$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa File: c23ac558-69f5-3c92-9a4a-e12e37e77616.roa (raw, json) Hash identifier: xcs2/QbOgaq1NTDO41sDBMVT//MOmAM2nGmBoM2y/jk= Subject key identifier: D3:9C:CD:CE:45:5E:28:97:96:32:55:E6:89:F3:2B:1D:B5:84:7F:A3 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584C8476D18A63A7C2B46905A2F0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 14297 IP address blocks: 199.189.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:d1:8a:63:a7:c2:b4:69:05:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=9e816d92-ef82-4daf-bb98-d83cdee256c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:5b:6f:4b:0d:be:a4:db:95:bd:97:38:c2: 7f:7c:35:6e:15:80:23:44:a5:c3:bf:1a:f5:ea:9c: 99:86:15:ee:d9:f2:c0:31:7c:c3:0a:02:b7:40:ec: 13:57:17:d7:01:46:e4:c5:25:11:e6:a3:85:8a:ee: 13:ac:15:d4:7c:7f:cc:c5:37:b8:c4:4d:70:c7:04: df:e9:3c:31:20:98:65:f5:95:c9:de:18:d6:cc:6d: 8d:42:bf:82:8a:7d:62:c4:1d:e4:9f:d8:ae:19:db: 20:97:1f:ec:9d:33:a3:17:ea:10:2f:c5:53:57:9e: 2f:0a:1b:31:ba:27:c0:93:61:51:47:d3:63:d2:c3: c0:3f:92:2a:9e:b5:20:ec:fa:53:3a:ee:51:e1:7e: 70:3a:37:fa:59:06:3c:c4:a2:69:ad:11:54:16:e8: 76:19:04:14:88:1e:6f:b1:5e:9f:c3:b8:cc:cf:f5: 36:5f:52:2d:55:07:bf:1a:7f:07:ea:ff:73:cf:ce: 1d:c0:60:d1:28:2a:48:17:d3:99:a1:cb:62:46:8f: 6c:7b:26:81:59:33:5f:ae:d7:8f:b5:d8:30:9a:26: 18:0c:7c:54:94:c7:98:79:6e:05:8a:41:53:27:bd: f5:a1:00:86:44:46:13:35:34:e8:46:6f:ae:9f:ca: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9C:CD:CE:45:5E:28:97:96:32:55:E6:89:F3:2B:1D:B5:84:7F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 199.189.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:92:0d:03:ad:7e:cf:1c:af:c6:87:12:37:94:ae:24:42:2b: 98:9c:c5:b7:ed:5c:e9:ec:fa:2b:1c:1a:2d:a8:38:6d:e9:1f: 91:c5:96:7f:c6:3b:21:5f:dc:0c:0d:55:26:d5:58:00:82:77: 72:1f:eb:c4:13:5b:92:3a:91:63:52:f3:88:e0:c4:aa:88:c8: aa:11:d7:ab:97:20:9e:41:61:e4:90:93:54:77:77:f0:24:28: 3f:e4:51:99:2f:0e:79:5b:02:f1:8e:7f:76:13:59:6a:50:e0: fd:9b:b6:be:0f:07:e6:a9:c5:b4:4f:10:9f:42:d7:c9:b0:c0: f6:60:c8:d1:e8:57:42:50:8e:49:4b:e8:81:0c:09:6f:94:43: 90:b3:c2:da:4f:c6:5c:3e:8a:3d:27:00:6c:f3:f6:26:1c:b3: d4:0b:3a:c1:ef:07:52:16:ae:01:93:8c:43:bb:2f:df:28:ad: bd:35:e4:6b:8c:59:81:0e:28:d1:21:78:7a:7d:fe:56:dd:8c: 80:a9:8c:02:91:1a:4f:3a:fd:f5:af:2b:24:ae:23:22:14:dd: b0:7b:90:ad:69:de:a3:67:f7:8d:99:ce:9e:56:fd:c3:bf:cd: 0c:1b:45:f3:f7:92:ff:b3:34:6d:85:0c:40:ca:c5:28:51:7f: 86:8f:04:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtGKY6fCtGkFovAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk OWU4MTZkOTItZWY4Mi00ZGFmLWJiOTgtZDgzY2RlZTI1NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi5bb0sNvqTblb2XOMJ/fDVuFYAjRKXDvxr1 6pyZhhXu2fLAMXzDCgK3QOwTVxfXAUbkxSUR5qOFiu4TrBXUfH/MxTe4xE1wxwTf 6TwxIJhl9ZXJ3hjWzG2NQr+Cin1ixB3kn9iuGdsglx/snTOjF+oQL8VTV54vChsx uifAk2FRR9Nj0sPAP5IqnrUg7PpTOu5R4X5wOjf6WQY8xKJprRFUFuh2GQQUiB5v sV6fw7jMz/U2X1ItVQe/Gn8H6v9zz84dwGDRKCpIF9OZoctiRo9seyaBWTNfrteP tdgwmiYYDHxUlMeYeW4FikFTJ731oQCGREYTNTToRm+un8rK7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOczc5FXiiXljJV5onzKx21hH+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzIzYWM1NTgtNjlmNS0z YzkyLTlhNGEtZTEyZTM3ZTc3NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOSDQOtfs8cr8aHEjeUriRCK5icxbftXOns+iscGi2oOG3pH5HFln/G OyFf3AwNVSbVWACCd3If68QTW5I6kWNS84jgxKqIyKoR16uXIJ5BYeSQk1R3d/Ak KD/kUZkvDnlbAvGOf3YTWWpQ4P2btr4PB+apxbRPEJ9C18mwwPZgyNHoV0JQjklL 6IEMCW+UQ5CzwtpPxlw+ij0nAGzz9iYcs9QLOsHvB1IWrgGTjEO7L98orb015GuM WYEOKNEheHp9/lbdjICpjAKRGk86/fWvKySuIyIU3bB7kK1p3qNn942Zzp5W/cO/ zQwbRfP3kv+zNG2FDEDKxShRf4aPBKI= -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:52 2026 by rpki-client