$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa File: 8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa (raw, json) Hash identifier: HfcNpzqzDqY2siyWAE50lYPYdtO5NUNe61bdKoBhH0g= Subject key identifier: 40:CB:8D:39:9C:9D:C2:C3:9C:61:56:EC:DB:9F:D9:3F:38:D3:8F:DA Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D04E23EA1D9DADE46094B6880 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 11233 IP address blocks: 199.182.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3e:a1:d9:da:de:46:09:4b:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=f64bcd35-b0e1-496c-bfcd-0e50f03cd167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:fa:c7:ce:20:0f:d7:9b:c7:39:e8:41:78: 47:18:10:66:b2:6e:1c:95:06:4d:8b:50:da:8d:29: 0a:7a:26:80:0b:09:b7:b4:24:da:88:09:ad:14:12: 75:fb:54:ba:bb:3c:dc:37:60:98:a4:32:38:8a:c9: 42:ba:5d:24:f3:9c:81:5b:c8:06:c2:2e:c2:9a:60: 7a:a5:31:96:2b:d4:1b:57:b4:ab:42:51:1a:38:69: eb:e4:b5:87:ad:6f:49:dc:ee:98:34:bd:00:80:0f: 5a:33:34:76:e5:64:02:cd:4f:8b:08:61:57:ba:37: 15:b2:a4:cc:fc:bf:31:5f:25:3b:84:d6:38:dd:cd: 6d:d2:11:09:4f:73:e9:34:2e:8c:2a:0a:0e:e4:c0: 15:b8:e3:06:24:76:81:34:a0:07:22:ad:a0:70:27: 12:53:7f:d2:c3:83:ed:1e:f4:48:8b:ec:38:d8:9e: c5:af:b2:0a:00:a0:4d:1f:b7:b6:a6:5c:81:45:8b: 81:80:80:dc:70:d0:51:86:ae:55:64:0b:0f:ed:38: 23:8c:53:45:96:27:58:82:9c:6e:44:7c:79:77:c8: 03:15:4b:e3:72:cd:39:10:51:0e:d0:04:04:4a:8b: c8:e1:f4:62:9b:2a:c1:da:87:7c:c7:3c:66:e3:df: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CB:8D:39:9C:9D:C2:C3:9C:61:56:EC:DB:9F:D9:3F:38:D3:8F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 199.182.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ee:00:59:84:82:8e:21:e3:dc:c1:ed:ef:ab:36:c9:0c:7c: bd:38:26:81:e3:71:70:03:f4:ed:14:1f:0f:74:11:27:84:fc: 72:cf:0a:32:34:80:31:03:72:a0:c4:06:5a:65:93:48:99:20: a9:aa:19:38:3e:35:77:de:e8:a0:51:52:b3:7e:5b:5d:e5:05: c6:b8:08:9b:00:12:0e:7d:9d:00:67:5f:82:e6:ad:a0:15:17: 4c:ca:35:59:1a:19:1d:38:b4:4a:e0:39:a8:e1:31:5e:7a:c5: 35:e4:11:15:de:5d:00:5b:41:e0:26:99:e6:a7:7a:81:de:10: 26:fd:e5:87:45:dc:bb:0e:01:dc:9e:d2:a5:f5:f5:08:dd:21: 09:25:f0:00:3b:2d:00:d8:3d:cb:7d:69:d0:e9:11:02:c5:3c: 62:eb:65:d2:4f:9f:74:ca:b1:aa:6f:da:c5:8d:08:21:51:01: de:e0:fd:e1:ce:94:30:92:59:94:89:5f:00:5b:54:2a:ee:92: c9:8b:62:d5:5a:95:97:f8:b9:c9:fc:51:10:07:0d:d3:60:d1: 30:cf:72:a2:d9:59:a1:45:18:92:55:f3:e0:d3:29:d0:04:0f: 20:3b:88:c6:dc:ab:62:1a:11:e3:f4:d4:c9:52:bc:cb:c6:d5: 97:b8:c6:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4j6h2dreRglLaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjY0YmNkMzUtYjBlMS00OTZjLWJmY2QtMGU1MGYwM2NkMTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0v6x84gD9ebxznoQXhHGBBmsm4clQZNi1Da jSkKeiaACwm3tCTaiAmtFBJ1+1S6uzzcN2CYpDI4islCul0k85yBW8gGwi7CmmB6 pTGWK9QbV7SrQlEaOGnr5LWHrW9J3O6YNL0AgA9aMzR25WQCzU+LCGFXujcVsqTM /L8xXyU7hNY43c1t0hEJT3PpNC6MKgoO5MAVuOMGJHaBNKAHIq2gcCcSU3/Sw4Pt HvRIi+w42J7Fr7IKAKBNH7e2plyBRYuBgIDccNBRhq5VZAsP7TgjjFNFlidYgpxu RHx5d8gDFUvjcs05EFEO0AQESovI4fRimyrB2od8xzxm49+r3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDLjTmcncLDnGFW7Nuf2T8404/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOGNlMGJkM2EtNjg3OS0z MDExLThlMzMtMzVlMTkxMGNlNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7bJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTuAFmEgo4h49zB7e+rNskMfL04JoHjcXAD9O0UHw90ESeE/HLPCjI0 gDEDcqDEBlplk0iZIKmqGTg+NXfe6KBRUrN+W13lBca4CJsAEg59nQBnX4LmraAV F0zKNVkaGR04tErgOajhMV56xTXkERXeXQBbQeAmmeaneoHeECb95YdF3LsOAdye 0qX19QjdIQkl8AA7LQDYPct9adDpEQLFPGLrZdJPn3TKsapv2sWNCCFRAd7g/eHO lDCSWZSJXwBbVCruksmLYtValZf4ucn8URAHDdNg0TDPcqLZWaFFGJJV8+DTKdAE DyA7iMbcq2IaEeP01MlSvMvG1Ze4xkM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:22 2026 by rpki-client