$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa File: 5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa (raw, json) Hash identifier: KSAGiG7DlMeCD01FlNTOLcsXWx4BRHSaXeLv/pjoakE= Subject key identifier: 6F:AE:D3:21:47:BE:82:FC:35:04:CE:2D:12:56:D9:8E:80:B6:D1:2A Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584CCBA778D0CDC6BE156A2C0B80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 11404 IP address blocks: 199.59.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:78:d0:cd:c6:be:15:6a:2c:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=a0d372d7-aa76-44c4-b7ee-9ef79f072b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:57:5b:60:56:53:5f:48:6e:53:2f:ef:5f: 32:aa:50:d8:eb:ab:5b:2d:50:1c:9e:35:a9:37:24: 61:15:9f:09:40:2f:94:29:96:8f:04:34:05:f6:b8: df:56:ec:a2:f5:33:34:5a:c4:a6:dd:1d:33:fc:2c: 9f:7e:88:6f:12:68:c1:4a:13:ca:ff:93:0e:98:48: 86:64:e1:6a:54:bc:d0:f9:e7:0d:0f:d3:9a:3c:af: 10:b1:2f:2b:a3:c4:97:a4:1c:f2:38:68:2b:e8:ec: 36:1f:b5:7d:15:4b:51:fe:10:13:d1:e7:27:b6:70: e1:3c:46:8a:e6:45:9b:bd:93:4d:df:cd:ed:bb:63: 34:cb:de:92:19:7f:85:67:24:29:71:7a:5f:ff:ac: e4:b8:ac:0a:70:d6:ba:86:35:ed:7f:b2:24:a4:24: 3f:be:2f:4c:4e:f5:f4:7c:e4:fa:d9:d4:65:27:75: e7:62:55:76:e9:6f:4e:c6:b2:a5:c8:55:4b:f0:d5: 24:08:7a:5c:01:6b:ed:07:da:af:42:b1:00:8a:a5: 1c:96:d2:09:0d:88:51:5c:5d:3c:39:af:46:79:93: a3:15:86:ce:c7:d2:99:73:7f:aa:0b:83:64:cc:00: 27:31:c9:41:0a:71:bc:59:0b:24:72:5d:cc:15:0c: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AE:D3:21:47:BE:82:FC:35:04:CE:2D:12:56:D9:8E:80:B6:D1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5e1f88d7-bee0-3195-bd82-daf1df8d8e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 199.59.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:af:e8:64:d1:b2:87:1b:a5:64:12:b7:8a:a1:f6:2c:bb:58: b8:a4:15:3b:25:26:a4:34:01:d4:c7:05:0c:3a:5f:21:8e:1d: fb:f5:ee:ba:99:f1:af:bb:4c:5e:1d:a5:51:4d:af:b3:57:ac: 80:48:54:c2:57:a6:da:4b:7d:dc:bc:89:3f:cc:aa:94:4e:ae: 95:cf:c1:37:ab:7e:d7:05:e5:79:65:65:ce:f4:64:cd:1a:55: 32:9e:dd:b8:e5:ca:86:a3:41:60:4f:96:77:41:11:81:63:0a: 50:db:c6:4d:cc:aa:ea:e5:64:4e:40:35:dd:5a:c8:fd:32:14: 08:b5:ec:09:90:49:b1:b0:6f:aa:94:4a:d6:28:36:2c:17:53: d7:8b:89:96:6a:0a:90:87:76:86:31:53:71:43:4b:fa:07:f9: 36:61:de:9c:da:ee:c2:81:09:a1:8e:ef:09:d2:b3:25:5c:98: 6d:e0:a5:1b:a9:e3:b2:9d:9c:f2:6c:eb:f4:84:e3:cf:09:36: 64:a4:06:fe:ca:79:55:0d:09:06:67:5e:c0:b8:3e:80:6b:61: a3:b6:f9:d2:0e:04:55:d1:31:ce:60:f7:9d:d8:9f:65:e5:a7: 21:94:12:8c:90:6b:d0:e6:d4:a6:c0:14:58:6b:62:82:69:8a: a7:e7:6d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp3jQzca+FWosC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk YTBkMzcyZDctYWE3Ni00NGM0LWI3ZWUtOWVmNzlmMDcyYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkplXW2BWU19IblMv718yqlDY66tbLVAcnjWp NyRhFZ8JQC+UKZaPBDQF9rjfVuyi9TM0WsSm3R0z/CyffohvEmjBShPK/5MOmEiG ZOFqVLzQ+ecND9OaPK8QsS8ro8SXpBzyOGgr6Ow2H7V9FUtR/hAT0ecntnDhPEaK 5kWbvZNN383tu2M0y96SGX+FZyQpcXpf/6zkuKwKcNa6hjXtf7IkpCQ/vi9MTvX0 fOT62dRlJ3XnYlV26W9OxrKlyFVL8NUkCHpcAWvtB9qvQrEAiqUcltIJDYhRXF08 Oa9GeZOjFYbOx9KZc3+qC4NkzAAnMclBCnG8WQskcl3MFQwtwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+u0yFHvoL8NQTOLRJW2Y6AttEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNWUxZjg4ZDctYmVlMC0z MTk1LWJkODItZGFmMWRmOGQ4ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+v6GTRsocbpWQSt4qh9iy7WLikFTslJqQ0AdTHBQw6XyGOHfv17rqZ 8a+7TF4dpVFNr7NXrIBIVMJXptpLfdy8iT/MqpROrpXPwTerftcF5XllZc70ZM0a VTKe3bjlyoajQWBPlndBEYFjClDbxk3MqurlZE5ANd1ayP0yFAi17AmQSbGwb6qU StYoNiwXU9eLiZZqCpCHdoYxU3FDS/oH+TZh3pza7sKBCaGO7wnSsyVcmG3gpRup 47KdnPJs6/SE488JNmSkBv7KeVUNCQZnXsC4PoBrYaO2+dIOBFXRMc5g953Yn2Xl pyGUEoyQa9Dm1KbAFFhrYoJpiqfnbU8= -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:46 2026 by rpki-client