$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa File: fa68b0de-950c-3c2b-93c2-0c01d381801f.roa (raw, json) Hash identifier: N9ZuECuQ/e1R29ipLflxiguB3sfOyv2yi18qv+7tT2I= Subject key identifier: E8:07:C3:22:13:02:F0:BF:F7:E6:81:5B:E9:77:D5:60:91:ED:CE:A6 Certificate issuer: /CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Certificate serial: 010D0C9F4328584D65151263327D7EF99BA7A540 Authority key identifier: 04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16509 IP address blocks: 198.99.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:12:63:32:7d:7e:f9:9b:a7:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5fe3e7-3c15-4742-a824-8c933974ab55 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=4ff741a2-8ea2-4409-a78d-3f13dceb15f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:a5:2d:4b:bd:54:b4:a6:dd:0e:8a:76:35: fc:86:b0:1b:27:bc:56:82:01:16:27:1b:0a:12:a0: 29:a3:68:47:cc:6b:31:0f:50:86:99:b9:67:38:e8: 1c:1a:0e:b7:93:6f:da:ea:1d:8a:b4:38:b4:95:0d: 29:ff:e2:e0:20:17:d4:8c:d9:4d:3d:22:ed:a2:e8: 63:34:84:9d:cf:fa:88:0a:a9:67:14:2c:df:c8:47: d0:6d:db:43:78:c2:c4:b5:31:94:16:6c:85:0d:c8: 48:ed:4a:45:2b:41:ee:21:33:de:36:09:2e:6c:44: d2:94:80:e4:3b:ea:6a:b5:3d:0e:bf:8f:be:54:50: 7c:5f:08:7d:36:81:78:3e:e5:12:42:0c:d2:da:56: 27:03:84:f3:e8:40:11:9e:c3:8f:ac:c3:9c:5d:3f: 61:b3:56:f1:19:27:fa:e6:d3:08:74:6e:56:5e:67: 23:cb:30:ab:65:34:cb:2b:93:32:ef:c3:fc:d7:ef: eb:df:87:10:4f:2e:b1:60:1b:e6:70:2b:41:31:03: b1:a3:f5:82:97:b9:79:58:3a:00:7b:d7:25:0c:48: 43:1c:34:61:01:83:82:bc:ea:c4:69:65:48:11:84: 2f:20:ff:6d:d9:41:cc:f1:8f:f3:6e:6c:50:18:6b: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:07:C3:22:13:02:F0:BF:F7:E6:81:5B:E9:77:D5:60:91:ED:CE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/fa68b0de-950c-3c2b-93c2-0c01d381801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55/1f5fe3e7-3c15-4742-a824-8c933974ab55.crl X509v3 Authority Key Identifier: keyid:04:16:CB:E5:BD:0C:1A:59:30:EB:0E:72:5C:7A:4E:81:7C:0E:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f5fe3e7-3c15-4742-a824-8c933974ab55.cer sbgp-ipAddrBlock: critical IPv4: 198.99.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:98:de:27:18:b0:67:99:41:bd:0b:85:36:34:46:eb:63:7c: cc:da:2b:70:73:82:a2:ad:0f:28:61:ae:8b:ef:21:5e:60:a4: 16:47:d9:56:3a:f1:83:12:a5:81:09:fb:26:f2:fd:2f:38:1f: 03:f4:87:05:d2:74:9e:b3:53:f9:9f:08:66:96:33:45:60:4e: 91:ad:ce:dc:f6:36:54:20:58:c0:8e:f6:cf:d0:db:c1:6a:8e: c3:3b:2b:4b:30:57:8a:33:3e:7f:da:4c:32:59:98:8f:75:80: 59:a4:9e:7d:98:e4:58:ab:83:3b:93:44:16:58:72:eb:7c:2e: b7:16:37:33:36:f1:30:0f:e5:4e:a8:2f:ac:73:95:c8:70:32: a8:3d:16:e4:58:68:f1:d7:c6:78:82:7d:16:31:70:93:38:76: ef:8d:0e:eb:d0:12:70:61:58:3e:af:c8:fc:86:0a:ae:99:93: c8:e1:00:30:e7:cf:2c:e3:8a:48:4a:2d:76:0e:ba:bb:cc:fc: b1:f8:21:8f:6d:a9:0d:d7:62:d4:fe:11:aa:df:34:01:6d:1e: da:23:45:af:56:58:36:75:10:19:ca:6d:a8:c7:fa:ab:cc:b7: 6f:1d:b5:39:f5:8d:b3:b6:32:a2:0f:a6:8f:12:e0:4b:8e:5b: 03:2c:cb:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRJjMn1++ZunpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1ZmUzZTctM2MxNS00NzQyLWE4MjQtOGM5MzM5NzRh YjU1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NGZmNzQxYTItOGVhMi00NDA5LWE3OGQtM2YxM2RjZWIxNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNmlLUu9VLSm3Q6KdjX8hrAbJ7xWggEWJxsK EqApo2hHzGsxD1CGmblnOOgcGg63k2/a6h2KtDi0lQ0p/+LgIBfUjNlNPSLtouhj NISdz/qICqlnFCzfyEfQbdtDeMLEtTGUFmyFDchI7UpFK0HuITPeNgkubETSlIDk O+pqtT0Ov4++VFB8Xwh9NoF4PuUSQgzS2lYnA4Tz6EARnsOPrMOcXT9hs1bxGSf6 5tMIdG5WXmcjyzCrZTTLK5My78P81+/r34cQTy6xYBvmcCtBMQOxo/WCl7l5WDoA e9clDEhDHDRhAYOCvOrEaWVIEYQvIP9t2UHM8Y/zbmxQGGviUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgHwyITAvC/9+aBW+l31WCR7c6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVm ZTNlNy0zYzE1LTQ3NDItYTgyNC04YzkzMzk3NGFiNTUvZmE2OGIwZGUtOTUwYy0z YzJiLTkzYzItMGMwMWQzODE4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWY1ZmUzZTctM2MxNS00NzQyLWE4 MjQtOGM5MzM5NzRhYjU1LzFmNWZlM2U3LTNjMTUtNDc0Mi1hODI0LThjOTMzOTc0 YWI1NS5jcmwwHwYDVR0jBBgwFoAUBBbL5b0MGlkw6w5yXHpOgXwOxfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjVmZTNlNy0zYzE1LTQ3NDItYTgyNC04Yzkz Mzk3NGFiNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmY3icYsGeZQb0LhTY0RutjfMzaK3BzgqKtDyhhrovvIV5gpBZH2VY6 8YMSpYEJ+yby/S84HwP0hwXSdJ6zU/mfCGaWM0VgTpGtztz2NlQgWMCO9s/Q28Fq jsM7K0swV4ozPn/aTDJZmI91gFmknn2Y5FirgzuTRBZYcut8LrcWNzM28TAP5U6o L6xzlchwMqg9FuRYaPHXxniCfRYxcJM4du+NDuvQEnBhWD6vyPyGCq6Zk8jhADDn zyzjikhKLXYOurvM/LH4IY9tqQ3XYtT+EarfNAFtHtojRa9WWDZ1EBnKbajH+qvM t28dtTn1jbO2MqIPpo8S4EuOWwMsy6A= -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:34 2026 by rpki-client