$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa File: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (raw, json) Hash identifier: khBjZudHZFVqK7/ifUHXvdTvvaYmr1R6Sqf+XPqvc5I= Subject key identifier: 46:0A:84:FF:67:FA:D4:3B:10:6F:8A:36:D9:36:87:98:82:85:D4:4E Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009 Certificate serial: 010D0C9F4328584CAA27214EF8144B25EFA30C00 Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 40460 IP address blocks: 199.182.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:21:4e:f8:14:4b:25:ef:a3:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=2dfd625f-5264-4833-bbc9-b4c5da725c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:25:1a:99:43:62:5e:fb:3f:57:60:fb:25: 84:2d:48:de:bf:08:f0:6f:68:51:11:32:74:c2:53: 5c:ed:de:e2:97:2a:77:19:9a:bd:e3:ef:5a:a7:59: 3f:46:63:74:ab:f3:27:c2:d7:0d:a8:9e:39:5a:3a: a6:16:72:f3:22:6b:42:c9:1e:af:5f:8d:a3:3e:1a: c0:91:80:9f:9a:c1:84:9a:32:1c:74:87:bb:fa:2a: 97:8b:1b:ce:83:2c:24:af:a0:cd:9a:f8:c4:d5:5e: 1c:84:cd:91:ee:a6:aa:55:dd:cd:62:56:e1:00:5d: c0:e6:bc:06:d4:21:ea:c8:77:a2:c8:9c:13:db:3d: e6:42:5d:cb:9d:1c:74:3b:70:b0:c3:31:3a:9d:64: 06:95:13:46:ba:97:b7:51:de:12:3f:90:ca:1a:88: 27:1c:7e:dc:0e:c6:03:ed:11:b8:11:57:94:97:ed: b8:2d:8f:8a:21:c9:db:6a:f6:5f:eb:a2:3c:5a:a7: c5:c9:54:c3:b4:27:64:f1:35:3b:55:bc:b3:80:64: 1f:a9:e6:c6:8f:2e:c0:8f:4d:65:1f:44:29:8c:f0: ff:78:2a:14:85:23:3c:c4:92:c5:ec:09:df:f2:e9: f5:9b:03:43:8d:0d:47:80:00:67:e5:ee:45:c2:dd: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:84:FF:67:FA:D4:3B:10:6F:8A:36:D9:36:87:98:82:85:D4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl X509v3 Authority Key Identifier: keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer sbgp-ipAddrBlock: critical IPv4: 199.182.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:01:fa:d2:3f:a5:95:06:66:02:dd:cc:25:09:90:ac:19:c2: 1d:c6:6f:4e:44:42:a3:6e:09:4e:ac:00:6a:34:9c:4c:c6:e5: 29:b7:16:0d:63:c9:0a:f1:55:8c:b7:18:13:f8:c0:20:92:c1: 5f:11:66:b1:30:f7:10:98:13:58:1f:f5:75:d6:d9:f2:e2:22: 40:c9:21:27:01:1a:7b:e9:b1:6c:52:04:52:66:fa:f2:04:c0: 9d:21:29:37:9a:ea:80:d5:5c:76:4c:c6:7c:32:8e:c2:56:08: be:4e:df:70:df:32:b3:d7:f7:6f:6d:f4:9f:f1:5b:f2:86:da: d2:73:37:33:ea:a8:69:8b:e9:ef:b2:94:84:73:3a:58:0d:15: e1:62:58:b4:d8:cb:ba:bd:b7:26:cf:ca:c0:df:e1:b5:87:f2: 12:b0:c7:2a:dc:d5:d3:b2:4c:15:46:92:f4:f9:ae:a8:93:ab: 27:80:b7:0f:d4:1f:a3:05:c5:64:c0:3f:dd:bc:24:76:69:5c: 70:df:d4:51:8f:eb:be:49:4c:fa:2e:71:6e:8b:8e:99:c5:86: 5a:e5:94:07:7e:29:ba:5a:94:a4:e1:3b:57:40:54:f7:cf:07: f9:56:f5:a7:e9:c6:ad:6e:6a:22:0b:06:e9:91:50:94:36:9a: 1f:43:79:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJyFO+BRLJe+jDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNTQ4YTktZTE3Mi00MWEzLTkyNWEtNjA5ZTkzMWQw MDA5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MmRmZDYyNWYtNTI2NC00ODMzLWJiYzktYjRjNWRhNzI1YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAElGplDYl77P1dg+yWELUjevwjwb2hRETJ0 wlNc7d7ilyp3GZq94+9ap1k/RmN0q/MnwtcNqJ45WjqmFnLzImtCyR6vX42jPhrA kYCfmsGEmjIcdIe7+iqXixvOgywkr6DNmvjE1V4chM2R7qaqVd3NYlbhAF3A5rwG 1CHqyHeiyJwT2z3mQl3LnRx0O3CwwzE6nWQGlRNGupe3Ud4SP5DKGognHH7cDsYD 7RG4EVeUl+24LY+KIcnbavZf66I8WqfFyVTDtCdk8TU7VbyzgGQfqebGjy7Aj01l H0QpjPD/eCoUhSM8xJLF7Anf8un1mwNDjQ1HgABn5e5Fwt2NQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYKhP9n+tQ7EG+KNtk2h5iChdROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1 NDhhOS1lMTcyLTQxYTMtOTI1YS02MDllOTMxZDAwMDkvZDNjNWRmM2UtZjJlNC0z NjEzLTk2MjYtMjY1YTcyYTZkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNTQ4YTktZTE3Mi00MWEzLTky NWEtNjA5ZTkzMWQwMDA5LzNiYjU0OGE5LWUxNzItNDFhMy05MjVhLTYwOWU5MzFk MDAwOS5jcmwwHwYDVR0jBBgwFoAUFkV4gX9FTzzMRxgL5Nkx0UiTiwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1NDhhOS1lMTcyLTQxYTMtOTI1YS02MDll OTMxZDAwMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7a8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4B+tI/pZUGZgLdzCUJkKwZwh3Gb05EQqNuCU6sAGo0nEzG5Sm3Fg1j yQrxVYy3GBP4wCCSwV8RZrEw9xCYE1gf9XXW2fLiIkDJIScBGnvpsWxSBFJm+vIE wJ0hKTea6oDVXHZMxnwyjsJWCL5O33DfMrPX929t9J/xW/KG2tJzNzPqqGmL6e+y lIRzOlgNFeFiWLTYy7q9tybPysDf4bWH8hKwxyrc1dOyTBVGkvT5rqiTqyeAtw/U H6MFxWTAP928JHZpXHDf1FGP675JTPoucW6LjpnFhlrllAd+KbpalKThO1dAVPfP B/lW9afpxq1uaiILBumRUJQ2mh9Defs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:55 2026 by rpki-client