$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa File: f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa (raw, json) Hash identifier: LSmt5agEqoYkHCZIuMWzZJEFNJN5k1o24DZlDR7WpXs= Subject key identifier: 4B:D2:2E:21:66:CA:08:5C:5D:77:04:C0:D4:36:81:DA:82:1B:33:19 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584CB0DCD3F413B8DA25B5DFC420 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa Signing time: Thu 29 Jan 2026 23:41:51 +0000 ROA not before: Thu 29 Jan 2026 23:41:51 +0000 ROA not after: Wed 29 Apr 2026 22:41:51 +0000 asID: 15296 IP address blocks: 199.216.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b0:dc:d3:f4:13:b8:da:25:b5:df:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Jan 29 23:41:51 2026 GMT Not After : Apr 29 22:41:51 2026 GMT Subject: CN=9e8a5a8b-7813-4551-89e4-195d45806739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:75:12:9f:28:d7:e8:4f:d9:00:1d:3e:75: d2:e8:1c:77:57:7e:d3:f4:b3:a8:f6:da:5c:a5:7d: aa:af:0c:98:44:f8:35:f5:69:9c:62:13:d1:7e:5a: e2:d2:02:b1:dc:13:80:d5:1d:69:4a:e1:e8:c8:91: b6:21:26:48:79:0e:a9:b9:83:71:45:98:af:3e:45: 92:96:a6:b1:49:b8:9d:65:e6:29:b7:89:0c:92:dd: 9a:80:89:ce:65:d4:77:f4:a2:9b:55:6a:5b:77:d0: a8:77:be:5c:79:fb:4b:b3:a4:96:38:f5:33:2d:61: 5c:73:55:44:f9:df:ad:38:37:ba:82:4c:1d:05:c4: d2:12:04:41:34:27:09:50:cf:87:88:62:09:0c:96: 39:93:98:12:60:30:5a:65:73:78:c7:30:40:b3:07: ad:78:97:c5:79:20:cf:02:75:c8:9c:de:58:33:1f: 1c:d4:46:9f:06:bf:38:0f:d8:29:30:8d:fb:ae:08: 3e:db:36:9f:d7:34:c0:c7:55:ed:89:6a:67:3c:38: 64:69:04:6f:d7:a2:f7:b0:b0:9c:ec:e6:8f:08:de: cb:68:4e:20:ce:07:21:2c:9d:96:e8:7d:f8:0c:5d: b8:16:6c:9a:fd:66:fd:59:13:11:67:73:e8:67:3b: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D2:2E:21:66:CA:08:5C:5D:77:04:C0:D4:36:81:DA:82:1B:33:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/f3db20f8-aa5b-3355-afea-84b3a6993e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:35:0f:a3:f0:a4:ed:69:50:85:03:dc:80:09:2b:d8:9a:66: 7e:cd:98:d0:51:d4:22:72:5f:82:30:32:3d:13:bb:0b:df:f3: d0:d2:ae:74:11:b7:62:a0:24:37:a2:9c:b4:43:12:e9:ab:47: 87:14:bf:87:ac:ad:d4:3f:32:cd:db:a2:6a:83:8a:42:83:ed: 48:f2:60:87:f4:52:82:e9:29:f1:5e:75:00:a2:40:dc:e9:f7: 1b:05:e1:03:d7:8b:92:b4:7d:2e:64:e5:71:64:5e:2c:ad:63: dd:4e:0c:42:31:11:b5:74:9a:5a:66:47:c8:9c:a1:85:7a:62: 5d:16:f7:6c:e8:7b:bb:e1:1b:c9:d2:c9:fc:38:dd:6f:3b:99: 23:08:0a:6e:fc:13:f1:04:1d:f0:ee:b6:3a:b9:5d:f6:e6:89: b3:8f:74:72:06:7a:3d:43:e8:4c:b3:49:06:40:d8:73:84:91: aa:e9:6e:0c:37:13:35:36:f0:93:e7:7e:26:ec:36:b8:4e:86: 94:dc:15:39:21:09:7f:db:48:3e:78:bc:f3:39:60:8d:4a:f7: ef:ca:16:77:02:39:12:d9:36:4a:66:a4:b5:bd:c4:2f:a5:91: e8:61:9b:89:83:5a:10:8f:ce:c0:96:80:4c:8e:21:32:3a:e7: 48:6a:4a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyw3NP0E7jaJbXfxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDEyOTIzNDE1MVoXDTI2MDQyOTIyNDE1MVowLzEtMCsGA1UEAxMk OWU4YTVhOGItNzgxMy00NTUxLTg5ZTQtMTk1ZDQ1ODA2NzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjV1Ep8o1+hP2QAdPnXS6Bx3V37T9LOo9tpc pX2qrwyYRPg19WmcYhPRflri0gKx3BOA1R1pSuHoyJG2ISZIeQ6puYNxRZivPkWS lqaxSbidZeYpt4kMkt2agInOZdR39KKbVWpbd9Cod75ceftLs6SWOPUzLWFcc1VE +d+tODe6gkwdBcTSEgRBNCcJUM+HiGIJDJY5k5gSYDBaZXN4xzBAsweteJfFeSDP AnXInN5YMx8c1EafBr84D9gpMI37rgg+2zaf1zTAx1XtiWpnPDhkaQRv16L3sLCc 7OaPCN7LaE4gzgchLJ2W6H34DF24Fmya/Wb9WRMRZ3PoZzveBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvSLiFmyghcXXcEwNQ2gdqCGzMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvZjNkYjIwZjgtYWE1Yi0z MzU1LWFmZWEtODRiM2E2OTkzZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9h5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALw1D6PwpO1pUIUD3IAJK9iaZn7NmNBR1CJyX4IwMj0Tuwvf89DSrnQR t2KgJDeinLRDEumrR4cUv4esrdQ/Ms3bomqDikKD7UjyYIf0UoLpKfFedQCiQNzp 9xsF4QPXi5K0fS5k5XFkXiytY91ODEIxEbV0mlpmR8icoYV6Yl0W92zoe7vhG8nS yfw43W87mSMICm78E/EEHfDutjq5XfbmibOPdHIGej1D6EyzSQZA2HOEkarpbgw3 EzU28JPnfibsNrhOhpTcFTkhCX/bSD54vPM5YI1K9+/KFncCORLZNkpmpLW9xC+l kehhm4mDWhCPzsCWgEyOITI650hqSiA= -----END CERTIFICATE-----Generated at Mon Mar 2 02:27:41 2026 by rpki-client