$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa File: 7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa (raw, json) Hash identifier: pjFI+lCh89z219eyHcjW61tf1gWzVsSgDlD1CD33ReU= Subject key identifier: 23:AF:A5:B8:C5:8B:15:F8:CF:7E:F3:4E:D8:A8:20:B0:2D:D4:D2:7E Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F4328584CAE5732DE1A454E7E65BE2540 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 216382 IP address blocks: 199.119.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:32:de:1a:45:4e:7e:65:be:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=13e1f6f8-6a0a-4e8c-81a5-5f6b40849b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:ac:66:86:c0:1d:8d:98:7a:10:f1:d7:3a: 0a:24:5d:05:f6:42:e8:e6:ae:03:38:f9:50:98:e0: d6:c2:27:7f:b0:83:1d:fb:23:c1:3e:fe:38:ae:0e: 71:26:f0:d4:a7:de:b3:7d:6a:4a:9c:2b:74:87:02: 73:04:8d:4d:53:16:b7:c3:93:14:b9:7e:75:96:de: a0:5f:cd:c1:59:a4:8a:67:a5:72:3b:e8:6b:21:94: 9f:5c:80:69:82:5a:51:54:cd:fc:e2:da:fb:bb:36: dc:6f:40:13:c5:ae:68:eb:18:70:a4:23:9b:5b:da: a0:15:4b:de:14:9d:d6:45:8d:77:72:13:47:a7:67: 8f:dc:03:a0:f2:02:05:da:e5:3d:8b:64:8d:cb:35: e4:df:0c:79:98:62:16:1b:8a:03:e7:da:df:8e:f2: 6f:bb:92:f2:35:82:79:5c:46:1a:52:cd:95:fd:e8: b1:38:94:63:b0:cc:25:ce:d5:e0:d2:81:20:94:54: f8:58:e2:36:87:18:20:28:0a:e8:89:db:8f:6e:41: cb:53:fa:5c:f3:bf:7e:5c:64:34:95:07:aa:b8:5a: 22:f1:5a:06:e3:e1:35:71:4f:c7:be:4d:db:f2:9b: d4:86:c8:a8:9b:91:78:e0:3b:a7:eb:78:f8:55:f5: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AF:A5:B8:C5:8B:15:F8:CF:7E:F3:4E:D8:A8:20:B0:2D:D4:D2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 199.119.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:82:c9:19:fa:dc:33:db:a5:13:98:8e:6f:a6:25:4f:02:18: 2e:ba:67:be:e1:0b:62:57:88:81:21:85:97:8c:d0:e6:73:31: 43:51:ae:d8:09:32:36:ec:24:a4:bb:a7:e0:5f:ee:60:f0:ac: 15:0e:6d:dc:14:db:4a:ee:a7:5e:62:69:fc:9c:b3:5b:15:90: fb:87:52:19:2f:54:55:83:bc:18:30:66:4a:f6:e0:fd:2c:23: 3d:eb:c1:44:ed:ca:76:9e:26:59:ed:cc:50:57:a9:1b:c5:81: 90:4f:cf:f6:0d:6a:1c:39:d0:48:d3:ca:c7:6b:9e:51:b2:00: 17:19:9b:5d:a0:47:ad:bc:a6:98:3a:de:64:80:da:fe:a8:86: 67:d3:f8:41:94:23:b9:79:50:cf:63:ad:30:71:65:c2:d0:09: fb:a3:d6:89:93:48:82:e0:93:b0:33:3b:01:37:1d:bb:ab:96: a8:1d:16:c6:9d:b7:e0:07:9c:00:a7:24:b7:37:d2:2a:18:3e: 9f:26:25:84:96:02:06:64:a1:86:57:76:8d:4f:5a:ee:9f:9a: 12:84:31:2b:a8:bd:cb:62:d1:00:74:48:ca:d8:76:69:b2:34: 4d:cf:9a:e1:f1:54:b8:f4:81:e4:40:b6:00:1e:27:d6:f4:81: 57:fb:e3:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVzLeGkVOfmW+JUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTNlMWY2ZjgtNmEwYS00ZThjLTgxYTUtNWY2YjQwODQ5YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc+sZobAHY2YehDx1zoKJF0F9kLo5q4DOPlQ mODWwid/sIMd+yPBPv44rg5xJvDUp96zfWpKnCt0hwJzBI1NUxa3w5MUuX51lt6g X83BWaSKZ6VyO+hrIZSfXIBpglpRVM384tr7uzbcb0ATxa5o6xhwpCObW9qgFUve FJ3WRY13chNHp2eP3AOg8gIF2uU9i2SNyzXk3wx5mGIWG4oD59rfjvJvu5LyNYJ5 XEYaUs2V/eixOJRjsMwlztXg0oEglFT4WOI2hxggKAroiduPbkHLU/pc879+XGQ0 lQequFoi8VoG4+E1cU/Hvk3b8pvUhsiom5F44Dun63j4VfWIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOvpbjFixX4z37zTtioILAt1NJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvNzM3OGZkYzctYjUzZi0z YzkyLWEwMmQtY2U0NmJlNGE5Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSCyRn63DPbpROYjm+mJU8CGC66Z77hC2JXiIEhhZeM0OZzMUNRrtgJ MjbsJKS7p+Bf7mDwrBUObdwU20rup15iafycs1sVkPuHUhkvVFWDvBgwZkr24P0s Iz3rwUTtynaeJlntzFBXqRvFgZBPz/YNahw50EjTysdrnlGyABcZm12gR628ppg6 3mSA2v6ohmfT+EGUI7l5UM9jrTBxZcLQCfuj1omTSILgk7AzOwE3HburlqgdFsad t+AHnACnJLc30ioYPp8mJYSWAgZkoYZXdo1PWu6fmhKEMSuovcti0QB0SMrYdmmy NE3PmuHxVLj0geRAtgAeJ9b0gVf74+w= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:40 2026 by rpki-client