$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa File: 521c3d90-e8a5-3699-8987-db21e5cefb4e.roa (raw, json) Hash identifier: e9rJhkgWpz0Pu0AGQLosfu4ox3NatIqXIK2FXKW9SWo= Subject key identifier: 12:3C:F3:19:82:B1:92:68:40:B6:AF:6C:A8:B9:13:D2:BE:5A:C3:37 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584D00B272997A2315F96F2E59C0 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 19165 IP address blocks: 199.87.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:72:99:7a:23:15:f9:6f:2e:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=09c41060-a700-4869-a11b-79781f91468b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:e4:89:6c:d6:b9:93:8a:46:ee:42:ee:f5: d0:49:93:8b:96:14:4f:dd:c8:ca:82:1a:95:30:92: c5:48:dc:3c:eb:4a:b1:4f:96:40:71:ff:fd:ff:59: 60:5e:5a:6c:a7:17:13:53:82:3c:8a:90:9f:a4:43: 2a:9d:5f:37:16:e2:e6:d1:b4:c1:b5:b3:b5:73:63: e6:91:7c:61:8f:dd:2e:df:2d:6c:60:8d:96:fc:7b: a7:b2:02:6d:4d:3b:10:eb:cd:45:0f:f8:eb:45:c2: 9c:06:61:42:00:a7:f8:66:12:28:80:da:1d:68:4d: 9e:c9:f3:c6:8c:20:39:c5:a9:52:4c:18:e1:9f:87: fe:b4:66:e2:dc:49:60:76:7e:64:6d:e5:76:58:6a: e2:f2:69:f3:f8:e0:e0:cc:ec:70:b1:aa:a5:f0:be: 23:23:1a:7f:d5:f4:68:bb:d7:49:bd:93:7f:a6:cc: bc:a7:07:48:dc:82:9b:fc:a5:4f:8c:41:6a:95:bb: 45:43:bc:4a:6d:d9:30:ba:43:36:06:d4:7b:69:73: a5:a0:30:96:95:71:c9:33:03:7b:56:d9:88:04:6e: 7f:6e:29:1f:b4:95:cc:d1:3b:d5:02:0c:f0:df:39: 0d:f0:60:d8:ee:31:53:31:9f:cf:d9:d6:8a:f6:4c: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3C:F3:19:82:B1:92:68:40:B6:AF:6C:A8:B9:13:D2:BE:5A:C3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/521c3d90-e8a5-3699-8987-db21e5cefb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 199.87.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:67:69:9e:3a:af:d4:a9:0a:1f:27:a9:cb:5c:03:d0:24:aa: 9a:9d:98:10:27:6b:73:79:cf:2c:4f:0e:17:4f:48:9b:e0:0b: f5:68:cb:54:cb:fa:72:56:1f:68:3c:c0:93:30:99:b4:6f:ec: 7e:c2:1f:59:b2:07:41:98:3f:60:34:c2:c1:01:0d:f4:34:d2: b4:60:c9:0b:27:d7:12:37:bd:15:11:55:af:ec:dd:5b:01:7c: bb:a1:44:09:f0:8d:d1:33:42:8e:2c:3d:1f:d1:64:a0:08:e5: e4:0d:ad:ac:d8:06:f1:68:12:6a:34:ae:6f:68:59:7a:f2:da: 7d:11:9b:eb:cc:b8:94:6a:9d:af:f3:ea:d3:57:23:34:0d:85: cb:d7:6d:b1:6e:7a:d4:82:a2:93:7a:02:d2:a2:4f:49:6c:aa: d6:65:74:fa:44:6b:08:00:e2:e6:b9:b8:74:0a:91:e9:79:82: 0f:b8:c9:c8:b7:f1:6d:81:07:f3:b7:43:e0:80:4f:c5:15:26: ea:88:6d:bd:d5:eb:66:30:f1:a7:4b:da:b1:e9:25:48:e9:7b: eb:e1:2f:59:e7:a9:26:7c:ad:dc:56:66:3e:60:c3:26:73:04: 8f:50:c4:2d:1d:22:2b:5d:4a:7e:1c:63:2f:18:e4:c3:40:89: c4:27:94:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsnKZeiMV+W8uWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MDljNDEwNjAtYTcwMC00ODY5LWExMWItNzk3ODFmOTE0NjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmXkiWzWuZOKRu5C7vXQSZOLlhRP3cjKghqV MJLFSNw860qxT5ZAcf/9/1lgXlpspxcTU4I8ipCfpEMqnV83FuLm0bTBtbO1c2Pm kXxhj90u3y1sYI2W/HunsgJtTTsQ681FD/jrRcKcBmFCAKf4ZhIogNodaE2eyfPG jCA5xalSTBjhn4f+tGbi3Elgdn5kbeV2WGri8mnz+ODgzOxwsaql8L4jIxp/1fRo u9dJvZN/psy8pwdI3IKb/KVPjEFqlbtFQ7xKbdkwukM2BtR7aXOloDCWlXHJMwN7 VtmIBG5/bikftJXM0TvVAgzw3zkN8GDY7jFTMZ/P2daK9kxEYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI88xmCsZJoQLavbKi5E9K+WsM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNTIxYzNkOTAtZThhNS0z Njk5LTg5ODctZGIyMWU1Y2VmYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1dQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJnaZ46r9SpCh8nqctcA9AkqpqdmBAna3N5zyxPDhdPSJvgC/Voy1TL +nJWH2g8wJMwmbRv7H7CH1myB0GYP2A0wsEBDfQ00rRgyQsn1xI3vRURVa/s3VsB fLuhRAnwjdEzQo4sPR/RZKAI5eQNrazYBvFoEmo0rm9oWXry2n0Rm+vMuJRqna/z 6tNXIzQNhcvXbbFuetSCopN6AtKiT0lsqtZldPpEawgA4ua5uHQKkel5gg+4yci3 8W2BB/O3Q+CAT8UVJuqIbb3V62Yw8adL2rHpJUjpe+vhL1nnqSZ8rdxWZj5gwyZz BI9QxC0dIitdSn4cYy8Y5MNAicQnlII= -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:15 2026 by rpki-client