$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa File: 8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa (raw, json) Hash identifier: DyNJF6y9uJRa5K4DJ9CsCL50ElefC9/YTXrQkomq3XY= Subject key identifier: 0D:B6:4B:13:62:77:FD:44:25:D8:5A:9D:A7:63:C4:BA:E2:3A:D3:1F Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584C6192A4633DE7832EFE14BE80 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 398395 IP address blocks: 199.253.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:92:a4:63:3d:e7:83:2e:fe:14:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=55bfec69-7ab3-426a-a2f4-c0f0866d3140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:3b:4b:fd:8e:2f:a7:60:4f:a1:3f:d1:88: 2d:c4:4a:41:35:21:1d:80:0d:e1:5f:64:4f:94:a8: 25:52:d4:fd:ef:ea:1d:2a:f4:c5:1f:ce:41:31:44: 78:0f:0e:09:c7:e3:81:59:a8:28:3f:c3:a5:93:a4: 12:0e:3a:27:c1:e9:38:6e:f0:f0:cd:73:f9:09:67: cb:75:28:51:35:bc:e5:d4:1a:0f:c6:d2:b1:1c:f4: 89:5e:ee:92:2e:5d:05:2e:62:bf:d9:e5:d5:d9:5e: c5:69:8a:6f:69:89:67:b4:19:d4:ab:1f:ac:95:b6: 96:84:c9:7f:28:ab:05:69:a2:73:21:36:69:6b:c1: 6d:08:c1:61:06:f5:a5:cb:88:d6:12:2b:d8:82:ef: 5c:da:b1:13:82:1c:a4:fe:8b:03:c4:e7:04:e9:08: d0:15:4d:9c:58:09:15:b4:7c:b5:2a:22:65:7f:7f: c2:4a:ab:15:2f:8a:08:16:6e:39:7d:ab:bc:eb:21: 3d:b8:6f:1b:83:cc:6c:d4:95:ec:d3:59:e4:93:b7: d1:18:70:8d:e3:2b:b4:66:ed:59:a7:6a:04:d3:2e: 5f:57:56:9b:97:c6:17:fb:78:e8:f1:73:46:1f:ec: ba:1a:76:87:b4:9a:92:09:36:51:61:1f:7b:81:eb: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B6:4B:13:62:77:FD:44:25:D8:5A:9D:A7:63:C4:BA:E2:3A:D3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8d36a3ca-660c-37b8-930b-04bd3b2675f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 199.253.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:1c:bd:49:4e:63:02:92:8a:b6:a0:41:8b:4a:7f:5f:79:bf: 58:81:b8:a1:8e:2b:d0:d5:eb:9d:f1:ab:3f:76:a0:8f:94:d5: cd:38:bb:dd:62:5a:6c:7a:6d:01:fb:c6:4a:18:d4:69:73:9c: 6e:1d:16:e0:1a:8a:45:d5:7f:6f:d6:9f:17:98:c4:37:74:ee: f8:b4:37:15:05:f1:c0:28:74:09:40:b7:df:d2:67:98:49:bb: 8c:af:60:e9:73:3c:71:32:3c:9b:6d:a4:4c:3a:d7:0d:5c:66: 17:61:37:3c:62:a0:4f:69:b7:0d:52:18:e4:f8:c8:6b:fa:84: c5:b1:33:0a:d2:52:5b:4a:06:05:05:1b:1b:de:bc:01:c4:2b: de:6a:ab:fd:d5:a9:0b:73:cc:9c:a2:55:8a:e0:ec:6a:2b:1d: e4:9c:d3:ab:ac:26:83:3c:03:7f:38:68:07:6e:cb:bc:d5:09: 77:a4:65:98:f0:7a:2a:84:0d:2d:41:9e:39:3f:c9:56:61:6b: 99:96:46:99:01:fa:a0:2c:9c:49:1c:fa:ab:26:5f:79:2c:e3: 7d:39:11:11:91:99:a1:43:fe:ab:45:59:b4:f3:d1:26:1d:35: 8d:cd:07:3f:66:27:1f:fc:1d:9b:2c:8b:e6:30:6a:c3:f9:29: 6c:1e:16:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkqRjPeeDLv4UvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk NTViZmVjNjktN2FiMy00MjZhLWEyZjQtYzBmMDg2NmQzMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqc7S/2OL6dgT6E/0YgtxEpBNSEdgA3hX2RP lKglUtT97+odKvTFH85BMUR4Dw4Jx+OBWagoP8Olk6QSDjonwek4bvDwzXP5CWfL dShRNbzl1BoPxtKxHPSJXu6SLl0FLmK/2eXV2V7FaYpvaYlntBnUqx+slbaWhMl/ KKsFaaJzITZpa8FtCMFhBvWly4jWEivYgu9c2rETghyk/osDxOcE6QjQFU2cWAkV tHy1KiJlf3/CSqsVL4oIFm45fau86yE9uG8bg8xs1JXs01nkk7fRGHCN4yu0Zu1Z p2oE0y5fV1abl8YX+3jo8XNGH+y6GnaHtJqSCTZRYR97gevodwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA22SxNid/1EJdhanadjxLriOtMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGQzNmEzY2EtNjYwYy0z N2I4LTkzMGItMDRiZDNiMjY3NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0cvUlOYwKSiragQYtKf195v1iBuKGOK9DV653xqz92oI+U1c04u91i Wmx6bQH7xkoY1GlznG4dFuAaikXVf2/WnxeYxDd07vi0NxUF8cAodAlAt9/SZ5hJ u4yvYOlzPHEyPJttpEw61w1cZhdhNzxioE9ptw1SGOT4yGv6hMWxMwrSUltKBgUF GxvevAHEK95qq/3VqQtzzJyiVYrg7GorHeSc06usJoM8A384aAduy7zVCXekZZjw eiqEDS1Bnjk/yVZha5mWRpkB+qAsnEkc+qsmX3ks4305ERGRmaFD/qtFWbTz0SYd NY3NBz9mJx/8HZssi+YwasP5KWweFsE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:04 2026 by rpki-client