa:7c:2b:6a:1a:ab:a5:fe:7c:37:96:83:04:b0:38:73: a3:fe:51:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTzVIobgYi3zPZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkYTlhZjktZDJkZi00ODA5LWI1MmMtZDdiYzg4NTlm ZWIzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NTk0ZDI2ZDktN2FiYS00M2JmLTg5NjMtNDhiMzRiYWQ2NzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6N0qsxFGdw4drNgKRb7R6IGgAous2LySea2 PNaJum7VdZlrVl5AdoZ7f5XYXoTCRwX5Uh+K7Pnv1+2Wo9mBUJBoZgfiDhwqA1Lv nxXYQNK7guCpy5/Fzej2C0bZmcRz3f4xaBWUN64+1cfaerMLejKsIIjPL44XjWVk Vo+azPZeM8JL847eZPtE6+7OLoCXkxfQYbVxFk8YnFlvbpueT5sP8ERTGtY07txZ sJtZppXeFzIim+UoxHavrd5jcYJdH4hQbZ7hPeH4nR8qSzGRv2nywCad8WG+ovC8 pLqwbgE5ArUHtVIKKDFcmnHKE3liApzarD58nsMD2YxjLplrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXSasYL1eage/M4ngHUr5i2RvQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Rh OWFmOS1kMmRmLTQ4MDktYjUyYy1kN2JjODg1OWZlYjMvODQ5YmZjMzAtODU1OS0z NTAwLWEzOTItZDJjNWY3NjAyMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNkYTlhZjktZDJkZi00ODA5LWI1 MmMtZDdiYzg4NTlmZWIzL2ZjZGE5YWY5LWQyZGYtNDgwOS1iNTJjLWQ3YmM4ODU5 ZmViMy5jcmwwHwYDVR0jBBgwFoAUoQQLRehstb9uP371hwsWs+OCvQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2RhOWFmOS1kMmRmLTQ4MDktYjUyYy1kN2Jj ODg1OWZlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATHSGKyr85YxVxkpRHKdYdZyBagucLbRI0WyWWRmxNAKmhcl4WQDIvY LMLngz7dxWVf+HdeY5+a/8bywXRAeGG5Qm+iJpj2HEwS34xTby1YFJa/2f+keu88 JRPiDXmcDpr2z9bRixyRFDA5hDGeetar6odF+bJYwNGi9UyO94oWDCdowPzpOlm3 Ec4bmBF8UYbwPqmpl93cIhVAHGYBr2TELR3vhfNl+FGuFE3qznAQHWkvU5ZkEXcG dz+ikaAb/+NJCJlQ0lqOxKsistG66wHM0GqXcG5jvew7xxw1Tbzg9O60T9bXSPAz Si43+nwrahqrpf58N5aDBLA4c6P+UeY= -----END CERTIFICATE-----Generated at Sat Jun 13 09:22:40 2026 by rpki-client