$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa File: 3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa (raw, json) Hash identifier: sYWGDz8MxAURKfeX/BJF+ejm77+F9s0fIcfMchEowPk= Subject key identifier: F2:3B:1E:F1:19:B2:45:0F:28:EE:B8:B0:83:15:C5:FF:C6:B1:D3:DA Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F4328584D07AD01432765F9269221E8C0 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 13928 IP address blocks: 199.21.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:01:43:27:65:f9:26:92:21:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=3cda4b12-512e-4f1d-a62f-a1ad1776d2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:ab:e3:d4:be:8a:b9:a5:a6:69:4a:d7:89: 84:61:c0:02:eb:7c:8b:86:5c:1b:18:5a:a9:c1:55: 32:ff:bc:14:14:7a:38:40:14:a2:db:84:fc:13:42: 14:ad:89:26:89:ed:7c:11:d9:ff:7f:5f:e5:d7:d3: ae:a7:53:2b:09:d2:6f:19:f5:10:0b:cb:e9:c5:93: 20:81:e2:1c:36:48:59:45:2f:7a:2d:1b:83:8b:6a: 0e:7c:01:f3:48:54:29:b8:d1:8b:31:b2:8c:78:69: ce:b0:01:33:b0:d2:c8:48:a5:9d:c3:49:e2:cd:09: 97:7d:4a:76:c8:fe:26:b7:48:21:4c:fd:73:49:d6: 01:df:11:e4:2d:c9:40:e7:f9:d1:63:3d:55:bf:24: fe:f3:e3:e7:7a:87:e9:41:e4:a8:1f:0d:92:64:69: 69:27:ab:b1:72:f8:23:cd:ed:03:bf:34:ff:db:36: bd:ee:23:fe:b7:42:7d:26:57:22:ad:ce:57:f4:bb: bb:bc:44:39:ea:cb:60:d2:4e:0f:a0:c5:aa:b4:92: 71:99:d4:62:b5:9a:3e:a8:6a:6b:16:4c:d4:c3:3c: 8c:f5:f5:f8:04:7d:b7:17:84:c6:53:dd:d8:3c:33: c8:e8:15:a4:45:5f:77:95:0a:2a:f9:08:c1:3e:38: 8b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:1E:F1:19:B2:45:0F:28:EE:B8:B0:83:15:C5:FF:C6:B1:D3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d1:94:8f:87:10:bf:59:b3:0a:76:a8:22:d7:65:4f:31:53: 30:b2:de:59:c9:77:5c:fa:17:5a:2c:56:b7:c1:dc:b1:68:5c: b1:eb:ac:8a:e8:ec:9d:59:eb:57:83:97:c3:4f:ba:35:85:f4: 48:cb:f8:f6:6a:10:d9:e5:3c:3d:3e:3e:5a:b4:27:96:4f:e5: 70:b1:88:be:f2:15:34:bd:6e:a9:c8:e0:fd:05:a9:09:e3:3e: e7:84:4f:a9:3f:4e:59:10:e1:8c:5b:6f:97:a7:7b:09:ba:6c: b7:ff:e3:93:a8:1f:15:af:60:26:86:74:a4:34:d1:63:6f:e0: 6a:8d:05:d7:3d:a8:42:64:b1:f7:44:52:3b:3d:a0:b5:7c:b9: e6:54:cf:4c:9b:15:a7:b0:ce:c2:fb:7d:ce:2a:86:2e:cd:51: cf:97:92:69:53:ee:6e:ef:e3:33:4d:9a:35:b4:b0:2e:dc:6a: 85:ef:fa:b3:44:15:5a:6f:5b:ba:2b:15:53:4a:9c:1d:3c:68: fa:b0:97:3f:4a:10:db:74:24:77:70:c4:aa:df:05:d9:9e:af: e1:ee:9e:65:ed:cb:df:17:3f:31:c9:1c:3d:c8:7b:81:42:84: 92:02:a0:f3:e5:90:0a:6b:0a:c1:f8:b9:3c:9a:1f:16:8d:2f: 8b:3d:38:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQFDJ2X5JpIh6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk M2NkYTRiMTItNTEyZS00ZjFkLWE2MmYtYTFhZDE3NzZkMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPmr49S+irmlpmlK14mEYcAC63yLhlwbGFqp wVUy/7wUFHo4QBSi24T8E0IUrYkmie18Edn/f1/l19Oup1MrCdJvGfUQC8vpxZMg geIcNkhZRS96LRuDi2oOfAHzSFQpuNGLMbKMeGnOsAEzsNLISKWdw0nizQmXfUp2 yP4mt0ghTP1zSdYB3xHkLclA5/nRYz1VvyT+8+PneofpQeSoHw2SZGlpJ6uxcvgj ze0DvzT/2za97iP+t0J9Jlcirc5X9Lu7vEQ56stg0k4PoMWqtJJxmdRitZo+qGpr FkzUwzyM9fX4BH23F4TGU93YPDPI6BWkRV93lQoq+QjBPjiLrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI7HvEZskUPKO64sIMVxf/GsdPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvM2ZmMmQ2ZjktYzY2Yy0z NjIxLTkyZGYtYjhlYjNlZDBhMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLRlI+HEL9Zswp2qCLXZU8xUzCy3lnJd1z6F1osVrfB3LFoXLHrrIro 7J1Z61eDl8NPujWF9EjL+PZqENnlPD0+Plq0J5ZP5XCxiL7yFTS9bqnI4P0FqQnj PueET6k/TlkQ4Yxbb5enewm6bLf/45OoHxWvYCaGdKQ00WNv4GqNBdc9qEJksfdE Ujs9oLV8ueZUz0ybFaewzsL7fc4qhi7NUc+XkmlT7m7v4zNNmjW0sC7caoXv+rNE FVpvW7orFVNKnB08aPqwlz9KENt0JHdwxKrfBdmer+HunmXty98XPzHJHD3Ie4FC hJICoPPlkAprCsH4uTyaHxaNL4s9OOc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:29 2026 by rpki-client