$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa File: 5ca2880a-38cd-32ae-8559-16deb6384003.roa (raw, json) Hash identifier: Fymwcz2CcztBscCKGnjM3Nzuo5ed3VzgBqv7lMdsXBo= Subject key identifier: FE:CC:7A:AC:D1:93:D2:81:D6:38:C9:BA:CF:F6:20:9B:3C:EF:50:DE Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584DF6409955FBE4ECD4F14DCD40 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 397325 IP address blocks: 199.58.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:99:55:fb:e4:ec:d4:f1:4d:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=8d3a90d8-50cd-4a74-aa76-0ba045c271b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:46:df:ca:ab:54:69:49:12:6b:e1:60:e0:b9: af:bc:97:9b:25:4c:f7:9d:9f:b5:66:14:33:dc:13: 35:fd:fd:af:64:d4:73:7f:0f:e5:61:13:9c:b8:7c: 21:8a:3b:be:cd:37:58:3f:66:40:58:69:6d:59:53: 10:42:8b:d2:14:c2:76:cb:f2:b9:49:df:3d:37:d2: a1:11:e5:80:de:a4:aa:9e:93:b3:02:43:9e:97:99: ca:68:88:8f:c8:32:15:2a:99:8e:41:6f:e0:d6:c9: 25:e3:78:6e:9b:2a:44:d9:db:3d:48:08:7b:59:04: 0f:3b:e0:d8:0b:c8:aa:7c:2e:eb:dd:bf:e7:1f:8a: 04:fe:40:fa:78:0f:e7:f8:d6:9a:8c:b1:98:20:a3: 56:8d:13:77:d7:6a:cf:8a:84:46:5d:f2:65:18:23: 5b:3e:ca:f2:31:1e:e3:4e:58:f8:6e:5d:31:84:84: 7d:96:dc:62:6c:d8:41:f5:4c:ef:88:6f:68:a9:77: 41:47:51:1b:52:de:51:49:06:a6:d1:7b:48:39:83: 18:2a:d0:e9:4b:10:56:60:97:71:65:0b:bc:73:e9: 78:6d:4e:93:d5:1b:8b:16:7a:be:50:5c:76:da:63: c6:47:b3:5f:21:17:02:b6:ba:2a:9d:3f:fb:5d:10: f1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:7A:AC:D1:93:D2:81:D6:38:C9:BA:CF:F6:20:9B:3C:EF:50:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/5ca2880a-38cd-32ae-8559-16deb6384003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 199.58.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b2:9e:d6:27:de:2d:07:77:95:9a:8e:c8:6f:cb:c7:d6:6e: c6:db:87:c9:bc:71:d6:2e:48:9b:62:51:20:f3:75:8c:74:57: 3f:c4:a9:1e:f0:07:98:fb:cb:d9:29:95:14:b6:82:fb:e1:8e: 7d:ce:c1:eb:92:d0:10:58:58:dd:df:da:bd:4c:69:38:78:34: f4:4a:95:19:77:9c:fc:59:44:9e:76:63:e8:9a:d7:83:5c:a2: c9:32:c2:8a:8b:46:36:83:22:38:fd:eb:7b:2c:16:ca:12:b5: f5:f0:d5:83:db:bb:21:67:67:59:54:1b:d1:75:2d:73:1f:27: 2f:a3:d9:ca:4b:27:74:69:87:9c:b9:8f:ae:02:21:f9:e6:e1: 1e:70:e1:13:4c:cf:84:5a:f1:dd:7d:f2:97:7f:9e:63:ff:4e: b2:c6:2e:0c:28:f9:43:41:82:37:7a:7a:eb:8c:10:f1:54:23: 70:f4:7e:0d:a5:31:59:98:29:86:17:a7:5e:93:62:c4:bd:f8: 7e:93:04:e0:1e:e6:bc:4f:0e:41:eb:77:57:92:70:1b:a1:bb: 8f:54:13:ac:9e:4b:25:8c:f0:3b:31:56:fe:13:d9:a8:7e:41: fc:0f:66:8d:ee:1e:01:40:13:7e:3d:9c:37:d9:25:4f:7d:dd: 91:8d:63:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QJlV++Ts1PFNzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk OGQzYTkwZDgtNTBjZC00YTc0LWFhNzYtMGJhMDQ1YzI3MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUbfyqtUaUkSa+Fg4LmvvJebJUz3nZ+1ZhQz 3BM1/f2vZNRzfw/lYROcuHwhiju+zTdYP2ZAWGltWVMQQovSFMJ2y/K5Sd89N9Kh EeWA3qSqnpOzAkOel5nKaIiPyDIVKpmOQW/g1skl43humypE2ds9SAh7WQQPO+DY C8iqfC7r3b/nH4oE/kD6eA/n+NaajLGYIKNWjRN312rPioRGXfJlGCNbPsryMR7j Tlj4bl0xhIR9ltxibNhB9UzviG9oqXdBR1EbUt5RSQam0XtIOYMYKtDpSxBWYJdx ZQu8c+l4bU6T1RuLFnq+UFx22mPGR7NfIRcCtroqnT/7XRDxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7MeqzRk9KB1jjJus/2IJs871DeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNWNhMjg4MGEtMzhjZC0z MmFlLTg1NTktMTZkZWI2Mzg0MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFayntYn3i0Hd5Wajshvy8fWbsbbh8m8cdYuSJtiUSDzdYx0Vz/EqR7w B5j7y9kplRS2gvvhjn3OweuS0BBYWN3f2r1MaTh4NPRKlRl3nPxZRJ52Y+ia14Nc oskywoqLRjaDIjj963ssFsoStfXw1YPbuyFnZ1lUG9F1LXMfJy+j2cpLJ3Rph5y5 j64CIfnm4R5w4RNMz4Ra8d198pd/nmP/TrLGLgwo+UNBgjd6euuMEPFUI3D0fg2l MVmYKYYXp16TYsS9+H6TBOAe5rxPDkHrd1eScBuhu49UE6yeSyWM8DsxVv4T2ah+ QfwPZo3uHgFAE349nDfZJU993ZGNY30= -----END CERTIFICATE-----Generated at Sat Jun 13 15:10:01 2026 by rpki-client