$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa File: 5d321907-381d-32af-ad76-b3fd1b984280.roa (raw, json) Hash identifier: NYnkSPsO7/s9AC5BWAebY2Hxad7KKsV+z1xo+p6ZMIY= Subject key identifier: DA:A3:F4:C2:04:1E:2B:D9:55:1D:67:A2:EA:2C:EB:59:82:C1:AC:84 Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F4328584CF9B776FDC75F7BD4309B8B00 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 31942 IP address blocks: 199.102.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:76:fd:c7:5f:7b:d4:30:9b:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=1f75ab4e-5b18-42a0-a508-97de2c677cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b2:3c:6a:fa:0d:22:e4:0f:1a:d0:1c:69:37: 8f:03:bf:7c:e9:b8:56:b0:1d:1b:21:c1:7e:a3:3f: c9:8c:19:76:95:2a:69:6d:fb:b1:a5:3a:c9:56:29: 6e:c7:8d:16:dc:3b:42:5b:1a:22:a5:cf:74:62:21: aa:0c:de:39:ee:d0:f4:9e:2a:fb:4e:87:89:06:bf: 4d:7d:ff:e2:2b:b3:b1:ef:27:2c:08:77:6a:ad:2b: 11:63:7b:96:f9:db:f8:ee:57:5b:06:2f:d0:81:8a: 91:f6:91:be:ec:5e:2f:d6:d9:d5:8a:53:9d:fc:29: 3b:c6:90:69:bb:53:e6:5a:5d:5a:54:6d:fe:ca:bb: 29:e4:5a:d9:5f:b6:b9:6c:3f:49:82:94:a7:a7:85: 3f:27:6b:dd:bb:c1:86:6b:33:bd:fe:98:e3:db:e1: d9:ce:0e:61:41:29:f5:c9:2a:89:c0:87:c0:33:06: 8b:0c:12:de:85:c4:80:c8:35:63:7f:da:00:1d:98: 72:5f:5c:0b:32:3f:73:eb:48:24:fc:37:80:d7:4d: 3f:81:dc:e3:4e:15:a0:9f:48:7a:a1:cd:40:b6:e8: ea:fc:5f:87:7c:dd:60:d8:ee:a0:97:48:70:03:5f: 1c:76:68:70:b9:27:ec:ec:94:5c:e3:a6:7d:6c:1b: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A3:F4:C2:04:1E:2B:D9:55:1D:67:A2:EA:2C:EB:59:82:C1:AC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 199.102.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:35:e4:e6:a6:17:09:16:30:28:c6:b8:64:58:f1:96:92:1a: 44:80:23:9f:67:07:ab:e9:86:27:6c:ce:df:51:d9:a8:54:19: f7:cb:08:e0:86:31:95:76:4c:6b:b0:ad:72:57:e0:a3:7e:52: da:39:cd:c4:f6:1e:a8:13:30:9a:42:b3:39:3b:44:3b:d6:b4: 95:72:49:73:52:1a:12:2a:40:e6:ca:0e:c2:02:27:bc:9a:57: 49:8c:9f:0d:38:f9:e2:dc:e7:e3:65:09:f2:2b:8f:72:ef:2d: 6a:bd:52:7b:c1:8e:54:fb:5d:36:d9:73:fd:32:0b:42:cc:06: ab:f2:9c:70:15:b7:ac:22:3e:46:f1:37:a7:85:34:c8:89:77: 11:f6:ea:de:89:c0:21:9c:86:1f:ba:97:c5:6e:fd:48:6f:7b: 05:c3:88:33:50:38:93:5b:dd:43:fe:f3:32:77:48:e0:4a:1c: 4f:98:3f:a1:c6:06:fc:87:6b:9d:58:ad:8f:37:e0:cd:83:b3: a8:2f:0d:6e:b9:5a:37:3c:f1:ce:eb:74:ee:71:12:05:96:d5: 1c:dc:f0:61:28:0a:f0:f3:b9:e1:4e:6d:75:31:2f:95:09:bc: c5:fc:87:27:2f:a4:83:de:c6:82:c9:1f:85:b9:6e:dd:7b:00: 05:e8:9c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t3b9x1971DCbiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWY3NWFiNGUtNWIxOC00MmEwLWE1MDgtOTdkZTJjNjc3Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bI8avoNIuQPGtAcaTePA7986bhWsB0bIcF+ oz/JjBl2lSppbfuxpTrJVilux40W3DtCWxoipc90YiGqDN457tD0nir7ToeJBr9N ff/iK7Ox7ycsCHdqrSsRY3uW+dv47ldbBi/QgYqR9pG+7F4v1tnVilOd/Ck7xpBp u1PmWl1aVG3+yrsp5FrZX7a5bD9JgpSnp4U/J2vdu8GGazO9/pjj2+HZzg5hQSn1 ySqJwIfAMwaLDBLehcSAyDVjf9oAHZhyX1wLMj9z60gk/DeA100/gdzjThWgn0h6 oc1Atujq/F+HfN1g2O6gl0hwA18cdmhwuSfs7JRc46Z9bBsodwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqj9MIEHivZVR1nouos61mCwayEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNWQzMjE5MDctMzgxZC0z MmFmLWFkNzYtYjNmZDFiOTg0MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA15OamFwkWMCjGuGRY8ZaSGkSAI59nB6vphidszt9R2ahUGffLCOCG MZV2TGuwrXJX4KN+Uto5zcT2HqgTMJpCszk7RDvWtJVySXNSGhIqQObKDsICJ7ya V0mMnw04+eLc5+NlCfIrj3LvLWq9UnvBjlT7XTbZc/0yC0LMBqvynHAVt6wiPkbx N6eFNMiJdxH26t6JwCGchh+6l8Vu/UhvewXDiDNQOJNb3UP+8zJ3SOBKHE+YP6HG BvyHa51YrY834M2Ds6gvDW65Wjc88c7rdO5xEgWW1Rzc8GEoCvDzueFObXUxL5UJ vMX8hycvpIPexoLJH4W5bt17AAXonF0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:01:33 2026 by rpki-client