$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa File: 0bf8b83b-53a3-3a18-9359-38a07be7967b.roa (raw, json) Hash identifier: zpfKVc/6NUltUUVivy7loRkm5wCvNBx+/9K05LjG9zw= Subject key identifier: 5C:1B:90:3B:4D:AB:88:62:43:53:97:CE:E0:77:9B:7A:6A:F8:F3:FF Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584CBC4C6BC65B9BEF94D75B1C00 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa Signing time: Tue 03 Feb 2026 02:00:31 +0000 ROA not before: Tue 03 Feb 2026 02:00:31 +0000 ROA not after: Mon 04 May 2026 01:00:31 +0000 asID: 394708 IP address blocks: 199.38.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bc:4c:6b:c6:5b:9b:ef:94:d7:5b:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Feb 3 02:00:31 2026 GMT Not After : May 4 01:00:31 2026 GMT Subject: CN=f2b85ffa-f93c-4201-a588-f444dad38c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:82:b8:db:33:ab:d9:ba:57:0b:ec:79:e8: 4a:cd:13:3a:93:c2:91:1a:58:17:a0:68:c2:f9:bc: f6:2b:f1:9c:dd:3d:7d:0b:8e:67:80:72:54:0c:c8: 75:64:e8:f8:49:dc:16:7f:df:3a:d0:87:a3:e9:9b: fe:b7:df:e9:e3:ff:98:4d:ea:b8:d3:99:38:cc:ff: cb:c3:5e:90:0c:a1:18:de:bb:dc:7b:4b:8b:1b:88: dd:14:85:40:99:c7:bb:a3:76:8f:80:eb:76:3a:f5: b0:2d:00:22:d7:8f:c6:b2:5c:88:b2:0d:d9:be:0c: b3:2b:73:2e:4a:af:a1:0f:49:1c:5d:b7:aa:9d:4f: cc:37:9b:82:64:93:64:46:fe:15:d5:8a:74:f4:c0: f1:07:34:ae:67:1c:e2:54:00:8b:53:fa:24:09:d8: 6d:62:44:25:4d:33:12:7d:e8:2c:1a:60:58:43:55: ef:e9:c7:36:f6:da:49:23:ee:9e:84:3a:5c:10:56: a6:53:9e:2a:1d:a7:1f:73:76:60:fc:a3:96:59:7d: e4:1d:9c:7c:1e:fb:fc:f2:f4:2c:4f:ed:01:bd:e3: cb:4d:9d:21:86:e9:4e:ef:16:22:8c:cd:d9:87:cc: 24:b3:73:fd:45:37:5a:30:dd:d5:f4:17:cf:73:62: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1B:90:3B:4D:AB:88:62:43:53:97:CE:E0:77:9B:7A:6A:F8:F3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/0bf8b83b-53a3-3a18-9359-38a07be7967b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:10:25:3e:e5:f1:57:71:a9:54:aa:0e:8b:9a:b4:88:6a:cb: b0:79:5b:2f:24:a4:9b:c7:e6:2d:a6:1c:14:b0:1b:c8:33:8d: 16:e4:70:62:76:10:96:69:17:15:32:50:48:66:a0:3d:b2:c7: 32:8a:fd:88:78:7f:e3:b7:df:fc:5e:7c:b7:b1:88:46:a2:c4: d0:e6:a2:a3:8e:7a:06:07:e9:97:4a:b1:b3:50:b5:8b:40:bf: ce:2b:70:3c:6e:d9:c1:aa:c2:ad:bd:ae:00:4d:ae:68:42:3e: 43:d0:5c:37:00:11:f2:97:2f:ee:66:af:6d:55:36:14:db:ef: 47:08:a6:6d:3b:eb:21:87:eb:4b:ac:c6:e2:a3:52:fb:f1:61: bd:dc:f4:00:52:33:87:ea:c1:16:bc:ac:91:1e:9c:97:ca:0e: 36:90:00:50:87:a3:d3:fc:be:8f:5f:75:60:63:d6:db:61:d3: 68:2e:a5:d5:55:03:90:6c:89:b7:95:1b:05:d7:3b:a4:48:a4: 79:cc:6b:e8:4b:5e:74:68:3c:71:e0:30:3f:ae:62:44:4c:6d: 77:7c:23:a2:3e:97:75:b7:81:86:8e:cd:ea:83:58:d5:b1:75: 34:a2:8b:b5:19:cc:4a:a5:d7:a8:7d:66:bb:dd:5d:07:13:73: cd:8e:36:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy8TGvGW5vvlNdbHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDIwMzAyMDAzMVoXDTI2MDUwNDAxMDAzMVowLzEtMCsGA1UEAxMk ZjJiODVmZmEtZjkzYy00MjAxLWE1ODgtZjQ0NGRhZDM4YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGqCuNszq9m6VwvseehKzRM6k8KRGlgXoGjC +bz2K/Gc3T19C45ngHJUDMh1ZOj4SdwWf9860Iej6Zv+t9/p4/+YTeq405k4zP/L w16QDKEY3rvce0uLG4jdFIVAmce7o3aPgOt2OvWwLQAi14/GslyIsg3ZvgyzK3Mu Sq+hD0kcXbeqnU/MN5uCZJNkRv4V1Yp09MDxBzSuZxziVACLU/okCdhtYkQlTTMS fegsGmBYQ1Xv6cc29tpJI+6ehDpcEFamU54qHacfc3Zg/KOWWX3kHZx8Hvv88vQs T+0BvePLTZ0hhulO7xYijM3Zh8wks3P9RTdaMN3V9BfPc2JGbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwbkDtNq4hiQ1OXzuB3m3pq+PP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMGJmOGI4M2ItNTNhMy0z YTE4LTkzNTktMzhhMDdiZTc5NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIQJT7l8VdxqVSqDouatIhqy7B5Wy8kpJvH5i2mHBSwG8gzjRbkcGJ2 EJZpFxUyUEhmoD2yxzKK/Yh4f+O33/xefLexiEaixNDmoqOOegYH6ZdKsbNQtYtA v84rcDxu2cGqwq29rgBNrmhCPkPQXDcAEfKXL+5mr21VNhTb70cIpm076yGH60us xuKjUvvxYb3c9ABSM4fqwRa8rJEenJfKDjaQAFCHo9P8vo9fdWBj1tth02gupdVV A5BsibeVGwXXO6RIpHnMa+hLXnRoPHHgMD+uYkRMbXd8I6I+l3W3gYaOzeqDWNWx dTSii7UZzEql16h9ZrvdXQcTc82ONoU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:01 2026 by rpki-client